Cyber Threat Pulse

Zero-Day Disclosure Risks

• 🔥 Microsoft Warning: Microsoft warned against public release of zero-day details before vendor coordination, citing...

Unpatched vulnerabilities continue driving both data theft and ransomware campaigns.

• FortiClient EMS zero-day CVE-2026-35616 exploited for remote...

Microsoft calls uncoordinated zero-day disclosures never justifiable, as they hand threat actors immediate attack vectors before patches exist and...

No significant updates today.

No significant updates today.

Zero-Day Exploits Under Active Attack

• 🔥 Microsoft Defender Flaws: Attackers are actively exploiting vulnerabilities in Microsoft Defender to...

• KnowledgeDeliver LMS zero-day (CVE-2026-5426) actively exploited for BLUEBEAM in-memory web shell via shared ASP.NET machine keys
• Trend Micro Apex...

Attackers are hitting trusted tools and supply chains simultaneously, forcing IR teams to rethink single-vendor reliance.

• Defender zero-days...

The European Central Bank is convening banks to remediate systemic cybersecurity flaws that AI models like Mythos continue to uncover.

Anthropic's Mythos model discovered over 10,000 high or critical zero-day vulnerabilities in a single week across Apple, AWS, Google, Microsoft,...

Two unpatched Microsoft Defender zero-days remain under active exploitation by hands-on attackers, enabling local privilege escalation to SYSTEM level...

Unpatched Chromium flaw turns browsers into reboot-surviving botnets after Google leaked exploit code, hitting 70% of UK businesses. Dutch raids...

Qilin ransomware struck Eyguières Town Hall on May 22, disrupting municipal systems and exposing resident data to risk.

KEV Catalog Updates

• 🔥 CISA Adds Langflow and Apex One Flaws: CISA added CVE-2025-34291 (Langflow origin validation error) and CVE-2026-34926...

Law enforcement continues disrupting ransomware infrastructure even as attacks persist.

• Fresh victim: Minsa in Mexico hit by Apt73 ransomware on...

Endpoint security tools face active exploitation, turning trusted defenses into attack surfaces.

• Trend Micro Apex One: CVE-2026-34926 zero-day...

A public GitHub repo labeled “CISA-Private” leaked internal DHS/CISA credentials, cloud keys, tokens, and plaintext passwords—likely due to a...

Adversaries are actively weaponizing the unpatched MiniPlasma zero-day to bypass traditional endpoint security. Continuous network visibility is essential for detection until patches are available.

Unauthenticated attackers can exploit CVE-2026-20223 in Cisco Secure Workload's internal REST APIs to seize full Site Admin privileges across cloud...

Urgent Zero-Day Patches

• ⚡ Microsoft Defender Exploits: Microsoft released emergency patches for two zero-day flaws CVE-2026-41091 and...