en
GeoServer's jsonArrayContains Unauthenticated SQL Injection and RCE Zero-Day
Technical breakdown of the actively exploited jsonArrayContains SQL injection zero-day in GeoServer leading to PostGIS/Oracle database compromise and RCE.
Threat Intel
en
Swiss BIT Breach: What Happened to the Federal IT Agency's SharePoint Servers
An investigation into how threat actors exploited on-premises SharePoint patch latency to compromise 200 Swiss federal government IT accounts.
en
CVE-2026-8037: Progress Kemp LoadMaster's Pre-Authentication Root Command Injection
Technical root cause and active scanning telemetry for the CVSS 9.6 pre-auth root command injection in Progress Kemp LoadMaster appliances.
en
CVE-2026-20349: Cisco ASA and FTD's Actively Exploited VPN Denial-of-Service Flaw
Technical breakdown of the actively exploited remote unauthenticated VPN denial-of-service vulnerability in Cisco ASA and FTD firewalls.
en
CVE-2026-72898: Metabase's Unauthenticated SQL Injection Zero-Day
Technical root cause and remediation for the unauthenticated CVSS 10.0 SQL injection in Metabase password reset endpoint exploited as a zero-day.
en
CVE-2026-68820: Microsoft Windows AFD.sys Zero-Day Exploited by Lazarus
How Lazarus Group weaponized a Windows afd.sys kernel zero-day for 5 weeks in Operation Dream Job to bypass EDR defenses.
en
Security Roundup: Lazarus's Windows Zero-Day, a Critical Metabase SQL Injection, and a Swiss Government SharePoint Breach (Week of August 10, 2026)
Weekly threat intelligence briefing: Lazarus 5-week Windows zero-day, Metabase CVSS 10.0 unauth SQL injection, Cisco firewall crashes, and Swiss BIT breach.
en
Liechtenstein Breach: What Happened to the Beneficial-Ownership Register Hackers Accessed
How attackers breached Liechtenstein's beneficial-ownership register, exposing 31,000 corporate and trust entity records.
en
CVE-2026-20253: Splunk Enterprise's Unauthenticated Arbitrary File Write Flaw
Technical breakdown of the unauthenticated PostgreSQL sidecar file write/truncation flaw in Splunk Enterprise.
en
CVE-2026-50751: Check Point VPN Zero-Day Exploited by Qilin Ransomware
How Qilin ransomware operators exploited a Check Point VPN zero-day to gain initial network access.
en
CVE-2026-9198: IBM Langflow's Unauthenticated Remote Code Execution Chain
Technical root cause and active exploitation details for the CVSS 9.8 unauthenticated remote code execution flaw in IBM Langflow.
en
Security Roundup: IBM Langflow's Actively Exploited RCE Chain, a Qilin-Linked Check Point VPN Zero-Day, and a 31,000-Entity Government Breach (Week of August 3, 2026)
Weekly threat intelligence briefing: IBM Langflow CVSS 9.8 RCE, Check Point Qilin zero-day, Splunk Enterprise file write, and Liechtenstein breach.