Section

Threats, page 6

Vulnerability intelligence, exploited CVEs, malware families and live campaigns — with the detection guidance and mitigations defenders need first.

231 articlesUpdated 28 Sep 2026Page 6 of 10

ThreatsCloud & SaaSHigh
AWS Patches Hostname Validation Bypass in IoT Device SDK Exposing Core Endpoints to AiTM Attacks
AWS resolves high-severity vulnerability CVE-2026-92943 in AWS IoT Device SDK for Python allowing adversary-in-the-middle telemetry interception and message spoofing.
Daniel Okafor19 Sep 202610 min read
ThreatsIndustrial & OTCritical
Schneider Electric PowerChute Authentication Flaw Leaves Enterprise UPS Systems Vulnerable to Remote Shutdown
Schneider Electric and CISA warn of improper authentication validation in PowerChute Serial Shutdown allowing unauthorized actors to disrupt critical infrastructure power.
Priya Raman19 Sep 20269 min read
ThreatsCloud & SaaSHigh
Linux Kernel In-Kernel TLS Receive Path Flaw Weaponized in Active Multi-Tenant Cloud Attacks
Threat actors weaponize improper condition check flaw CVE-2025-39682 in Linux kernel kTLS receive path, triggering out-of-bounds corruption in multi-tenant workloads.
CST Newsroom19 Sep 202611 min read
ThreatsCloud & SaaSCritical
Public Exploits Released for Four Linux Kernel Flaws Enabling Local Root and Container Compromise
Working public exploits released for four Linux kernel flaws—DirtyAH6, TUNderflow, PPPoEject, and DiagSpill—enabling local root escalation and container escapes.
CST Newsroom19 Sep 202613 min read
ThreatsCloud & SaaSCritical
Amazon EKS Network Policy Agent Flaw Allows Pod Isolation Bypass Across Kubernetes Clusters
AWS patches high-severity flaw CVE-2026-86831 in Amazon EKS aws-network-policy-agent allowing unauthorized pod communication and network isolation bypass.
Daniel Okafor19 Sep 202611 min read
ThreatsIndustrial & OTHigh
ABB Ability Edgenius Industrial Edge Controllers Exposed to Container Root Escalation Flaw
ABB and CISA issue security advisory for CVE-2026-31431 in Ability Edgenius edge controllers enabling container breakout and local root takeover.
Mei-Lin Chen19 Sep 20269 min read
ThreatsCloud & SaaSCritical
PTC Windchill & FlexPLM Critical RCE Flaw Weaponized in Active Espionage Attacks
CISA orders emergency patching of PTC Windchill PLM vulnerability CVE-2026-12569 enabling unauthenticated remote code execution and CAD blueprint theft.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSHigh
Linux Kernel Crypto AF_ALG Socket Race Condition Flaw Weaponized for Root Escalation
CISA adds Linux kernel cryptographic socket race condition vulnerability CVE-2025-39964 to KEV catalog following active root privilege escalation attacks.
CST Newsroom18 Sep 202611 min read
ThreatsCloud & SaaSHigh
Linux Kernel ebtables SNAT Out-of-Bounds Write Flaw Exploited in Active Attacks
CISA adds Linux kernel ebtables SNAT memory corruption flaw CVE-2026-53266 (CVSS 8.8) to KEV catalog following active hypervisor privilege escalation.
Mei-Lin Chen18 Sep 202610 min read
ThreatsCloud & SaaSHigh
Critical Ubiquiti UniFi OS Path Traversal Flaw Exploited to Hijack Enterprise Gateways
CISA orders federal agencies to patch Ubiquiti UniFi OS vulnerability CVE-2026-34909 enabling unauthenticated network configuration extraction and takeover.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSHigh
Cloud Container Escape: Linux Kernel cgroups Flaw CVE-2022-0492 Weaponized in Cloud Attacks
CISA adds Linux kernel cgroups v1 release_agent vulnerability CVE-2022-0492 to KEV catalog as threat actors weaponize container breakout exploits.
CST Newsroom18 Sep 202611 min read
ThreatsCloud & SaaSCritical
Check Point Security Gateways Targeted in Zero-Day VPN Credential Theft Attacks
CISA orders emergency patching of Check Point Security Gateway flaw CVE-2026-50751 enabling unauthenticated perimeter VPN bypass and network takeover.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSCritical
Cisco Catalyst SD-WAN Manager Critical Directory Traversal Flaws Weaponized in Active Attacks
CISA orders emergency remediation of Cisco Catalyst SD-WAN Manager flaws CVE-2026-20262 and CVE-2026-20245 enabling remote administrative root takeover.
CST Newsroom18 Sep 202611 min read
ThreatsCloud & SaaSCritical
Splunk Enterprise Critical Authentication Bypass Flaw Exploited in Active Corporate Infiltration Attacks
CISA adds Splunk Enterprise vulnerability CVE-2026-20253 (CVSS 9.8) to KEV catalog following active exploitation targeting enterprise SIEM clusters.
Priya Raman18 Sep 202612 min read
ThreatsCloud & SaaSCritical
Ivanti Sentry Critical OS Command Injection Flaw Exploited in Perimeter Infiltration Attacks
CISA adds Ivanti Sentry vulnerability CVE-2026-10520 (CVSS 9.8) to KEV catalog following active zero-day exploitation against corporate mobile gateways.
CST Newsroom18 Sep 202611 min read
ThreatsIndustrial & OTCritical
Lantronix EDS5000 Industrial Device Servers Hit by Critical Remote Code Injection Flaw
CISA adds Lantronix EDS5000 industrial serial device server vulnerability CVE-2025-67038 to KEV catalog following active exploitation against OT networks.
Tom Verhoeven18 Sep 202610 min read
ThreatsCloud & SaaSHigh
Cisco IOS Cross-Site Request Forgery Flaw Exploited to Hijack Core Enterprise Routers
CISA adds Cisco IOS HTTP server CSRF flaw CVE-2008-4128 to KEV catalog following active in-the-wild exploitation to alter router configuration registers.
CST Newsroom18 Sep 202611 min read
ThreatsIndustrial & OTCritical
Mitsubishi Electric CC-Link IE TSN Protocol Flaws Expose Factory Automation Cells
CISA issues ICS-CERT advisory ICSA-26-211-07 warning of critical protocol implementation flaws in Mitsubishi Electric CC-Link IE TSN industrial controllers.
Tom Verhoeven18 Sep 202610 min read
ThreatsCloud & SaaSCritical
Microsoft SharePoint Server Critical Deserialization & Auth Bypass Flaws Under Active Cyberattack
CISA orders federal agencies to patch critical Microsoft SharePoint vulnerabilities CVE-2026-58644 and CVE-2026-56164 enabling unauthenticated remote code execution.
Priya Raman18 Sep 202612 min read
ThreatsIndustrial & OTHigh
KNX Building Automation Protocol Denial-of-Service Flaw Exploited Against Critical Infrastructure
CISA adds KNX industrial building automation protocol vulnerability CVE-2023-4346 to KEV catalog following active exploitation against critical OT facilities.
Tom Verhoeven18 Sep 202610 min read
ThreatsCloud & SaaSHigh
AWS Security Advisory: Linux Kernel vhost vring Cache Corruption Flaw CVE-2026-74580 Patched via Livepatch
AWS publishes security advisory ALAS2023LIVEPATCH-2026-343 addressing a Linux kernel vhost vring metadata cache corruption vulnerability (CVE-2026-74580).
Daniel Okafor17 Sep 202613 min read
ThreatsIndustrial & OTHigh
Schneider Electric SCADAPack x70 RTUs Exposed to Remote Credential Extraction Flaws
CISA issues advisory ICSA-26-258-04 warning of insufficiently protected credentials in Schneider Electric SCADAPack x70 Remote Telemetry Units (CVE-2026-81861).
Aisha Noor17 Sep 202612 min read
ThreatsCloud & SaaSCritical
Adobe ColdFusion Critical Path Traversal Flaw CVE-2026-48282 Exploited in Active Attacks
CISA incorporates Adobe ColdFusion path traversal vulnerability CVE-2026-48282 (CVSS 9.8) into KEV catalog following active exploitation against enterprise application servers.
Mei-Lin Chen17 Sep 202614 min read
ThreatsCloud & SaaSHigh
Cisco Unified Communications Manager SSRF Flaw Weaponized in Enterprise Attacks
CISA adds Cisco Unified Communications Manager vulnerability CVE-2026-20230 (CVSS 8.5) to KEV catalog following active in-the-wild enterprise telephony attacks.
Tom Verhoeven17 Sep 202612 min read