Recent Advisories

Severity ID Title Vendor Product Date Type
NONE THN:0F3A59F1E34...

What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks_THN:0F3A59F1E3452EA39C0C4A0186BDF45B

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9_WTd_LhWXwvu2jTcVVVgE_IpLISA8vfn0awG8fVwVv_vxx1LvLU7XOxFCtSLMbiP6JKPQfFMdpA7cRJy0P...

N/A N/A THN
NONE 239E5AE1-9D64-

Exploit for CVE-2026-40564_239E5AE1-9D64-5FA4-BF10-CDADBFC498CF

CVE-2026-40564: SSRF via FlinkSessionJob.spec.job.jarURI in flink-kubernetes-operator The Apache Flink Kubernetes Operator does not check the spec....

N/A N/A GITHUBEXPLOIT
NONE HACKREAD:0AA5DC...

The Deliverability Problem: How New Platforms Are Solving Inbox Placement_HACKREAD:0AA5DC01AED031B29400C6014D4FA8BE

Email still reaches more people than any other digital channel. Getting it to actually land in the inbox…

N/A N/A HACKREAD
NONE 2A42BD6A-0547-

Y2X_2A42BD6A-0547-5EE5-B367-56F4C53336D5

Y2eXploit Y2X --- Overview Y2eXploit Y2X is an autoloader designed to simplify and organize payload execution within the Y2JB ecosystem. It provide...

N/A N/A GITHUBEXPLOIT
NONE THN:C4034E31C0B...

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets_THN:C4034E31C0B48BD77241B947551DF108

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgUbmZyAOVZRXrWddG8PMuXbVyex9s5HPD2cH8rDjYP6EHuVadkyj72NdN9PreAnGX9iOCVGxWI2YmSLu818V...

N/A N/A THN
NONE SECURELIST:0F39...

What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant_SECURELIST:0F3916E88E9B5224259BBAC39D5963A2

![](https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2026/05/28143737/SL-container-security-01-featured-scaled-1-990x400.jpg) ## ...

N/A N/A SECURELIST
NONE THN:542858AF03A...

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels_THN:542858AF03AD63381599625C01317BB6

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJfUl1K-os1XyLN-SBt6PgMia_jFG03ArRa3H0FI2hsiUqNa3lqSWY2NJcvOhY33TArSKJxeookUpkATdERU...

N/A N/A THN
NONE MSSECURE:7DF62C...

Typosquatted npm packages used to steal cloud and CI/CD secrets_MSSECURE:7DF62CBD211C4009099D29D730CB02CF

In this article 1. Attack chain overview 1. The lure: typosquats and spoofed metadata 2. Execution: npm lifecycle hook abuse 3. G...

N/A N/A MSSECURE
NONE 96A4488F-33E5-

Notepad-8.9.6-PoC_96A4488F-33E5-52B1-8A37-193338512515

Notepad++ PoCs CVE-2026-48770 / CVE-2026-48778 / CVE-2026-48800 Proof-of-concept scripts for three vulnerabilities in Notepad++ 0xc0000005 Notepad+...

N/A N/A GITHUBEXPLOIT
NONE TALOSBLOG:4FE4A...

Less panic patching, more precision_TALOSBLOG:4FE4A1E5153F51581C603B5FCEB8D657

![Less panic patching, more precision](https://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/images/2026/05/threat_source-3...

N/A N/A TALOSBLOG