Threat Intelligence
A live, filtered feed of the most dangerous and urgent items, grouped by threat type.
// 50 ACTIVE THREATS · 0 IN THE LAST 24H
CRITICAL 3 Critical severity · CVSS ≥ 9.0 or pipeline-flagged
ZERO-DAY 9 Actively exploited zero-days
ZERO-DAY
Palo Alto Networks: Active Exploit for CVE-2026-0322 in PAN-OS Management
ZERO-DAYCisco SEG Under Siege: Third Zero-Day in a Year, Root via Email
ZERO-DAYAhsayCBS Under Attack: From a Java Boolean to SYSTEM-Level RCE
ZERO-DAYFrom Six Months to Six Days: GPT-5.6 Sol Built the $250,000 Chrome Exploit
ZERO-DAYZero-Day RCE in Genesis World: ZDI Publishes Advisory With No Patch Available
ZERO-DAYCVE-2026-39919: RCE via PDF in Ghostscript — the -dSAFER Sandbox Isn't Enough
ZERO-DAYOctober 2026 Patch Tuesday: 1,413 CVEs and the 'Risk Cohort' Stress Test
ZERO-DAYIvanti's Partial Patch Leaves Third Flaw Open in Zero-Day CVE-2026-104935
ZERO-DAYFortiMail Zero-Day CVE-2026-104286: CISA Sets Three-Day Deadline Before Patches Are Ready
CVE 19 Advisories and patches with an assigned CVE
CVE
Langflow Under Attack: MCP Servers Become Vector for Authenticated RCE
CVEPalo Alto Networks: Active Exploit for CVE-2026-0322 in PAN-OS Management
CVEPEERSTITCH: Malware Turns FortiGate Firewalls Into Espionage Platforms
CVECisco SEG Under Siege: Third Zero-Day in a Year, Root via Email
CVEAhsayCBS Under Attack: From a Java Boolean to SYSTEM-Level RCE
CVECVE-2026-108065: Critical Pre-Auth SQL Injection in WebAlliance B2B E-Commerce Platform
CVEFrom Six Months to Six Days: GPT-5.6 Sol Built the $250,000 Chrome Exploit
CVEVghost: Tencent's AI Finds Linux Kernel vhost Flaw in Two Hours
CVECVE-2026-89111: Critical SSRF in SAP Cloud SDK for Python Exfiltrates Credentials
CVECVE-2026-39919: RCE via PDF in Ghostscript — the -dSAFER Sandbox Isn't Enough
CVEOctober 2026 Patch Tuesday: 1,413 CVEs and the 'Risk Cohort' Stress Test
CVEIvanti's Partial Patch Leaves Third Flaw Open in Zero-Day CVE-2026-104935
EXPLOIT 16 PoC and exploits in the wild
EXPLOIT
Langflow Under Attack: MCP Servers Become Vector for Authenticated RCE
EXPLOITPalo Alto Networks: Active Exploit for CVE-2026-0322 in PAN-OS Management
EXPLOITPEERSTITCH: Malware Turns FortiGate Firewalls Into Espionage Platforms
EXPLOITCisco SEG Under Siege: Third Zero-Day in a Year, Root via Email
EXPLOITAhsayCBS Under Attack: From a Java Boolean to SYSTEM-Level RCE
EXPLOITCVE-2026-108065: Critical Pre-Auth SQL Injection in WebAlliance B2B E-Commerce Platform
EXPLOITFrom Six Months to Six Days: GPT-5.6 Sol Built the $250,000 Chrome Exploit
EXPLOITZero-Day RCE in Genesis World: ZDI Publishes Advisory With No Patch Available
EXPLOITCVE-2026-39919: RCE via PDF in Ghostscript — the -dSAFER Sandbox Isn't Enough
EXPLOITLiteLLM: RCE and Authentication Bypass for Authenticated Users
EXPLOITADB-Enabled Exploit Unlocks Bootloader, Grants Persistent Root on Amazon Fire TV Cube 3
EXPLOITFrench Supermarket Fridges Hacked: Outdated Danfoss Firmware, Temperatures Forced to 50°C
ADVISORY 3 CISA, CERT-AgID and vendor advisories