Recent Advisories

Severity ID Title Vendor Product Date Type
NONE KREBS:558FBF80A...

Scattered Spider Hackers Plead Guilty on Day 1 of Trial_KREBS:558FBF80A49DC11494BE85348DDCC692

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled **Transport for L...

N/A N/A KREBS
NONE HACKREAD:A347AF...

‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking_HACKREAD:A347AF3E1F9C0D0966C01F83C68F00C9

Novee Security reveals Cordyceps, a CI/CD vulnerability in GitHub Actions workflows that let anonymous users poison builds and expose tokens across...

N/A N/A HACKREAD
NONE THN:C2C90355361...

FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation_THN:C2C9035536172E70A97387AE750E6A8D

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhJkhDD5qINhfAhBFXG2C13raQF6T6zAOmnHlArhnLUP5z0ifBzpyq6M_4n11cgynQfZW0mxJWnYU-TDYSpKQ...

N/A N/A THN
NONE FILIPPOIO:7E5AA...

Vulnerability Reports Are Not Special Anymore_FILIPPOIO:7E5AA1729D42CFF70B3B99F0B9C1A508

A requirement for staying sane while working in public as an open source maintainer is realizing that every issue, PR, and piece of feedback is a p...

N/A N/A FILIPPOIO
NONE QUALYSBLOG:FDC7...

3 Paths to Upgrade Windows 11 before 24H2 End of Servicing (EOL)_QUALYSBLOG:FDC705F50F73787D6AF114F35B4AE2FD

* * * #### Key Takeaways * Windows 11 24H2 reaches the end of servicing on October 13, 2026, making timely enterprise upgrades critical. * En...

N/A N/A QUALYSBLOG
NONE THN:70DA639E50D...

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents_THN:70DA639E50D29B870448D12D6323F7DF

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgb14v3ddlfpybc15jRbk-cwHI-0S8BAzdp8Ix83L5ZCZ4AB8gCySG7J4tZr4od9q3Jbuic1a4J29VAvRcdSQ...

N/A N/A THN
NONE THN:5382CB6B456...

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration_THN:5382CB6B456E3DF10A48275317E6FC76

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhoC7KFWoDGkSi-UzAyKNUkw-Ogs4oy2tCOAYXiYAAkqEUC1WMotLAE1GUwoWApfXK3prWVctTP05aLGjru0h...

N/A N/A THN
CRITICAL 9.8 TRENDMICROBLOG:...

From Langflow to Monero: Inside CVE-2026-33017 Cryptominer_TRENDMICROBLOG:D6D82F6102E243699FEABC242F869EE4

We tracked a cryptocurrency-mining campaign exploiting CVE-2026-33017, which revealed how threat actors are now scanning exposed AI application inf...

N/A N/A TRENDMICROBLOG
NONE HACKREAD:A41968...

New CryptoBandits Malware Uses USB Drives and Tor to Steal Crypto_HACKREAD:A419683ACF762DB1E281C5DEA5248AF1

Microsoft researchers warn of a new dual-action cryptocurrency clipper (CryptoBandits Malware) spreading through USB devices to alter wallet addres...

N/A N/A HACKREAD
NONE MALWAREBYTES:32...

Meta pauses controversial employee-tracking program after security review_MALWAREBYTES:3217C4695DDE3B50CC9820CDF4D81613

Meta has paused a controversial employee‑tracking program after an internal security review found that highly granular keystroke and screen‑capture...

N/A N/A MALWAREBYTES