CYBER Threat Intelligence Reports
LATEST CTIs
Check Point SmartConsole Authentication Bypass (CVE-2026-16232)
Check Point has released an urgent security update addressing three vulnerabilities affecting its Security Management, Multi-Domain Management, Quantum Security Gateway, and Gaia operating system products.…
Read more >
WP2Shell WordPress Core RCE Exploited in the Wild (CVE-2026-63030 and CVE-2026-60137)
WordPress administrators should urgently patch two recently disclosed Core vulnerabilities collectively known as WP2Shell. When chained together, the flaws allow an unauthenticated attacker to execute…
Read more >
AsyncAPI npm Supply-Chain Attack Delivers Cross-Platform Miasma RAT
A software supply-chain attack compromised four packages in the official AsyncAPI npm namespace, resulting in five malicious package versions being distributed through the project’s legitimate…
Read more >
Zoom Windows Vulnerability Enables Account Takeover (CVE-2026-53412)
Zoom has released security updates for a critical vulnerability affecting Zoom Workplace and Zoom Workplace VDI clients for Windows. Tracked as CVE-2026-53412, the vulnerability could…
Read more >
Actively Exploited SonicWall SMA1000 Vulnerabilities (CVE-2026-15409 and CVE-2026-15410)
SonicWall has released emergency hotfixes for two vulnerabilities affecting SMA1000 Series secure access appliances. Both vulnerabilities have been exploited in active attacks, and one carries…
Read more >
Critical Gitea Docker Authentication Bypass Under Active Probing: CVE-2026-20896
A critical authentication bypass vulnerability, tracked as CVE-2026-20896, has been disclosed in the official Gitea Docker image. Gitea is a self-hosted software development platform used…
Read more >
