In 8 briefs, most recently 7 June 2026. RSS for this tag
Learn more: Vulnerabilities (NVD) ↗
Coverage in DanSec Daily
- Exploited Everest Forms Pro WordPress flaw (CVE-2026-3300), Meta AI bots abused to hijack Instagram accounts, and OpenAI's ChatGPT Lockdown Mode.
- The Hola Browser supply chain cryptominer, the DentaQuest breach of 2.6M accounts, and Cisco zero-days in Unified Communications Manager and SD-WAN Manager.
- The Stryker wiper attack by Handala, Michelin's Oracle EBS breach, critical n8n RCE flaws, and Microsoft's March Patch Tuesday fixes.
- Covers the eScan antivirus update server supply chain attack, RedKitten targeting human rights NGOs, and ShinyHunters' vishing campaigns stealing SSO and MFA …
- Instagram denies a 17M-account data breach claim, University of Hawaii Cancer Center confirms patient data theft, and California acts against data broker …
- Google Salesforce CRM breach, US federal court records cyberattack, and 60 malicious Ruby gems stealing developer credentials, plus Lenovo webcam flaws.
- Pandora and Cisco data breaches, Android and Adobe AEM zero-days, and SonicWall firewall attacks by ransomware gangs in this August 2025 brief.
- The Zoomcar breach affecting 8M+ users, Veeam's critical CVE-2025-23121 backup RCE, and the Langflow flaw exploited to deploy the Flodrix botnet.