New malicious web shell from the Tropic Trooper group is found in the Middle East
60
60
60
Containers on fire: from container escapes to supply chain attacks
60
60
60
60
60
CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)
60
60
Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203)
60
60
60
60
60
60
60
60
60
57
Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams
60
February 2026 CVE Landscape: 13 Critical Vulnerabilities Mark 43% Drop from January
60
60
60
60
60
NSA Discovers New Vulnerabilities Affecting Microsoft Exchange Servers
60
60
Suspected Chinese Group Calypso APT Exploiting Vulnerable Microsoft Exchange Servers
60
Microsoft Plugs Nearly 1,000 Security Holes
Microsoft's September Patch Tuesday fixes a record 974 flaws, including two actively exploited Windows zero-days and critical DNS and Windows Shell bugs.
Microsoft released fixes for 974 vulnerabilities, its largest-ever monthly patch batch, bringing the 2026 total above 2,600. Two zero-day privilege elevation flaws, CVE-2026-81963 and CVE-2026-85880, are being actively exploited. Critical bugs include CVE-2026-69730, an unauthenticated DNS weakness in Windows Server 2012 onward and Windows 10 deemed likely to be exploited, and CVE-2026-69829, a CVSS 9.8 Windows Shell remote code execution flaw requiring no privileges or user interaction. Microsoft and other vendors credit AI-assisted discovery for the growing patch volumes.
84
August 2026 CVE Landscape
Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.
Recorded Future's Insikt Group identified 73 high-impact vulnerabilities in August 2026, 43 rated Very Critical, spanning 45 vendors with Microsoft accounting for roughly 11%. 31 vulnerabilities surfaced via CISA's KEV catalog, with others validated via open sources, vendor telemetry, and honeypot data. New Nuclei detection templates were released for CVE-2025-62593 (Ray), CVE-2026-72898 (Metabase), and CVE-2026-9198 (IBM Langflow). The report also highlights two AI-assisted operations: UAT-10147 exploited Zimbra, AjaxPro, Nacos, and Telerik servers before using DeepAudit and PentestGPT post-compromise, while a separate Chinese-speaking actor weaponized Hermes Agent and DeepSeek in a failed attempt.
68
60
60
60
60
60
60
60
60
60