soc

CISA Flags SharePoint RCE (CVE-2026-45659) for Active Exploitation CISA has added CVE-2026-45659 to its Known Exploited Vulnerabilities (KEV) catalog as of July 1, 2026, indicating active exploitation. The vulnerability

CVE-2026-8037: Progress Kemp LoadMaster RCE Exploited in the Wild A critical vulnerability tracked as CVE-2026-8037 affects Progress Kemp LoadMaster (Progress ADC / LoadMaster). The issue is a pre-auth Remote Code Execut

SOCRadar Links FortiBleed Campaign to INC and Lynx Ransomware Operations SOCRadar’s Threat Research Unit (STRU) has linked the FortiBleed credential-harvesting campaign to two active ransomware-as-a-service operations,

Adobe ColdFusion and Campaign Classic: Critical RCE Flaws Among Multiple CVSS 10.0 Issues Adobe has published two “Priority 1” security bulletins, covering a total of 12 vulnerabilities in Adobe ColdFusion and Adobe Camp

2026 SANS CTI Survey Report: Key Findings on CTI’s Influence Gap Cyber threat intelligence (CTI) has arrived. It’s embedded in security programs, staffed by dedicated teams, supported by AI, and recognized at the executi

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-45659 Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing […]

CVE-2026-8451 Adds a New NetScaler Memory Overread to the CitrixBleed Pattern Citrix has patched CVE-2026-8451, a vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The issue is an insufficient input val

CVE-2026-48558: SimpleHelp OIDC Auth Bypass Used to Deploy Infostealer Payloads CVE-2026-48558 is a critical authentication bypass affecting SimpleHelp, a remote support and RMM (remote monitoring and management) platfor

Oracle EBS Flaw CVE-2026-Adresse geschuetztOracle Payments to Takeover CVE-2026-46817 is a critical vulnerability in Oracle E-Business Suite (EBS) Oracle Payments, specifically in the File Transmission component. Oracle rat

CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-48558 SimpleHelp Authentication Bypass Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise. Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on […]