TTP Advisory: GhostApproval | No CVE | Severity: High | Affected Tools: Amazon Q Developer, Anthropic Claude Code, Augment, Cursor, Google Antigravity, Windsurf | Discovered … Read More
Vulnerability Intelligence Report — July 9, 2026 KEV DEADLINES TOMORROW: ColdFusion, 2x Joomla, Langflow — all due Friday | Microsoft patches RoguePlanet Defender zero-day (CVE-2026-50656, … Read More
TTP Advisory: RedWing Android Malware | No CVE | Threat Type: Malware-as-a-Service (MaaS) | Target: Android banking credentials, OTP codes | Platform: Telegram | Price: … Read More
CVE: Multiple — see references | CVSS Range: 7.5 – 9.9 (Critical) | Vendor: Ubiquiti | Product: UniFi OS | Key CVEs: CVE-2026-47369 (CVSS 9.9, … Read More
TTP Advisory: WriteOut (Writer AI) | No CVE | Severity: Critical (Cross-Tenant Compromise) | Vendor: Writer | Product: Writer Enterprise AI Platform | Discovered by: … Read More
CVE: CVE-2026-43499 | CVSS 3.1: 7.8 (High) | Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | CWE: CWE-416 (Use After Free) | Vendor: Linux Kernel | Product: rt_mutex/futex | Affected: … Read More
CISA Known Exploited Vulnerability (KEV): Both CVEs added to the CISA KEV Catalog on July 7, 2026. Action due July 10, 2026 (Friday). Both are … Read More
CISA Known Exploited Vulnerability (KEV): Added to the CISA KEV Catalog on July 7, 2026. Action due July 10, 2026 (Friday). BOD 26-04 applies. CVE: … Read More
Vulnerability Intelligence Report — July 8, 2026 CISA adds 4 new KEVs: ColdFusion, Joomla, Langflow — Adobe ColdFusion CVE-2026-48282 (CVSS 10.0) due Friday | GhostLock: … Read More
TTP Advisory: Iran Cavern C2 Framework | No CVE | Threat Actor: Cavern Manticore (Iran, MOIS-affiliated) | Overlaps: MuddyWater, Lyceum, OilRig | Targets: Israeli IT … Read More
