AWS resolves high-severity vulnerability CVE-2026-92943 in AWS IoT Device SDK for Python allowing adversary-in-the-middle telemetry interception and message spoofing.
Schneider Electric and CISA warn of improper authentication validation in PowerChute Serial Shutdown allowing unauthorized actors to disrupt critical infrastructure power.
Threat actors weaponize improper condition check flaw CVE-2025-39682 in Linux kernel kTLS receive path, triggering out-of-bounds corruption in multi-tenant workloads.
CVE-2026-80844 · CVE-2026-81000+2
CVE-2026-86831
AWS resolves high-severity privilege escalation flaw CVE-2026-86830 in Temporary Elevated Access Management (TEAM) for IAM Identity Center.
Aisha Noor
ABB and CISA issue security advisory for CVE-2026-31431 in Ability Edgenius edge controllers enabling container breakout and local root takeover.
Mei-Lin Chen
CISA adds Linux kernel cryptographic socket race condition vulnerability CVE-2025-39964 to KEV catalog following active root privilege escalation attacks.
CST Newsroom
CISA adds Linux kernel ebtables SNAT memory corruption flaw CVE-2026-53266 (CVSS 8.8) to KEV catalog following active hypervisor privilege escalation.
Mei-Lin Chen
CISA orders federal agencies to patch Ubiquiti UniFi OS vulnerability CVE-2026-34909 enabling unauthenticated network configuration extraction and takeover.
Priya Raman
CISA adds Linux kernel cgroups v1 release_agent vulnerability CVE-2022-0492 to KEV catalog as threat actors weaponize container breakout exploits.
CST Newsroom
AWS resolves high-severity vulnerability CVE-2026-92943 in AWS IoT Device SDK for Python allowing adversary-in-the-middle telemetry interception and message spoofing.
Daniel Okafor
Schneider Electric and CISA warn of improper authentication validation in PowerChute Serial Shutdown allowing unauthorized actors to disrupt critical infrastructure power.
Priya Raman
Threat actors weaponize improper condition check flaw CVE-2025-39682 in Linux kernel kTLS receive path, triggering out-of-bounds corruption in multi-tenant workloads.
CST Newsroom
Engineering blueprint for implementing IEC 62443-3-2 zones, conduits, and Purdue Model boundaries across industrial automation and SCADA systems.
Mei-Lin Chen
India's six-hour CERT-In reporting clock has run since June 2022. From May 2027 a second DPDP clock starts on the same incident. Build one intake process now.
Tom Verhoeven
News • Threats • Insights
Join security leaders and practitioners who start their day with the exploited CVEs, live campaigns and analysis that actually change what they do next.
You're on the list.
We'll email you when the next issue goes out.
Exploited CVEs, live campaigns and the analysis that matters — one email each weekday.
No spam. Unsubscribe any time. See our privacy policy.
Sector-by-Sector Intelligence
Threat reports, exploited CVEs, and compliance mandates categorized for your specific sector.
Banks, NBFCs, insurance, payments, lending and capital markets.
Manufacturing, ICS/SCADA, operational technology and connected devices.
Hospitals, healthtech, medical devices, pharmaceuticals and patient data.
Government departments, public services, defence and national security.
Software companies, cloud platforms, data centres and managed services.
Power, oil and gas, renewable energy, water and critical infrastructure.
Telecom operators, internet providers, media and digital platforms.
Retail businesses, marketplaces, consumer platforms and POS systems.
Connected vehicles, aviation, railways, shipping and supply chains.
Schools, universities, edtech and research organizations.
Exchanges, wallets, blockchain platforms and digital assets.