Roundcube Pre-Auth SQLi CVE-2026-48842 Exploited
CVE-2026-48842 Roundcube pre-auth SQLi confirmed exploited; TACACS+ protocol flaw threatens AAA; CISA adds WSO2 CVE-2026-5430 CVSS 9.8 to KEV.
Posts tagged: Ransomware
GitLab CVSS 10.0 RCE - CVE-2026-85706 Patch Now
CVE-2026-85706 GitLab CVSS 10.0 path traversal enables unauthenticated RCE. Plus Cisco FMC zero-day exploited by Qilin and dual Check Point VPN 9.8s.
Windows IKE RCE Exploited - CVE-2026-65xxx in the Wild
CVE-2026-65xxx Windows IKE Extension RCE now exploited; Cl0p names 40+ Windchill victims; DOJ charges 17 Iranian Mabna Institute hackers.
GitLab Unauthenticated RCE - CVE-2026-19478 CVSS 9.4
CVE-2026-19478 GitLab GraphQL RCE hits CI/CD pipelines. Windows Task Host exploited by ransomware. City Forum scrapes 3.6M Azure records.
vCenter Zero-Day Drops Babuk Ransomware - CVE-2026-59310
CVE-2026-59310 vCenter RCE exploited by China-nexus APT for Babuk ransomware. Plus Clop claims GE and Philips, SAP Commerce Cloud hit in 3 days.
US Greenlights Private Hack-Backs - GeoServer Zero-Day
White House authorizes private hack-back ops against cybercrime gangs. GeoServer zero-day exploited with no patch. Shell loses 89GB to Clop exfiltration.
Edge Appliances Under Active Attack - KEV Adds Three
CISA adds Progress LoadMaster and SonicWall SMA1000 CVSS 10 to KEV; FBI warns of Gunra ransomware hitting FortiOS and Schneider Electric flaws.
TP-Link Omada ZTP Chain - 15 CVEs to Full Takeover
15 TP-Link Omada ZTP vulnerabilities chain into full network takeover. Talos analyzes AI-generated malware prompt logs.
SonicWall SMA1000 Under Active Ransomware Exploitation
INC ransomware exploits SonicWall SMA1000 for root access; CVE-2026-18577 N-central auth bypass re-patched; Midnight Blizzard steals creds via hotel Wi-Fi.
Coca-Cola Fairlife Breach - Anubis Ransomware Claims Data
Anubis ransomware breaches Coca-Cola's Fairlife subsidiary. DentaQuest exposes 23M healthcare records. Captive portal phishing targets M365 credentials.