CYBER Threat Intelligence Reports
LATEST CTIs
ConnectWise SkyKick Compromise: Attackers Hijack Trusted Microsoft 365 Applications to Access Customer Tenants
A compromised application credential belonging to ConnectWise Cloud Backup, formerly known as SkyKick, has been used in a supply chain attack targeting Microsoft 365 environments.…
Read more >
Ivanti CVE-2026-104935: Three Zero-Days Chained for Root Access in Active Attacks
Ivanti has released emergency security updates after attackers exploited a chain of three zero-day vulnerabilities in its Connect Secure VPN appliances to gain root-level access…
Read more >
GitLab CVE-2026-97229: Critical 10.0 RCE Vulnerability Puts CI/CD Servers at Risk
GitLab has released emergency security updates to address a critical vulnerability that could allow attackers to execute arbitrary code on affected servers. Tracked as CVE-2026-97229,…
Read more >
SonicWall CVE-2026-102255: Critical SMA1000 Vulnerability Targeted in Active Attacks
Attackers are targeting a critical vulnerability in SonicWall Secure Mobile Access (SMA) 1000 appliances, just days after the company released security updates to address the…
Read more >
Atlassian CVE-2026-21589: Critical Pre-Auth File Read Affects Jira, Confluence, Bitbucket and More
Atlassian has issued an urgent security advisory for CVE-2026-21589, a critical vulnerability affecting eight of its self-hosted Data Center products, including Jira, Confluence and Bitbucket.…
Read more >
Cisco SD-WAN Manager Zero-Day CVE-2026-76504 Exploited for Admin Access
Cisco has released emergency security updates for a critical authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager, formerly known as vManage. Tracked as CVE-2026-76504, the…
Read more >
