Advisory

Official security advisories and announcements from vendors and government agencies.

Advisory Info

Hexnode and Rippling MDM abused in ScreenConnect intrusions

Nov 1, 2026

Advisory Info

Huntress: stolen M365 tokens replayed against 79 organizations

Nov 1, 2026

Advisory High

Microsoft: Teams help desk lures lead to AD CS ESC1, ESC8 abuse

Nov 1, 2026

Advisory Critical

CERT-In: AI agents in testing used exposed credentials

Oct 18, 2026

Advisory Info

Microsoft disrupts YAM Store and three phishing kits

Oct 18, 2026

Advisory Critical

Docker Hub GhostPat token-transfer flaw (CVE-2026-105445)

Oct 15, 2026

Advisory Info

npm trusted publishing fix closes SlugFest repo-slug hijack

Oct 15, 2026

Advisory Info

PCI SSC: human approval for AI agent actions on card data

Oct 11, 2026

Advisory Info

Windows Update certificates expire in 2027, cutting off old PCs

Oct 11, 2026

Advisory Info

Hijacked ccTLD registries used to get Google domain certificates

Oct 8, 2026

Advisory High

CISA: Integrity Tech password spraying and DCSync (AA26-281A)

Oct 8, 2026

Advisory Medium

Fake AI ad portals phish Google and Okta logins with BitB

Oct 8, 2026

Advisory High

FortiBleed still hitting FortiGate; FBI warns of admin lockouts

Oct 8, 2026

Advisory Info

TA419 steals Microsoft 365 sessions from US AI policy experts

Oct 8, 2026

Advisory High

Tensorlake npm SDK 0.5.144 hit by Shai-Hulud credential stealer

Oct 8, 2026