CISO Security Intel

No significant updates today.

Former CEO and CSO of C.A. Cloud Attribution Ltd pleaded guilty to supplying phone infrastructure and coaching Indian scammers on evasion tactics.
-...

CISA's new nomination form converts the KEV catalog from a trailing government list into a crowdsourced, high-velocity threat weapon by letting...

An empirical study of 107 HackerOne disclosures classifies real-world Broken Object Level Authorization cases, confirming 78.5% as in-scope BOLA.
-...

A zero-day in Digital Knowledge KnowledgeDeliver (CVE-2026-5426) enabled unauthenticated RCE through hard-coded ASP.NET machine keys and ViewState...

DockSec tackles the persistent remediation gap in container security by correlating outputs from Trivy, Hadolint, and Docker Scout, then using an LLM...

AI tools like Anthropic's Mythos under Project Glasswing are uncovering 10,000+ high-severity vulnerabilities in weeks, but human patching lags...

• NGINX CVE-2026-42945 moved from disclosure to active exploitation in just three days, despite patches being available.
• FrostyNeighbor renewed...

Jeremiah Grossman highlights why traditional vulnerability management remains broken despite decades of progress.

• Only 1-2% of all CVEs have ever...

Zero-day attacks test human systems as much as tools, exposing weak approvals and rigid hierarchies.

• Build human capability: Run cyber ranges and...

Session hijacking now dominates initial access as attackers steal tokens instead of passwords, bypassing MFA and login alerts entirely. Short-lived...

A kernel flaw hidden since 2017 now hands root access to any standard user via a simple 732-bit Python script.

• No conditions required:...

CISA has directed federal agencies to patch the actively exploited CVE-2026-9082 SQL injection flaw in Drupal by May 27, 2026, after adding it to the...

Attackers are targeting load-bearing infrastructure like VS Code extensions and Exchange servers that scaled before security caught up, compromising...

Active Zero-Day Exploits

• 🔥 Microsoft Defender Zero-Days: CISA added CVE-2026-41091 and CVE-2026-45498 to its Known Exploited Vulnerabilities...

Multiple zero-days under active exploitation demand immediate CISO attention.

• NGINX Rift (CVE-2026-42945): 18-year-old heap overflow enables RCE;...

• AI finds bugs far faster than fixes: under 1% of 23k Mythos findings patched
• Patch cycles must shrink: Oracle switched to monthly; adopt MFA,...

TeamPCP compromised a GitHub employee device via a malicious Visual Studio Code extension, exfiltrating 3,800 internal repositories.

• Supply chain...

Critical Vulnerability Advisories

• 🔥 UniFi OS Flaws: Ubiquiti patched five critical UniFi OS vulnerabilities exposing nearly 100,000 consoles to...

Zero-click attacks compromise devices via unopened messages without user interaction.

• Growing scale: 14 major vulnerabilities hit billions of...