Automated cyber signal feeds.
A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts as a loader for deploying Cobalt Strike Beacon on compromised hosts. Kaspersky, which is tracking the activity under the moniker StrikeShark,…
CVE ID :CVE-2026-33646 Published : June 26, 2026, 4:51 p.m. | 2 hours, 53 minutes ago Description :mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.3.10, mise processes .tool-versions files through the Tera template engine during parsing, with…
CVE ID :CVE-2026-55441 Published : June 26, 2026, 4:48 p.m. | 2 hours, 56 minutes ago Description :mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise’s trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include…
CVE ID :CVE-2026-56876 Published : June 26, 2026, 4:44 p.m. | 3 hours ago Description :extract-zip does not validate symlink targets when extracting zip archives. When processing a malicious zip file containing a symlink with a relative path like ‘../../../../etc/passwd’, extract-zip…
CVE ID :CVE-2026-56786 Published : June 25, 2026, 6:11 p.m. | 1 hour, 28 minutes ago Description :RTKLIB through 2.4.3 contains an out-of-bounds write vulnerability in decode_type1033 function that fails to clamp length counters to destination buffer size, allowing up to 191-byte…
CVE ID :CVE-2026-56771 Published : June 25, 2026, 6:07 p.m. | 1 hour, 32 minutes ago Description :NewsBlur before version 14.5.0 contains a server-side request forgery vulnerability in the add_url endpoint that allows authenticated users to make arbitrary server requests to internal…
CVE ID :CVE-2026-56770 Published : June 25, 2026, 6:06 p.m. | 1 hour, 33 minutes ago Description :libais through 0.15 VdmStream::AddLine uses an unchecked sentinel value as a vector index when processing AIS sentences with empty or out-of-range sequential message IDs. Remote…
CVE ID :CVE-2026-56769 Published : June 25, 2026, 6:05 p.m. | 1 hour, 34 minutes ago Description :Huly Platform before commit 68cbf8a contains an authenticated server-side request forgery vulnerability in the /import endpoint of front pod that allows workspace users to make…
CVE ID :CVE-2026-56768 Published : June 25, 2026, 6:05 p.m. | 1 hour, 34 minutes ago Description :Seahub before 13.0.23 does not enforce SHARE_LINK_LOGIN_REQUIRED on GET , allowing unauthenticated users to bypass authentication. Attackers with a folder share-link token can call the…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation of a critical security flaw impacting Lantronix EDS5000 Series devices, urging Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by June 26, 2026. The…