TTP Advisory: Multiple Threats | Helix Vishing: New SharePoint data theft via voice phishing | Ill Bloom: Crypto wallet recovery phrase weakness — $5M+ stolen … Read More
TTP Advisory: XRING | No CVE | Severity: High (DoS) | Vendor: Alibaba | Product: XQUIC (QUIC/HTTP/3 library) | Affected: All releases through v1.9.4 | … Read More
CVE: CVE pending | Severity: Critical | CWE: CWE-79 (Cross-Site Scripting) | Vendor: Zimbra (Synacor) | Product: Zimbra Collaboration Suite — Classic Web Client | … Read More
TTP Advisory: GigaWiper / BLUERABBIT | No CVE | Threat Actor: Likely Iranian (per Google TIG) | Target: Windows systems | Capabilities: Disk wiping, fake … Read More
TTP Advisory: WP-SHELLSTORM | No CVE | Operation Type: Webshell Access Brokerage | Targets: WordPress (Breeze caching plugin) + Joomla (JCE editor) | Sites Scanned: … Read More
Vulnerability Intelligence Report — July 10, 2026 KEV DEADLINES TODAY: ColdFusion, 2x Joomla, Langflow | XRING: Unpatched XQUIC flaw crashes HTTP/3 servers globally | Zimbra … Read More
TTP Advisory: Friendly Fire + HalluSquatting | No CVE | Target: AI Coding Assistants (Claude Code, OpenAI Codex) | Attack Type: Autonomous mode hijacking / … Read More
TTP Advisory: Lurking Lizard | No CVE | Threat Type: Residential Proxy Botnet | Activity Since: August 2022 | Domains: 230+ lookalike domains | Discovered … Read More
CVE: CVE-2026-50656 | CVSS 3.1: 7.8 (High) | Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | CWE: CWE-362 (Race Condition) | Vendor: Microsoft | Product: Microsoft Malware Protection Engine (mpengine.dll) … Read More
CVE: CVE-2026-50746 (UniFi Connect), CVE-2026-50747 (UniFi Talk), CVE-2026-50748 (UniFi Access) | CVSS Range: 9.9 – 10.0 (Critical) | Vendor: Ubiquiti | Product: UniFi Connect, UniFi … Read More
