Sign in Subscribe

security

security

Cybersecurity threats, national security intelligence, breach alerts and defence analysis â€” curated from OSINT and infosec sources.

🔐 Security Pulse · 2026-08-03 16:00 UTC

⚡ TL;DR Multiple critical and high-severity WordPress plugin vulnerabilities remain unpatched, risking widespread website compromise + Synology and router device flaws could enable local privilege escalations. Overall threat level elevated. 🔐 CYBER THREATS * 🔴🔴🔴 Multiple WordPress plugins have serious vulnerabilities allowing unauthenticated remote code execution, SQL injection, authentication bypass, and privilege escalation including

🔐 Security Pulse · 2026-08-02 16:00 UTC

⚡ TL;DR Multiple critical WordPress plugin vulnerabilities discovered allowing unauthorized actions; immediate patching required to avoid exploitation. Overall threat level: elevated. 🔐 CYBER THREATS * 🔴🔴🔴 Multiple unauthenticated or low-privilege AJAX action flaws in popular WordPress plugins including FluentBoards (CVE-2026-14938), AI ChatBot for WooCommerce (CVE-2026-15241), Meta Box (CVE-2026-15248), RT Mega Menu (CVE-2026-15385), and

🔐 Security Pulse · 2026-08-01 16:00 UTC

⚡ TL;DR Multiple critical vulnerabilities disclosed in Johnson Controls and Decidim participatory democracy software pose active exploitation risks; ongoing malware found on GitHub active for one year confirms sustained threat presence. Overall threat level elevated. 🔐 CYBER THREATS * 🔴🔴🔴 CVE-2026-34490 and CVE-2026-34495 Johnson Controls XAAP and FM Systems Employee apps suffer cleartext

🔐 Security Pulse · 2026-07-31 16:00 UTC

⚡ TL;DR Multiple critical Keycloak identity management vulnerabilities (CVE-2026-18203, CVE-18217, others) expose authentication and access control risks; elevated threat environment with significant ICS/SCADA attack surface CVEs emerging. 🔐 CYBER THREATS * 🔴🔴 Keycloak faces a cluster of severe flaws impacting SAML, OIDC, tenant logins, and admin API that can lead to unauthorized

🔐 Security Pulse · 2026-07-30 16:00 UTC

⚡ TL;DR Critical multiple remote code execution and UI spoofing vulnerabilities in Google Chrome prior to version 151.0.7922.72 pose an immediate risk to users worldwide. Overall threat level elevated due to widespread impact across major platforms and active exploit potential. 🔐 CYBER THREATS * 🔴🔴🔴 Multiple CVEs (CVE-2026-18006, CVE-2026-18007, CVE-2026-18008,

🔐 Security Pulse · 2026-07-29 16:00 UTC

⚡ TL;DR Multiple critical vulnerabilities disclosed in the datamodel-code-generator Python package and goshs file server pose active exploitation risks to developers and red teamers; national infrastructure safety measures continue with emphasis on event security preparations. Overall threat level elevated. 🔐 CYBER THREATS * 🔴🔴🔴 Multiple CVEs (CVE-2026-54654, CVE-2026-55390, CVE-2026-54691, CVE-2026-55403, and others) disclosed

🔐 Security Pulse · 2026-07-28 16:00 UTC

⚡ TL;DR Multiple critical macOS authorization and memory corruption vulnerabilities disclosed, patched in versions 15.7.8 and 14.8.8, requiring urgent update deployment; overall cyber threat level elevated. 🔐 CYBER THREATS * 🔴🔴🔴 CVE-2026-43782, CVE-2026-64737, CVE-2026-43757: Critical macOS vulnerabilities including authorization issues and out-of-bounds read fixed in macOS Sequoia 15.7.