vulnerability
Cisco Patches a Dozen Critical Vulnerabilities
Cisco has released security updates to address 35 vulnerabilities across its products, including over a dozen critical issues.
HighCVSS 10.0
All news
Organisation
tl
90 article(s) in our index mention this organisation.
vulnerability
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
Threat actors are actively exploiting a critical vulnerability (CVE-2026-21589) in Atlassian’s self-hosted Data Center products, specifically Bitbucket, Confluence, Jira Software, Jira Service Management, Bamboo, Crowd,…
CriticalCVSS 9.3ExploitedEPSS 2%
vulnerability
Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)
Atlassian has released patches for a directory traversal vulnerability (CVE-2026-21589) that allows attackers to read arbitrary files within their web applications. The vulnerability is triggered by a specific pattern us…
HighCVSS 9.3EPSS 2%
vulnerability
Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details
A critical security flaw in Atlassian Data Center products has been actively exploited within two hours of public disclosure. Atlassian has released patches and temporary mitigations, urging customers to prioritize patch…
CriticalCVSS 9.3Exploited
vulnerability
Atlassian Patches Critical Vulnerability Affecting 8 Products
Atlassian has released patches for a critical vulnerability (CVE-2026-21589, CVSS 9.3) affecting eight of its products – Bitbucket, Bamboo, Crowd, Confluence, Fisheye, Jira Service Management, and Jira.
HighCVSS 9.3
vulnerability
Critical Atlassian Flaw Lets Unauthenticated Attackers Read Known Files Across 8 Products
A critical vulnerability (CVE-2026-21589) in eight Atlassian Data Center products allows unauthenticated attackers to read specific files in the web application root directory. The vulnerability is similar to a previousl…
HighCVSS 9.3EPSS 100%
vulnerability
Atlassian warns of critical file access flaw in its datacenter products
Atlassian has issued a critical security advisory urging users to patch its datacenter products due to a vulnerability that could allow unauthenticated attackers to access specific files. This follows a series of decisio…
HighCVSS 9.3
vulnerability
Vulnérabilité dans les produits Atlassian (06 octobre 2026)
A vulnerability in Atlassian products allows an attacker to access arbitrary files, potentially leading to a data breach. Users are advised to consult the Atlassian security bulletin for patches.
HighCVSS 9.3EPSS 2%
vulnerability
Vulnérabilité dans GitLab (05 octobre 2026)
A vulnerability has been identified in GitLab's AI Gateway, specifically in older versions. Users are advised to consult the GitLab security bulletin for available patches.
HighCVSS 9.9
vulnerability
GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers
A critical vulnerability (CVE-2026-90970) in GitLab's AI Gateway allows a logged-in user with Duo Agent Platform access to execute arbitrary commands on self-hosted gateways. Self-managed users should immediately update…
HighCVSS 9.9
vulnerability
Multiples vulnérabilités dans GitLab (30 septembre 2026)
Multiple vulnerabilities have been discovered in GitLab, allowing an attacker to compromise data confidentiality and bypass security policies. Users are advised to apply the patches released by GitLab.
CriticalCVSS 10.0KEVEPSS 93%
malware
Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
Russian state-sponsored hackers, known as Star Blizzard, are using fake event invitations to deliver a backdoor onto Windows computers. They use various techniques, including phishing emails, exploit kits (like DarkSword…
Medium
vulnerability
Multiples vulnérabilités dans GitLab (24 septembre 2026)
Multiple vulnerabilities have been discovered in GitLab, allowing for data integrity compromise, data confidentiality issues, and remote code injection (XSS). The security bulletin from GitLab provides details on how to…
HighCVSS 9.9
supply-chain
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
GitLab's incoming email addresses, designed for creating project issues, have been found to contain highly privileged access tokens that can be publicly exposed. GitLab has since updated its UI and documentation to refle…
Medium
data-breach
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
A leaked email address within GitLab allows anyone to push code and run CI/CD jobs as another user, including commits to protected branches like main. GitLab has acknowledged the issue and made minor documentation change…
Medium
threat-intel
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
A financially motivated threat actor, claiming to be a bug bounty hunter, has been linked to the development and distribution of PhantomRaven, a JavaScript information stealer, via the npm package registry. The malware u…
High
threat-intel
Data Broker Radaris Loses Domains in Privacy Fight
The data broker Radaris.com has been embroiled in a legal battle with Atlas Data Privacy Corp over its practice of failing to remove personal information of law enforcement officials and government personnel from its peo…
High
vulnerability
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
A critical GitLab vulnerability (CVE-2026-85706) is being actively exploited, putting organizations' software supply chains at risk. Threat actors are leveraging this path traversal flaw to steal sensitive data, includin…
CriticalCVSS 10.0
vulnerability
Perfect-10 GitLab bug under attack days after patch lands
A vulnerability in Perfect-10 GitLab, a component used by various software applications, is being actively exploited. Despite a patch being released, attackers are leveraging the flaw to gain unauthorized access to syste…
CriticalCVSS 10.0
threat-intel
AI Changed the Exposure Problem. Validation Needs to Change With It.
The volume of disclosed vulnerabilities is increasing dramatically, but the number of those actually exploited in the wild remains relatively low. Traditional methods like relying solely on CVSS scores are insufficient b…
High
