CYBER Threat Intelligence Reports
LATEST CTIs
Actively Exploited SonicWall SSL-VPN Vulnerability CVE-2026-19868 Allows SAML and MFA Bypass
SonicWall has released security updates addressing a high-severity vulnerability in its SonicOS SSL-VPN service that could allow attackers to bypass SAML authentication controls and multi-factor…
Read more >
CVE-2026-109518 Bypasses APT Package Verification to Enable Root-Level RCE on Debian and Ubuntu
A high-severity vulnerability in the APT package manager could allow attackers to bypass package integrity verification and execute malicious code with root privileges on Debian,…
Read more >
Critical Rails Active Storage Flaw CVE-2026-122006 Enables Arbitrary File Writes Through Malicious Uploads
A critical vulnerability in Ruby on Rails could allow unauthenticated attackers to manipulate files on vulnerable application servers simply by uploading a specially crafted file.…
Read more >
Node2Shell (CVE-2026-111497) Under Active Exploitation as Critical Brotli Flaw Extends Beyond Node.js
A critical vulnerability in Google's Brotli decompression library is drawing increasing attention from attackers, with exploitation attempts observed just days after patches became available. Tracked…
Read more >
PHP2Shell: Critical PHP RCE Flaws Targeted in Attacks (CVE-2026-109618 & CVE-2026-109619)
Attackers are targeting two critical vulnerabilities in PHP. The vulnerabilities, collectively known as PHP2Shell are tracked as CVE-2026-109618 and CVE-2026-109619, and could allow unauthenticated attackers…
Read more >
ConnectWise SkyKick Compromise: Attackers Hijack Trusted Microsoft 365 Applications to Access Customer Tenants
A compromised application credential belonging to ConnectWise Cloud Backup, formerly known as SkyKick, has been used in a supply chain attack targeting Microsoft 365 environments.…
Read more >
