Coverage Demonstrator
Pick the services you offer. See the vulnerabilities, threats and incidents from the last 90 days that each one addresses, grouped by how it helps — prevent, detect, respond, recover.
Rollup window ending 2026-08-12 · 1505 stories · Last updated: 12 August 2026 00:47 UTC
Client view: only confirmed and corroborated reports are shown — never an unverified leak-site claim.
Seller view: the full set, with each item's confidence labelled. Capabilities with news but no coverage are your attach map (below).
My service offerings
Check the services you provide to see the threats each one addresses. Saved on this device only; no account.
End-user elevation
Active threats this quarter that End-user elevation addresses:
Prevent
- Bulletin de sécurité Red Hat (AV26-803)confirmed
- KEV: CVE-2026-72898 — Metabase Metabase (Metabase SQL Injection Vulnerability)confirmed
- Critical Progress LoadMaster flaw now actively exploited in attacksclaimed
- ABB Ability Zenonconfirmed
- Medixant RadiAnt DICOMconfirmed
- Rails security advisory (AV26-767)confirmed
- SolarWinds security advisory (AV26-766)confirmed
- VMware security advisory (AV26-763)confirmed
- Spring security advisory (AV26-759)confirmed
- Cisco security advisory (AV26-757)confirmed
- NASA Core Flight System (cFS) Health & Safety (HS) Applicationconfirmed
- Watchfire Controller Softwareconfirmed
- Schneider Electric IGSSconfirmed
- o6 Automation open62541confirmed
- Schneider Electric IGSSconfirmed
- Johnson Controls OpenBlue Employeeconfirmed
- KEV: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability)confirmed
- igloohome Smart Lock Mobile Applicationconfirmed
- Siemens Mendix Runtimeconfirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- Siemens Desigo CCconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Erlang security advisory (AV26-750)confirmed
- KEV: CVE-2026-16812 — Arista VeloCloud Orchestrator (Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability)confirmed
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- Report desk: Mandiant M-Trends 2026published
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- [Control Systems] Moxa security advisory (AV26-742)confirmed
- [UPDATE] [mittel] Bitdefender Internet und Total Security: Schwachstelle ermöglicht Privilegieneskalationconfirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Panduit IntraVUEconfirmed
- Johnson Controls XAAP Androidconfirmed
- MZ Automation libIEC61850confirmed
- Weintek cMT3092Xconfirmed
- Ubuntu snap-confine Vulnerability Enables Local Root Accesscorroborated
- Tenable security advisory (AV26-724)confirmed
- Rockwell Automation Studio 5000 Logix Designerconfirmed
- Siemens IAM Clientconfirmed
- Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Executioncorroborated
- KEV: CVE-2026-0770 — Langflow Langflow (Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability)confirmed
- Inc Ransomware Exploits SonicWall SMA Zero-Dayscorroborated
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
MFA
Active threats this quarter that MFA addresses:
Prevent
- Bulletin de sécurité Red Hat (AV26-803)confirmed
- Pulsetto Vagus Nerve Stimulatorconfirmed
- Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networkscorroborated
- WordPress security advisory (AV26-792)confirmed
- Checkpoint security advisory (AV26-774)confirmed
- N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incompletecorroborated
- Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malwarecorroborated
- Rails security advisory (AV26-767)confirmed
- SolarWinds security advisory (AV26-766)confirmed
- VMware security advisory (AV26-763)confirmed
- In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppablecorroborated
- Spring security advisory (AV26-759)confirmed
- Cisco security advisory (AV26-757)confirmed
- MikroTik RouterOSconfirmed
- Toptech Systems RCU II+ and Multiload II+confirmed
- MikroTik RouterOSconfirmed
- Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Moduleconfirmed
- Johnson Controls OpenBlue Employeeconfirmed
- Critical VM Escape Vulnerability Patched in VMware ESXicorroborated
- KEV: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability)confirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Erlang security advisory (AV26-750)confirmed
- Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentialscorroborated
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- Hugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hackcorroborated
- Report desk: Mandiant M-Trends 2026published
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- [Control Systems] Moxa security advisory (AV26-742)confirmed
- Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codescorroborated
- Weintek cMT3092Xconfirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- New Dolphin X Stealer Employs AI Profiling to Prioritize Targetscorroborated
- OpenAI scored an own goal with HuggingFace attack, showing how open Chinese models are winningcorroborated
- OpenAI admits it was the source of the agent swarm that attacked Hugging Facecorroborated
- HPE security advisory (AV26-727)confirmed
- Tenable security advisory (AV26-724)confirmed
- Siemens Opcenter Xconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- Multiple Jscrambler Packages Impacted by Supply Chain Attackcorroborated
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
SSO
Active threats this quarter that SSO addresses:
Prevent
- Bulletin de sécurité Red Hat (AV26-803)confirmed
- Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malwarecorroborated
- Rails security advisory (AV26-767)confirmed
- SolarWinds security advisory (AV26-766)confirmed
- 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026corroborated
- Okta buys AI security startup Permiso; source says for about $200Mcorroborated
- In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppablecorroborated
- Spring security advisory (AV26-759)confirmed
- Cisco security advisory (AV26-757)confirmed
- MikroTik RouterOSconfirmed
- MikroTik RouterOSconfirmed
- KEV: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability)confirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Erlang security advisory (AV26-750)confirmed
- [UPDATE] [hoch] Shibboleth Service Provider: Schwachstelle ermöglicht SQL Injectionconfirmed
- Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentialscorroborated
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- Hugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hackcorroborated
- Report desk: Mandiant M-Trends 2026published
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- [Control Systems] Moxa security advisory (AV26-742)confirmed
- Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codescorroborated
- Weintek cMT3092Xconfirmed
- New Dolphin X Stealer Employs AI Profiling to Prioritize Targetscorroborated
- OpenAI scored an own goal with HuggingFace attack, showing how open Chinese models are winningcorroborated
- OpenAI admits it was the source of the agent swarm that attacked Hugging Facecorroborated
- Tenable security advisory (AV26-724)confirmed
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- Multiple Jscrambler Packages Impacted by Supply Chain Attackcorroborated
Help Desk validation
Active threats this quarter that Help Desk validation addresses:
Prevent
- Bulletin de sécurité Red Hat (AV26-803)confirmed
- Rails security advisory (AV26-767)confirmed
- Cisco security advisory (AV26-757)confirmed
- KEV: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability)confirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Report desk: Mandiant M-Trends 2026published
- Progress security advisory (AV26-746)confirmed
- [Control Systems] Moxa security advisory (AV26-742)confirmed
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
WAF
Active threats this quarter that WAF addresses:
Prevent
- Grafana security advisory (AV26-796)confirmed
- Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networkscorroborated
- KEV: CVE-2026-72898 — Metabase Metabase (Metabase SQL Injection Vulnerability)confirmed
- China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flawcorroborated
- WordPress security advisory (AV26-792)confirmed
- WebPros security advisory (AV26-790)confirmed
- Critical Progress LoadMaster flaw now actively exploited in attacksclaimed
- Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigatecorroborated
- ABB Ability Zenonconfirmed
- Medixant RadiAnt DICOMconfirmed
- CISA Adds One Known Exploited Vulnerability to Catalogconfirmed
- Checkpoint security advisory (AV26-774)confirmed
- New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Rootconfirmed
- N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incompletecorroborated
- Rails security advisory (AV26-767)confirmed
- SolarWinds security advisory (AV26-766)confirmed
- VMware security advisory (AV26-763)confirmed
- WebPros security advisory (AV26-761)confirmed
- Spring security advisory (AV26-759)confirmed
- Schneider Electric IGSSconfirmed
- Toptech Systems RCU II+ and Multiload II+confirmed
- o6 Automation open62541confirmed
- Schneider Electric IGSSconfirmed
- Johnson Controls OpenBlue Employeeconfirmed
- CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCsconfirmed
- Critical VM Escape Vulnerability Patched in VMware ESXicorroborated
- KEV: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability)confirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- Siemens Desigo CCconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- KEV: CVE-2026-16812 — Arista VeloCloud Orchestrator (Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability)confirmed
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- Report desk: Mandiant M-Trends 2026published
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codescorroborated
- Johnson Controls XAAP Androidconfirmed
- MZ Automation libIEC61850confirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devicescorroborated
- Ubuntu snap-confine Vulnerability Enables Local Root Accesscorroborated
- HPE security advisory (AV26-727)confirmed
- Tenable security advisory (AV26-724)confirmed
- Rockwell Automation Studio 5000 Logix Designerconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Executioncorroborated
- KEV: CVE-2026-0770 — Langflow Langflow (Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability)confirmed
- Inc Ransomware Exploits SonicWall SMA Zero-Dayscorroborated
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
- What to Know About China's DeepSeek AIcorroborated
Detect
- WordPress security advisory (AV26-792)confirmed
- Spring security advisory (AV26-759)confirmed
- Johnson Controls OpenBlue Employeeconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
Vulnerability Management
Active threats this quarter that Vulnerability Management addresses:
Prevent
- Bulletin de sécurité Red Hat (AV26-803)confirmed
- Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-dayscorroborated
- Grafana security advisory (AV26-796)confirmed
- Pulsetto Vagus Nerve Stimulatorconfirmed
- Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networkscorroborated
- KEV: CVE-2026-72898 — Metabase Metabase (Metabase SQL Injection Vulnerability)confirmed
- China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flawcorroborated
- WordPress security advisory (AV26-792)confirmed
- WebPros security advisory (AV26-790)confirmed
- Critical Progress LoadMaster flaw now actively exploited in attacksclaimed
- Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigatecorroborated
- Photos: Black Hat USA 2026corroborated
- ABB Ability Zenonconfirmed
- Johnson Controls Inc. TL280confirmed
- Johnson Controls Inc. TL280confirmed
- Medixant RadiAnt DICOMconfirmed
- CISA Adds One Known Exploited Vulnerability to Catalogconfirmed
- Checkpoint security advisory (AV26-774)confirmed
- Thermo Fisher Applied Biosystems Genetic Analyzersconfirmed
- New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Rootconfirmed
- [UPDATE] [hoch] MariaDB: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriffconfirmed
- [UPDATE] [mittel] libssh: Mehrere Schwachstellen ermöglichen Manipulation von Dateien und DoSconfirmed
- [UPDATE] [hoch] poppler: Schwachstelle ermöglicht Codeausführungconfirmed
- [UPDATE] [hoch] PowerDNS: Mehrere Schwachstellenconfirmed
- [UPDATE] [niedrig] Checkmk: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen und Manipulation von Dateienconfirmed
- [UPDATE] [hoch] FreeRDP: Schwachstelle ermöglicht Codeausführungconfirmed
- [UPDATE] [niedrig] Contao: Schwachstelle ermöglicht Offenlegung von Informationenconfirmed
- [UPDATE] [hoch] Node.js: Mehrere Schwachstellenconfirmed
- N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incompletecorroborated
- Google security advisory (AV26-768)confirmed
- Rails security advisory (AV26-767)confirmed
- SolarWinds security advisory (AV26-766)confirmed
- [UPDATE] [hoch] PackageKit: Schwachstelle ermöglicht Privilegieneskalationconfirmed
- [UPDATE] [mittel] GIMP: Schwachstelle ermöglicht Codeausführungconfirmed
- [NEU] [hoch] Rancher: Mehrere Schwachstellenconfirmed
- [NEU] [mittel] WP Royal Royal Elementor Addons: Schwachstelle ermöglicht Offenlegung von Informationenconfirmed
- [NEU] [hoch] PHP: Mehrere Schwachstellenconfirmed
- [UPDATE] [mittel] Apache Tomcat: Mehrere Schwachstellenconfirmed
- [UPDATE] [mittel] ImageMagick: Schwachstelle ermöglicht Denial of Serviceconfirmed
- [UPDATE] [mittel] IBM Langflow Desktop OSS: Schwachstelle ermöglicht Offenlegung von Informationenconfirmed
- PHP Group security advisory (AV26-764)confirmed
- VMware security advisory (AV26-763)confirmed
- [Control Systems] Phoenix Contact security advisory (AV26-762)confirmed
- WebPros security advisory (AV26-761)confirmed
- Spring security advisory (AV26-759)confirmed
- GitLab security advisory (AV26-758)confirmed
- Cisco security advisory (AV26-757)confirmed
- NASA Core Flight System (cFS) Health & Safety (HS) Applicationconfirmed
- MikroTik RouterOSconfirmed
- Mitsubishi Electric CC-Link IE TSN Communication Protocolconfirmed
- Watchfire Controller Softwareconfirmed
- Schneider Electric IGSSconfirmed
- Toptech Systems RCU II+ and Multiload II+confirmed
- o6 Automation open62541confirmed
- MikroTik RouterOSconfirmed
- Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Moduleconfirmed
- Schneider Electric IGSSconfirmed
- Johnson Controls OpenBlue Employeeconfirmed
- CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCsconfirmed
- [UPDATE] [mittel] vim: Schwachstelle ermöglicht Denial of Serviceconfirmed
- [NEU] [hoch] IBM App Connect Enterprise: Mehrere Schwachstellenconfirmed
- [NEU] [hoch] Google Chrome: Mehrere Schwachstellenconfirmed
- [NEU] [mittel] Red Hat OpenStack (Neutron): Schwachstelle ermöglicht Manipulation von Daten und Umgehen von Sicherheitsvorkehrungenconfirmed
- [UPDATE] [niedrig] libxml2: Schwachstelle ermöglicht Denial of Serviceconfirmed
- [UPDATE] [mittel] Netty: Mehrere Schwachstellenconfirmed
- Critical VM Escape Vulnerability Patched in VMware ESXicorroborated
- KEV: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability)confirmed
- igloohome Smart Lock Mobile Applicationconfirmed
- Siemens Mendix Runtimeconfirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- Siemens Desigo CCconfirmed
- ABB KNX Update Toolconfirmed
- [UPDATE] [hoch] Oracle Solaris Drittanbieterkomponenten: Mehrere Schwachstellenconfirmed
- [UPDATE] [mittel] OpenBSD: Schwachstelle ermöglicht nicht spezifizierten Angriffconfirmed
- [UPDATE] [hoch] cPanel cPanel/WHM: Mehrere Schwachstellenconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Erlang security advisory (AV26-750)confirmed
- Redis security advisory (AV26-748)confirmed
- [UPDATE] [hoch] Shibboleth Service Provider: Schwachstelle ermöglicht SQL Injectionconfirmed
- [UPDATE] [mittel] CPython: Schwachstelle ermöglicht Manipulation von Datenconfirmed
- [UPDATE] [mittel] Octopus Deploy: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungenconfirmed
- [UPDATE] [hoch] Google Cloud Platform: Schwachstelle ermöglicht Cross-Site Scriptingconfirmed
- [UPDATE] [hoch] ffmpeg: Schwachstelle ermöglicht Codeausführung und Denial of Serviceconfirmed
- KEV: CVE-2026-16812 — Arista VeloCloud Orchestrator (Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability)confirmed
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- Leak-site claim: ExfilSquad lists Frontier Airlinescorroborated
- Report desk: Mandiant M-Trends 2026published
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- HPE security advisory (AV26-745)confirmed
- MongoDB security advisory (AV26-744)confirmed
- Ericsson security advisory (AV26-743)confirmed
- [Control Systems] Moxa security advisory (AV26-742)confirmed
- Google Chrome security advisory (AV26-741)confirmed
- Microsoft Edge security advisory (AV26-740)confirmed
- [UPDATE] [niedrig] BusyBox: Mehrere Schwachstellenconfirmed
- [UPDATE] [mittel] wget: Mehrere Schwachstellen ermöglichen Denial of Serviceconfirmed
- [UPDATE] [hoch] rsyslog: Schwachstelle ermöglicht Denial of Service und potenziell Codeausführungconfirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codescorroborated
- JetBrains security advisory (AV26-739)confirmed
- Panduit IntraVUEconfirmed
- Johnson Controls XAAP Androidconfirmed
- MZ Automation libIEC61850confirmed
- Weintek cMT3092Xconfirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- [UPDATE] [mittel] Podman: Schwachstelle ermöglicht Offenlegung von Informationenconfirmed
- [UPDATE] [mittel] systemd: Mehrere Schwachstellenconfirmed
- [UPDATE] [mittel] GStreamer: Mehrere Schwachstellenconfirmed
- [UPDATE] [mittel] Veeam Backup & Replication: Schwachstelle ermöglicht Privilegieneskalationconfirmed
- US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devicescorroborated
- n8n security advisory (AV26-733)confirmed
- ISC BIND security advisory (AV26-732)confirmed
- Atlassian security advisory (AV26-731)confirmed
- Oracle security advisory – July 2026 quarterly rollup (AV26-729)confirmed
- Ubuntu snap-confine Vulnerability Enables Local Root Accesscorroborated
- [UPDATE] [mittel] Linux Kernel (Bluetooth): Mehrere Schwachstellen ermöglichen Denial of Serviceconfirmed
- [UPDATE] [mittel] libvirt: Schwachstelle ermöglicht Denial of Serviceconfirmed
- [UPDATE] [hoch] Evince: Schwachstelle ermöglicht Codeausführungconfirmed
- [UPDATE] [hoch] Apache Tomcat und Tomcat Native: Mehrere Schwachstellenconfirmed
- HPE security advisory (AV26-727)confirmed
- Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilitiescorroborated
- Tenable security advisory (AV26-724)confirmed
- Rockwell Automation Studio 5000 Logix Designerconfirmed
- Siemens CADRAconfirmed
- Siemens Opcenter Xconfirmed
- Siemens IAM Clientconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Executioncorroborated
- KEV: CVE-2026-0770 — Langflow Langflow (Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability)confirmed
- Estée Lauder discloses data breach via Oracle E-Business flawcorroborated
- Inc Ransomware Exploits SonicWall SMA Zero-Dayscorroborated
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
- What to Know About China's DeepSeek AIcorroborated
Detect
- Pulsetto Vagus Nerve Stimulatorconfirmed
- Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networkscorroborated
- Checkpoint security advisory (AV26-774)confirmed
- Thermo Fisher Applied Biosystems Genetic Analyzersconfirmed
- N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incompletecorroborated
- Rails security advisory (AV26-767)confirmed
- Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Moduleconfirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- ABB KNX Update Toolconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- Progress security advisory (AV26-746)confirmed
- HPE security advisory (AV26-727)confirmed
- Siemens Opcenter Xconfirmed
- KEV: CVE-2026-0770 — Langflow Langflow (Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability)confirmed
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
Secure Email Gateway
Active threats this quarter that Secure Email Gateway addresses:
Prevent
- WordPress security advisory (AV26-792)confirmed
- Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malwarecorroborated
- 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026corroborated
- Spring security advisory (AV26-759)confirmed
- Johnson Controls OpenBlue Employeeconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentialscorroborated
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisationsconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Fake FBI agents target people who already got scammedcorroborated
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Proscorroborated
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
Detect
- WordPress security advisory (AV26-792)confirmed
- Spring security advisory (AV26-759)confirmed
- Johnson Controls OpenBlue Employeeconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
Integrated Email Protection
Active threats this quarter that Integrated Email Protection addresses:
Prevent
- Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malwarecorroborated
- 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026corroborated
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentialscorroborated
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisationsconfirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- Fake FBI agents target people who already got scammedcorroborated
- Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Proscorroborated
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
Detect
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
Phishing simulation
Active threats this quarter that Phishing simulation addresses:
Prevent
- Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malwarecorroborated
- 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026corroborated
- Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentialscorroborated
- UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisationsconfirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- Fake FBI agents target people who already got scammedcorroborated
- Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Proscorroborated
Security awareness training
Active threats this quarter that Security awareness training addresses:
Prevent
- WordPress security advisory (AV26-792)confirmed
- Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malwarecorroborated
- 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026corroborated
- Spring security advisory (AV26-759)confirmed
- Johnson Controls OpenBlue Employeeconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentialscorroborated
- Progress security advisory (AV26-746)confirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisationsconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Fake FBI agents target people who already got scammedcorroborated
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Proscorroborated
Data Loss Prevention
Active threats this quarter that Data Loss Prevention addresses:
Prevent
- Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networkscorroborated
- China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flawcorroborated
- Ransom Cartel ransomware creator sentenced to 16 years in prisoncorroborated
- Canadian Man Pleads Guilty to Hacking U.S. Cloud Storage Provider and Extorting Its Customers for Millionsconfirmed
- 77 Open VSX extensions found harvesting developer infocorroborated
- N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incompletecorroborated
- Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malwarecorroborated
- 8-K Item 1.05: AMGEN INC reports material cybersecurity incidentconfirmed
- In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppablecorroborated
- Spring security advisory (AV26-759)confirmed
- Open Source Software: Security Principles and Practicesconfirmed
- 8-K Item 1.05: River Financial Corp reports material cybersecurity incidentconfirmed
- 2026 Minimum Elements for a Software Bill of Materials (SBOM)confirmed
- igloohome Smart Lock Mobile Applicationconfirmed
- Siemens Mendix Runtimeconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Leak-site claim: shinyhunters lists Ernst & Youngcorroborated
- Coca-Cola Confirms Data Breach After Fairlife Ransomware Attackcorroborated
- Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentialscorroborated
- Hugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hackcorroborated
- Leak-site claim: ExfilSquad lists Frontier Airlinescorroborated
- Leak-site claim: ExfilSquad lists Police National Legal Databasecorroborated
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Johnson Controls XAAP Androidconfirmed
- OpenAI scored an own goal with HuggingFace attack, showing how open Chinese models are winningcorroborated
- OpenAI admits it was the source of the agent swarm that attacked Hugging Facecorroborated
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- Multiple Jscrambler Packages Impacted by Supply Chain Attackcorroborated
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
- 8-K Item 1.05: Hewlett Packard Enterprise Co reports material cybersecurity incidentconfirmed
Detect
- Thermo Fisher Applied Biosystems Genetic Analyzersconfirmed
- Spring security advisory (AV26-759)confirmed
- igloohome Smart Lock Mobile Applicationconfirmed
- ABB KNX Update Toolconfirmed
- Johnson Controls XAAP Androidconfirmed
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
Microsoft 365 backup
Active threats this quarter that Microsoft 365 backup addresses:
Recover
Entra ID backup
No story in this window ties to Entra ID backup specifically:
Identity backup restores directory objects after tampering or deletion. 50 extortion or ransomware claims this window, none naming an Entra ID or Azure AD estate.
Google Workspace backup
No story in this window ties to Google Workspace backup specifically:
Backup is the recovery arm when data is encrypted or purged. 50 extortion or ransomware claims this window, none naming a Google Workspace estate.
Firewall
Active threats this quarter that Firewall addresses:
Prevent
- Grafana security advisory (AV26-796)confirmed
- Pulsetto Vagus Nerve Stimulatorconfirmed
- Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networkscorroborated
- KEV: CVE-2026-72898 — Metabase Metabase (Metabase SQL Injection Vulnerability)confirmed
- WordPress security advisory (AV26-792)confirmed
- WebPros security advisory (AV26-790)confirmed
- Critical Progress LoadMaster flaw now actively exploited in attacksclaimed
- ABB Ability Zenonconfirmed
- Medixant RadiAnt DICOMconfirmed
- CISA Adds One Known Exploited Vulnerability to Catalogconfirmed
- Checkpoint security advisory (AV26-774)confirmed
- Thermo Fisher Applied Biosystems Genetic Analyzersconfirmed
- New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Rootconfirmed
- N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incompletecorroborated
- Rails security advisory (AV26-767)confirmed
- SolarWinds security advisory (AV26-766)confirmed
- VMware security advisory (AV26-763)confirmed
- In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppablecorroborated
- WebPros security advisory (AV26-761)confirmed
- Spring security advisory (AV26-759)confirmed
- Cisco security advisory (AV26-757)confirmed
- NASA Core Flight System (cFS) Health & Safety (HS) Applicationconfirmed
- MikroTik RouterOSconfirmed
- Mitsubishi Electric CC-Link IE TSN Communication Protocolconfirmed
- Schneider Electric IGSSconfirmed
- Toptech Systems RCU II+ and Multiload II+confirmed
- o6 Automation open62541confirmed
- MikroTik RouterOSconfirmed
- Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Moduleconfirmed
- Schneider Electric IGSSconfirmed
- Johnson Controls OpenBlue Employeeconfirmed
- The Network Has Become the Control Plane for AI Securitycorroborated
- Critical VM Escape Vulnerability Patched in VMware ESXicorroborated
- KEV: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability)confirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- Siemens Desigo CCconfirmed
- ABB KNX Update Toolconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Siemens Mendix Runtimeconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Erlang security advisory (AV26-750)confirmed
- KEV: CVE-2026-16812 — Arista VeloCloud Orchestrator (Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability)confirmed
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- Report desk: Mandiant M-Trends 2026published
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Panduit IntraVUEconfirmed
- Johnson Controls XAAP Androidconfirmed
- MZ Automation libIEC61850confirmed
- Weintek cMT3092Xconfirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- Ubuntu snap-confine Vulnerability Enables Local Root Accesscorroborated
- HPE security advisory (AV26-727)confirmed
- Tenable security advisory (AV26-724)confirmed
- Rockwell Automation Studio 5000 Logix Designerconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Executioncorroborated
- KEV: CVE-2026-0770 — Langflow Langflow (Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability)confirmed
- Inc Ransomware Exploits SonicWall SMA Zero-Dayscorroborated
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
Detect
- Panduit IntraVUEconfirmed
SASE / SSE
Active threats this quarter that SASE / SSE addresses:
Prevent
- Grafana security advisory (AV26-796)confirmed
- Pulsetto Vagus Nerve Stimulatorconfirmed
- Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networkscorroborated
- KEV: CVE-2026-72898 — Metabase Metabase (Metabase SQL Injection Vulnerability)confirmed
- WordPress security advisory (AV26-792)confirmed
- WebPros security advisory (AV26-790)confirmed
- Critical Progress LoadMaster flaw now actively exploited in attacksclaimed
- ABB Ability Zenonconfirmed
- Medixant RadiAnt DICOMconfirmed
- CISA Adds One Known Exploited Vulnerability to Catalogconfirmed
- Checkpoint security advisory (AV26-774)confirmed
- Thermo Fisher Applied Biosystems Genetic Analyzersconfirmed
- New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Rootconfirmed
- N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incompletecorroborated
- Rails security advisory (AV26-767)confirmed
- SolarWinds security advisory (AV26-766)confirmed
- VMware security advisory (AV26-763)confirmed
- WebPros security advisory (AV26-761)confirmed
- Spring security advisory (AV26-759)confirmed
- Cisco security advisory (AV26-757)confirmed
- NASA Core Flight System (cFS) Health & Safety (HS) Applicationconfirmed
- MikroTik RouterOSconfirmed
- Mitsubishi Electric CC-Link IE TSN Communication Protocolconfirmed
- Schneider Electric IGSSconfirmed
- Toptech Systems RCU II+ and Multiload II+confirmed
- o6 Automation open62541confirmed
- MikroTik RouterOSconfirmed
- Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Moduleconfirmed
- Schneider Electric IGSSconfirmed
- Johnson Controls OpenBlue Employeeconfirmed
- The Network Has Become the Control Plane for AI Securitycorroborated
- Critical VM Escape Vulnerability Patched in VMware ESXicorroborated
- KEV: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability)confirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- Siemens Desigo CCconfirmed
- ABB KNX Update Toolconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Erlang security advisory (AV26-750)confirmed
- KEV: CVE-2026-16812 — Arista VeloCloud Orchestrator (Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability)confirmed
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- Report desk: Mandiant M-Trends 2026published
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Panduit IntraVUEconfirmed
- Johnson Controls XAAP Androidconfirmed
- MZ Automation libIEC61850confirmed
- Weintek cMT3092Xconfirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- Ubuntu snap-confine Vulnerability Enables Local Root Accesscorroborated
- HPE security advisory (AV26-727)confirmed
- Tenable security advisory (AV26-724)confirmed
- Rockwell Automation Studio 5000 Logix Designerconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Executioncorroborated
- KEV: CVE-2026-0770 — Langflow Langflow (Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability)confirmed
- Inc Ransomware Exploits SonicWall SMA Zero-Dayscorroborated
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
Detect
- Pulsetto Vagus Nerve Stimulatorconfirmed
- Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networkscorroborated
- WordPress security advisory (AV26-792)confirmed
- Medixant RadiAnt DICOMconfirmed
- Checkpoint security advisory (AV26-774)confirmed
- Thermo Fisher Applied Biosystems Genetic Analyzersconfirmed
- N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incompletecorroborated
- SolarWinds security advisory (AV26-766)confirmed
- VMware security advisory (AV26-763)confirmed
- Spring security advisory (AV26-759)confirmed
- NASA Core Flight System (cFS) Health & Safety (HS) Applicationconfirmed
- MikroTik RouterOSconfirmed
- Mitsubishi Electric CC-Link IE TSN Communication Protocolconfirmed
- Schneider Electric IGSSconfirmed
- MikroTik RouterOSconfirmed
- Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Moduleconfirmed
- Schneider Electric IGSSconfirmed
- Johnson Controls OpenBlue Employeeconfirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- Siemens Desigo CCconfirmed
- ABB KNX Update Toolconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Erlang security advisory (AV26-750)confirmed
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- Report desk: Mandiant M-Trends 2026published
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Panduit IntraVUEconfirmed
- MZ Automation libIEC61850confirmed
- Weintek cMT3092Xconfirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- HPE security advisory (AV26-727)confirmed
- Tenable security advisory (AV26-724)confirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- KEV: CVE-2026-0770 — Langflow Langflow (Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability)confirmed
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
AI security
Active threats this quarter that AI security addresses:
Detect
- WordPress security advisory (AV26-792)confirmed
- Ransom Cartel ransomware creator sentenced to 16 years in prisoncorroborated
- Canadian Man Pleads Guilty to Hacking U.S. Cloud Storage Provider and Extorting Its Customers for Millionsconfirmed
- Spring security advisory (AV26-759)confirmed
- Johnson Controls OpenBlue Employeeconfirmed
- CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCsconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Progress security advisory (AV26-746)confirmed
- UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisationsconfirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devicescorroborated
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Fake FBI agents target people who already got scammedcorroborated
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- More than 1,000 domains illegally streaming World Cup games seized, DOJ sayscorroborated
Managed XDR
Active threats this quarter that Managed XDR addresses:
Detect
- Bulletin de sécurité Red Hat (AV26-803)confirmed
- Grafana security advisory (AV26-796)confirmed
- Pulsetto Vagus Nerve Stimulatorconfirmed
- Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networkscorroborated
- KEV: CVE-2026-72898 — Metabase Metabase (Metabase SQL Injection Vulnerability)confirmed
- China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flawcorroborated
- WordPress security advisory (AV26-792)confirmed
- WebPros security advisory (AV26-790)confirmed
- Critical Progress LoadMaster flaw now actively exploited in attacksclaimed
- Leak-site claim: Helix lists Uberclaimed
- Leak-site claim: Helix lists Highwoods Propertiesclaimed
- Cyberattack on North Carolina Ports ‘contained’ as Coast Guard, state officials investigatecorroborated
- ABB Ability Zenonconfirmed
- Medixant RadiAnt DICOMconfirmed
- Ransom Cartel ransomware creator sentenced to 16 years in prisoncorroborated
- CISA Adds One Known Exploited Vulnerability to Catalogconfirmed
- Canadian Man Pleads Guilty to Hacking U.S. Cloud Storage Provider and Extorting Its Customers for Millionsconfirmed
- 77 Open VSX extensions found harvesting developer infocorroborated
- Checkpoint security advisory (AV26-774)confirmed
- Thermo Fisher Applied Biosystems Genetic Analyzersconfirmed
- New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Rootconfirmed
- N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incompletecorroborated
- Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malwarecorroborated
- Rails security advisory (AV26-767)confirmed
- SolarWinds security advisory (AV26-766)confirmed
- 8-K Item 1.05: AMGEN INC reports material cybersecurity incidentconfirmed
- VMware security advisory (AV26-763)confirmed
- In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppablecorroborated
- WebPros security advisory (AV26-761)confirmed
- Spring security advisory (AV26-759)confirmed
- Cisco security advisory (AV26-757)confirmed
- NASA Core Flight System (cFS) Health & Safety (HS) Applicationconfirmed
- MikroTik RouterOSconfirmed
- Mitsubishi Electric CC-Link IE TSN Communication Protocolconfirmed
- Watchfire Controller Softwareconfirmed
- Schneider Electric IGSSconfirmed
- Toptech Systems RCU II+ and Multiload II+confirmed
- o6 Automation open62541confirmed
- MikroTik RouterOSconfirmed
- Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Moduleconfirmed
- Schneider Electric IGSSconfirmed
- Johnson Controls OpenBlue Employeeconfirmed
- CISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCsconfirmed
- Open Source Software: Security Principles and Practicesconfirmed
- 8-K Item 1.05: River Financial Corp reports material cybersecurity incidentconfirmed
- 2026 Minimum Elements for a Software Bill of Materials (SBOM)confirmed
- Critical VM Escape Vulnerability Patched in VMware ESXicorroborated
- KEV: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability)confirmed
- igloohome Smart Lock Mobile Applicationconfirmed
- Siemens Mendix Runtimeconfirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- Siemens Desigo CCconfirmed
- ABB KNX Update Toolconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Erlang security advisory (AV26-750)confirmed
- Leak-site claim: shinyhunters lists Ernst & Youngcorroborated
- Coca-Cola Confirms Data Breach After Fairlife Ransomware Attackcorroborated
- Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentialscorroborated
- KEV: CVE-2026-16812 — Arista VeloCloud Orchestrator (Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability)confirmed
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- Hugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hackcorroborated
- Leak-site claim: ExfilSquad lists Frontier Airlinescorroborated
- Leak-site claim: ExfilSquad lists Police National Legal Databasecorroborated
- Report desk: Mandiant M-Trends 2026published
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- [Control Systems] Moxa security advisory (AV26-742)confirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codescorroborated
- Panduit IntraVUEconfirmed
- Johnson Controls XAAP Androidconfirmed
- MZ Automation libIEC61850confirmed
- Weintek cMT3092Xconfirmed
- UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisationsconfirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- New Dolphin X Stealer Employs AI Profiling to Prioritize Targetscorroborated
- US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devicescorroborated
- OpenAI scored an own goal with HuggingFace attack, showing how open Chinese models are winningcorroborated
- Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattackcorroborated
- Ubuntu snap-confine Vulnerability Enables Local Root Accesscorroborated
- OpenAI admits it was the source of the agent swarm that attacked Hugging Facecorroborated
- Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leakcorroborated
- HPE security advisory (AV26-727)confirmed
- Tenable security advisory (AV26-724)confirmed
- Rockwell Automation Studio 5000 Logix Designerconfirmed
- Siemens Opcenter Xconfirmed
- Siemens IAM Clientconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Fake FBI agents target people who already got scammedcorroborated
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Executioncorroborated
- KEV: CVE-2026-0770 — Langflow Langflow (Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability)confirmed
- Estée Lauder discloses data breach via Oracle E-Business flawcorroborated
- More than 1,000 domains illegally streaming World Cup games seized, DOJ sayscorroborated
- Hackers were inside South Korea's diplomat training system for 9 monthscorroborated
- An AI SOC Evaluation Guide for Security Leaderscorroborated
- Inc Ransomware Exploits SonicWall SMA Zero-Dayscorroborated
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- Multiple Jscrambler Packages Impacted by Supply Chain Attackcorroborated
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
- What to Know About China's DeepSeek AIcorroborated
- 8-K Item 1.05: Hewlett Packard Enterprise Co reports material cybersecurity incidentconfirmed
Respond
- Bulletin de sécurité Red Hat (AV26-803)confirmed
- Grafana security advisory (AV26-796)confirmed
- Pulsetto Vagus Nerve Stimulatorconfirmed
- Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networkscorroborated
- KEV: CVE-2026-72898 — Metabase Metabase (Metabase SQL Injection Vulnerability)confirmed
- China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flawcorroborated
- WordPress security advisory (AV26-792)confirmed
- WebPros security advisory (AV26-790)confirmed
- Critical Progress LoadMaster flaw now actively exploited in attacksclaimed
- Leak-site claim: Helix lists Uberclaimed
- Leak-site claim: Helix lists Highwoods Propertiesclaimed
- ABB Ability Zenonconfirmed
- Medixant RadiAnt DICOMconfirmed
- Ransom Cartel ransomware creator sentenced to 16 years in prisoncorroborated
- CISA Adds One Known Exploited Vulnerability to Catalogconfirmed
- Canadian Man Pleads Guilty to Hacking U.S. Cloud Storage Provider and Extorting Its Customers for Millionsconfirmed
- 77 Open VSX extensions found harvesting developer infocorroborated
- Checkpoint security advisory (AV26-774)confirmed
- Thermo Fisher Applied Biosystems Genetic Analyzersconfirmed
- New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Rootconfirmed
- N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incompletecorroborated
- Rails security advisory (AV26-767)confirmed
- SolarWinds security advisory (AV26-766)confirmed
- 8-K Item 1.05: AMGEN INC reports material cybersecurity incidentconfirmed
- VMware security advisory (AV26-763)confirmed
- WebPros security advisory (AV26-761)confirmed
- Spring security advisory (AV26-759)confirmed
- Cisco security advisory (AV26-757)confirmed
- NASA Core Flight System (cFS) Health & Safety (HS) Applicationconfirmed
- MikroTik RouterOSconfirmed
- Mitsubishi Electric CC-Link IE TSN Communication Protocolconfirmed
- Watchfire Controller Softwareconfirmed
- Schneider Electric IGSSconfirmed
- Toptech Systems RCU II+ and Multiload II+confirmed
- o6 Automation open62541confirmed
- MikroTik RouterOSconfirmed
- Rockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Moduleconfirmed
- Schneider Electric IGSSconfirmed
- Johnson Controls OpenBlue Employeeconfirmed
- Open Source Software: Security Principles and Practicesconfirmed
- 8-K Item 1.05: River Financial Corp reports material cybersecurity incidentconfirmed
- 2026 Minimum Elements for a Software Bill of Materials (SBOM)confirmed
- Critical VM Escape Vulnerability Patched in VMware ESXicorroborated
- KEV: CVE-2026-20316 — Cisco Secure Firewall Management Center (FMC) (Cisco Secure Firewall Management Center Use of Hard-coded Password Vulnerability)confirmed
- igloohome Smart Lock Mobile Applicationconfirmed
- Siemens Mendix Runtimeconfirmed
- Siemens SIMATIC S7-PLCSIM Advancedconfirmed
- Siemens Desigo CCconfirmed
- ABB KNX Update Toolconfirmed
- MikroTik RouterOS and Cloud Hosted Routerconfirmed
- Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging Incorroborated
- Erlang security advisory (AV26-750)confirmed
- Leak-site claim: shinyhunters lists Ernst & Youngcorroborated
- Coca-Cola Confirms Data Breach After Fairlife Ransomware Attackcorroborated
- KEV: CVE-2026-16812 — Arista VeloCloud Orchestrator (Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerability)confirmed
- KEV: CVE-2025-68686 — Fortinet FortiOS (Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability)confirmed
- Leak-site claim: ExfilSquad lists Frontier Airlinescorroborated
- Leak-site claim: ExfilSquad lists Police National Legal Databasecorroborated
- Report desk: Mandiant M-Trends 2026published
- California AG breach notice: Zacks Investment Research, Inc.confirmed
- Progress security advisory (AV26-746)confirmed
- [Control Systems] Moxa security advisory (AV26-742)confirmed
- Clop ransomware targets Windchill, FlexPLM in data theft attackscorroborated
- Panduit IntraVUEconfirmed
- Johnson Controls XAAP Androidconfirmed
- MZ Automation libIEC61850confirmed
- Weintek cMT3092Xconfirmed
- Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suiteconfirmed
- Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattackcorroborated
- Ubuntu snap-confine Vulnerability Enables Local Root Accesscorroborated
- Anubis ransomware claims Coca-Cola Fairlife attack, threatens data leakcorroborated
- HPE security advisory (AV26-727)confirmed
- Tenable security advisory (AV26-724)confirmed
- Rockwell Automation Studio 5000 Logix Designerconfirmed
- Siemens Opcenter Xconfirmed
- Siemens IAM Clientconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gangconfirmed
- Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Executioncorroborated
- KEV: CVE-2026-0770 — Langflow Langflow (Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability)confirmed
- Estée Lauder discloses data breach via Oracle E-Business flawcorroborated
- Hackers were inside South Korea's diplomat training system for 9 monthscorroborated
- An AI SOC Evaluation Guide for Security Leaderscorroborated
- Inc Ransomware Exploits SonicWall SMA Zero-Dayscorroborated
- Progress Restores ShareFile Storage Zones Access After Security Warningconfirmed
- Multiple Jscrambler Packages Impacted by Supply Chain Attackcorroborated
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
- 8-K Item 1.05: Hewlett Packard Enterprise Co reports material cybersecurity incidentconfirmed
Risk Management
Active threats this quarter that Risk Management addresses:
Compliance Assessments
Active threats this quarter that Compliance Assessments addresses:
Prevent
- 8-K Item 1.05: AMGEN INC reports material cybersecurity incidentconfirmed
- In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppablecorroborated
- Open Source Software: Security Principles and Practicesconfirmed
- 8-K Item 1.05: River Financial Corp reports material cybersecurity incidentconfirmed
- Siemens Mendix Runtimeconfirmed
- Coca-Cola Confirms Data Breach After Fairlife Ransomware Attackcorroborated
- Leak-site claim: ExfilSquad lists Police National Legal Databasecorroborated
- Estée Lauder discloses data breach via Oracle E-Business flawcorroborated
- Hackers were inside South Korea's diplomat training system for 9 monthscorroborated
- 8-K Item 1.05: Hewlett Packard Enterprise Co reports material cybersecurity incidentconfirmed
Third-Party Risk Management
Active threats this quarter that Third-Party Risk Management addresses:
Prevent
- Pulsetto Vagus Nerve Stimulatorconfirmed
- 77 Open VSX extensions found harvesting developer infocorroborated
- N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incompletecorroborated
- Open Source Software: Security Principles and Practicesconfirmed
- 2026 Minimum Elements for a Software Bill of Materials (SBOM)confirmed
- Leak-site claim: shinyhunters lists Ernst & Youngcorroborated
- Hugging Face CEO calls for ‘radical transparency’ after ‘unprecedented’ OpenAI hackcorroborated
- Progress security advisory (AV26-746)confirmed
- Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattackcorroborated
- OpenAI admits it was the source of the agent swarm that attacked Hugging Facecorroborated
- Siemens Opcenter Xconfirmed
- Siemens RUGGEDCOM APE1808 with Palo Alto Networks Virtual NGFWconfirmed
- KEV: CVE-2026-0770 — Langflow Langflow (Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability)confirmed
- Multiple Jscrambler Packages Impacted by Supply Chain Attackcorroborated
- CISA Adds Two Known Exploited Vulnerabilities to Catalogconfirmed
- 8-K Item 1.05: Hewlett Packard Enterprise Co reports material cybersecurity incidentconfirmed
Check one or more of your service offerings above to see the vulnerabilities, threats and incidents each one addresses.