FIRESTARTER Backdoor Targets Cisco Devices in Federal Security Breach
PremiumState-sponsored actors chain CVEs to backdoor FXOS/ASA devices; FIRESTARTER persists after patches.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesMonday, April 27
Friday, April 24
Wednesday, April 22
CISA Identifies and Warns of Critical SD-WAN Vulnerability Exploitation
SD-WAN vulnerabilities being exploited; patch cadence and network segmentation remain critical.
North Korean Hackers Exploit Vulnerabilities in Kelp DAO for Massive Crypto Theft
North Korean-linked actors exploited DeFi infrastructure to steal $290M in a high-profile crypto heist; organizations should review cross-chain and bridge trust controls.
Monday, April 20
Millions of FTP Servers Remain Vulnerable Despite Decline
PremiumLegacy FTP exposure persists; organizations urged to decommission or secure gateways.
Microsoft Edge Update Disrupts Right-Click Paste in Teams
PremiumEdge update breaks right-click paste in Teams; workaround and patch ETA provided by vendor.
Apache ActiveMQ Vulnerability Poses New Threat as Exploits Emerge
PremiumRemote code execution CVE-2026-34197 exploited in the wild; upgrade and rotate credentials advised.
Critical FortiSandbox Vulnerability Demands Immediate Action
PremiumUnauthenticated command execution demonstrated; patch recommended and mitigations outlined.
Friday, April 17
Critical Vulnerability in Cisco Webex Allows User Impersonation
PremiumCritical Webex Services flaw allows impersonation; immediately apply vendor patches and enforce least-privilege access.
Microsoft Addresses Critical Vulnerabilities, Including Actively Exploited Zero-Day in SharePoint
PremiumMicrosoft released patches for SharePoint and 168 additional flaws, with one actively exploited in the wild; prioritize patch deployment and verification.
Wednesday, April 15
Adobe Addresses Critical ColdFusion Vulnerabilities in Latest Patch
Adobe fixed 55 vulnerabilities across 11 products; critical ColdFusion flaws flagged as high risk for exploitation. Prioritize updates in coordinated patch cycles.
Microsoft's April 2026 Patch Tuesday Tackles Critical Vulnerabilities
Microsoft released a massive April 2026 Patch Tuesday with 168 fixes, including an actively exploited SharePoint zero-day. Remediation prioritizes active exploits and affected services.
Adobe Addresses Critical Vulnerabilities in Latest Security Update
Adobe fixed 55 vulnerabilities across 11 products; critical ColdFusion flaws flagged as high risk for exploitation. Prioritize updates in coordinated patch cycles.
Microsoft's April 2026 Patch Tuesday Fixes Critical Vulnerabilities
Microsoft released a massive April 2026 Patch Tuesday with 168 fixes, including an actively exploited SharePoint zero-day. Remediation prioritizes active exploits and affected services.
Monday, April 13
Urgent Update: Marimo RCE Vulnerability Actively Exploited
PremiumA critical pre-auth RCE in Marimo is being exploited in the wild, enabling credential theft. Patch and mitigation guidance advised.
Adobe Issues Urgent Patch for Zero-Day Vulnerability in Acrobat and Reader
PremiumAdobe patched a Reader zero-day (CV E-2026-34621) after it was exploited in the wild for months; keep systems updated.
Urgent Security Alert: Marimo Vulnerability Exploited for Credential Theft
PremiumA critical pre-auth RCE in Marimo is being exploited in the wild, enabling credential theft. Patch and mitigation guidance advised.
Urgent Patch Released for Long-Exploited Adobe Reader Vulnerability
PremiumAdobe patched a Reader zero-day (CV E-2026-34621) after it was exploited in the wild for months; keep systems updated.
Immediate Threat: Exploitation of Marimo RCE Vulnerability Detected
PremiumA critical pre-auth RCE in Marimo is being exploited in the wild, enabling credential theft. Patch and mitigation guidance advised.
Get these articles delivered to your inbox.
Subscribe free