Section

Threats, page 2

Vulnerability intelligence, exploited CVEs, malware families and live campaigns — with the detection guidance and mitigations defenders need first.

231 articlesUpdated 28 Sep 2026Page 2 of 10

ThreatsCloud & SaaSCritical
Critical Microsoft SharePoint SafeControls Bypass Weaponized for Remote Code Execution CVE-2026-65660
Microsoft reclassifies CVE-2026-65660 as an 8.8 CVSS RCE flaw after threat actors bypass SharePoint SafeControls filtering to execute arbitrary .NET code.
CST Newsroom26 Sep 202614 min read
ThreatsIndustrial & OTCritical
Critical Wärtsilä FOS-Onboard Maritime Navigation Hardcoded Key Flaws Expose Vessel Fleets to Remote Takeover CVE-2026-78225
CISA issues advisory ICSA-26-258-02 for critical hardcoded cryptographic key flaws in Wärtsilä FOS-Onboard, allowing remote attackers to hijack navigation systems.
CST Newsroom26 Sep 202615 min read
ThreatsCloud & SaaSHigh
Critical AWS Amazon Connect Salesforce Integration Flaw Enables IAM Privilege Escalation via Lambda Proxy CVE-2026-94384
AWS Security Bulletin 2026-115-AWS warns of a critical authorization flaw in AmazonConnectSalesforceLambda enabling unprivileged IAM users to execute arbitrary AWS APIs.
CST Newsroom26 Sep 202614 min read
ThreatsCloud & SaaS
Critical MikroTik RouterOS SSH Rekey Workflow Flaw Weaponized with MikroTrick Chain to Hijack Enterprise Routers CVE-2026-67279
Threat actors weaponize MikroTik RouterOS flaw CVE-2026-67279 in the "MikroTrick" chain, bypassing SSH authentication to hijack core routing infrastructure.
Daniel Okafor26 Sep 202618 min read
ThreatsCloud & SaaSHigh
Critical AWS HealthLake MCP Server Flaw Exposes Cloud IAM Credentials and Healthcare Telemetry to SSRF CVE-2026-15643
AWS discloses high-severity SSRF flaw CVE-2026-15643 in the HealthLake MCP server, enabling attackers to leak temporary SigV4 IAM credentials and healthcare FHIR records.
Priya Raman26 Sep 202617 min read
ThreatsCloud & SaaSCritical
Critical Dify Cross-Tenant Path Traversal Flaw Enables Unauthorized Access to Internal Plugin APIs CVE-2026-41948
A critical CVSS 9.4 path traversal flaw CVE-2026-41948 in Dify allows unauthenticated attackers to bypass workspace isolation and invoke internal Plugin Daemon APIs.
Priya Raman25 Sep 202617 min read
ThreatsCloud & SaaSCritical
Critical Fortinet FortiPAM Authentication Bypass Flaw Enables Remote Session Hijacking and Traffic Proxying CVE-2026-84388
Fortinet releases emergency fixes for critical CVSS 9.6 flaw CVE-2026-84388 in FortiPAM and its Chrome Extension, allowing remote attackers to hijack administrative sessions.
Daniel Okafor25 Sep 202618 min read
ThreatsIndustrial & OTCritical
Critical Siemens SIMATIC IoT2050 Advanced Gateway Flaw Enables Unauthenticated Remote Code Execution on Industrial OS
CISA and Siemens warn of critical CVSS 9.8 flaw in SIMATIC IoT2050 Advanced (ICSA-26-237-03), enabling remote attackers to execute arbitrary code with root privileges.
Mei-Lin Chen25 Sep 202617 min read
ThreatsCloud & SaaSHigh
Critical Open WebUI TOCTOU DNS Rebinding SSRF Flaw Exposes Cloud Metadata and Internal VPC Services CVE-2026-87996
A critical TOCTOU race condition flaw CVE-2026-87996 in Open WebUI enables attackers to execute DNS rebinding SSRF attacks and harvest cloud metadata and credentials.
Priya Raman25 Sep 202617 min read
ThreatsCloud & SaaSCritical
Critical Microsoft Azure Arc Elevation of Privilege Flaw Allows Unauthenticated Confused Deputy Exploitation Across Hybrid Clusters CVE-2026-69399
Microsoft discloses critical CVSS 10.0 flaw CVE-2026-69399 in Azure Arc, enabling unauthenticated attackers to exploit confused deputy proxies across hybrid cloud nodes.
Daniel Okafor25 Sep 202618 min read
ThreatsCloud & SaaSHigh
Critical Ollama GGUF Model Parser Integer Overflow Flaw Exposes Local AI Inference Servers to Memory Corruption CVE-2026-86289
A critical integer overflow flaw CVE-2026-86289 in the Ollama GGUF model decoder allows attackers to trigger memory corruption and remote code execution on AI inference clusters.
Priya Raman25 Sep 202616 min read
ThreatsIndustrial & OTHigh
Rockwell Automation RSLinx Classic CIP Packet Parsing Flaws Enable Remote Denial of Service Across Industrial SCADA Networks
CISA and Rockwell Automation disclose multiple CIP packet parsing flaws in RSLinx Classic (ICSA-26-244-01), enabling attackers to crash industrial SCADA communication gateways.
Mei-Lin Chen25 Sep 202617 min read
ThreatsCloud & SaaSCritical
Critical Adobe Commerce and Magento Authorization Breakdown Flaw Exploited to Hijack E-Commerce Checkout Workflows CVE-2026-71362
Adobe and CISA warn of active exploitation targeting CVE-2026-71362 in Adobe Commerce and Magento, enabling unauthenticated manipulation of checkout orders and customer data.
Daniel Okafor25 Sep 202617 min read
ThreatsIndustrial & OTCritical
Critical Siemens SIMOVE Fleetmanager Flaws Enable Remote Trajectory Hijacking Across Autonomous Factory AGVs
Siemens fixes critical vulnerabilities in SIMOVE Fleetmanager and SIPLANT, preventing unauthenticated remote threat actors from altering autonomous factory AGV paths.
CST Newsroom25 Sep 202616 min read
ThreatsCloud & SaaSCritical
Critical WSO2 API Manager Path Traversal Flaw Weaponized to Extract Enterprise Gateway Credentials CVE-2026-5430
WSO2 patches critical path traversal flaw CVE-2026-5430 across API Manager and Gateway platforms, preventing unauthenticated remote extraction of master credentials.
Daniel Okafor25 Sep 202617 min read
ThreatsIndustrial & OTCritical
Critical Eufy Autonomous Facility Robotics Vulnerabilities Enable Remote Video Interception and Fleet Takeover ICSA-26-267-02
CISA ICS advisory ICSA-26-267-02 warns of critical vulnerabilities in Eufy autonomous commercial cleaning robots, allowing remote RTSP stream hijack and LiDAR map exfiltration.
CST Newsroom25 Sep 202616 min read
ThreatsCloud & SaaSHigh
Amazon ECS Container Agent Flaw Enables Task Boundary Breakout and IAM Role Credential Hijacking
AWS resolves a container boundary escape flaw in Amazon ECS Container Agent that allowed unprivileged containers to intercept task metadata and assume host IAM roles.
Aisha Noor25 Sep 202617 min read
ThreatsIndustrial & OTCritical
Critical Botslab Connected Dashcam Flaws Expose Commercial Fleet Telematics to Remote Video Hijacking
CISA ICS advisory ICSA-26-267-01 details critical flaws in Botslab G980H dashcams, allowing remote attackers to intercept live video and hijack fleet telematics.
Daniel Okafor25 Sep 202616 min read
ThreatsCloud & SaaSCritical
HPE Aruba EdgeConnect SD-WAN Orchestrator Authentication Bypass Flaw Enables Remote Network Gateway Hijack
HPE resolves critical flaw CVE-2026-38291 in Aruba EdgeConnect SD-WAN Orchestrator, allowing unauthenticated remote attackers to bypass auth and execute arbitrary code.
Aisha Noor25 Sep 202617 min read
ThreatsCloud & SaaSHigh
Google Kubernetes Engine Container Escape Vulnerability Enables Node Compromise Across Multi-Tenant Clusters
Google Cloud discloses and mitigates a high-severity container escape flaw in GKE node kernels, preventing unprivileged workloads from compromising host nodes.
Aisha Noor24 Sep 202617 min read
ThreatsIndustrial & OTCritical
Critical OpenPLC Runtime v3 Flaw Enables Remote Controller Hijacking Across Industrial Automation Networks
CISA ICS advisory ICSA-26-265-09 details critical buffer overflow and authentication bypass flaws in OpenPLC Runtime v3, allowing remote process disruption.
Daniel Okafor24 Sep 202616 min read
ThreatsCloud & SaaSHigh
Google Cloud OS Login Privilege Escalation Flaw Exposes Compute Engine Instances to Root Takeover CVE-2020-8907
Google Cloud resolves a privilege escalation flaw in Compute Engine guest-oslogin that allowed users with compute.osLogin IAM permissions to gain root access.
Aisha Noor24 Sep 202617 min read
ThreatsCloud & SaaSCritical
Critical Azure AI Language Authentication Breakdown Enables Unauthenticated Model Tampering CVE-2026-70352
Microsoft mitigates maximum-severity CVSS 10.0 flaw CVE-2026-70352 in Azure AI Language Authoring, preventing unauthenticated remote tampering with enterprise AI models.
CST Newsroom24 Sep 202617 min read
ThreatsIndustrial & OTHigh
Critical Siemens Building Energy Gateway Vulnerability Enables Denial of Service in Smart Facilities CVE-2026-89207
CISA issues advisory ICSA-26-265-08 for Siemens WTV676 and WTV776 M-Bus gateways, warning of a web interface flaw that terminates building SCADA telemetry.
CST Newsroom24 Sep 202615 min read