Massive Credential Theft Targets FortiGate Firewalls, Puts Enterprises at Risk
Russian IAB-led campaign exploits FortiGate devices to harvest over 110 million credentials; high-risk for enterprises deploying Fortinet gear.
Wednesday, June 24
Monday, June 22
Millions of Users at Risk Due to Flaws in Popular Chrome Extensions
PremiumSpyder and MaXSS flaws in AI-powered Chrome extensions enable session hijacks and data access.
Urgent Patch Required for Splunk Enterprise Vulnerability Exploited Post-Disclosure
PremiumCISA warns federal agencies to patch CVE-2026-20253 quickly due to unauthenticated RCE risk.
Urgent Call to Secure Fortinet Devices After Massive Credential Theft
PremiumFortinet credential theft campaign impacts half of internet-facing Firewalls and VPNs; urgency to rotate creds and patch exposed devices.
Friday, June 19
WordPress Plugin Compromise Underscores Supply Chain Vulnerabilities
PremiumWordPress plugin supply-chain compromise delivers infected releases; audit plugins and CI/CD.
Salesforce Data Compromised Through Klue OAuth Exploit
PremiumOAuth abuse via Klue integration enables CRM data exfiltration; review third-party app grants and tokens.
Urgent Patches Released for Cisco Identity Services Engine Vulnerabilities
PremiumUnvalidated input allowed OS access and privilege escalation; apply Cisco ISE patches immediately.
Massive Fortinet VPN Credential Exposure Threatens Global Enterprises
PremiumFortinet VPN credential exposure affects ~73k devices; patch now and rotate credentials to reduce risk.
Wednesday, June 17
Monday, June 15
Anthropic Defends Claude Fable 5 Against Jailbreak Allegations
PremiumIndustry debate on Fable 5 jailbreak claims; consider model risk management and vendor assurances.
Ivanti Sentry Vulnerability Sparks Security Concerns
PremiumOpen-source OS command injection vector seen against Ivanti Sentry; monitor for privilege escalation attempts and honeypot triggers.
Chrome 149 Update Addresses 28 Critical Security Vulnerabilities
PremiumChrome 149 patches 28 flaws, including use-after-free issues; hardening Chrome remains a priority for enterprise endpoints.
Critical Splunk Flaw Allows Remote Code Execution via Misconfigured Services
PremiumCritical RCE chain in Splunk enables unauthenticated remote code execution via PostgreSQL sidecar; immediate patching and access controls are essential.
Friday, June 12
Langflow Path Traversal Flaw Under Active Exploitation
PremiumHigh-severity Langflow path traversal allows arbitrary file writes; patching recommended immediately.
Federal Agencies Face New 3-Day Deadline for Critical Vulnerability Patches
PremiumBinding Directive 26-04 compels remediation of critical flaws within three calendar days for federal agencies.
CISA Mandates Risk-Based Patch Prioritization for Federal Agencies
PremiumNew directive requires prioritization of patching based on KEV risk; federal agencies must focus on the most dangerous, known exploited vulnerabilities.
Wednesday, June 10
Miasma Worm Compromises Microsoft Repositories, Disrupts Global Workflows
Miasma worms compromised a large set of Microsoft GitHub repositories via a supply-chain attack.
Microsoft's June 2026 Patch Tuesday Tackles 198 Vulnerabilities
June 2026 cycle patches 198 flaws, including 3 zero-days actively exploited; prioritize critical systems first.
Critical Chrome Vulnerability Patched to Prevent Active Exploits
Chrome emergency patch closes a zero-day actively exploited, preventing remote code execution in many deployments.
Monday, June 8
Get these articles delivered to your inbox.
Subscribe free