Signal

Stories where independent sources, vulnerabilities, and real-world exploitation converge — ranked by how connected and how fresh, not just how new.

Exploit/CVE-2024-4577 · Embargo · Embargo, Remote Code Execution · Linux, Apache

PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk

PHP developers have accused software supply chain security shop Chainguard of effectively revealing critical bugs in the open-source scripting language ahead of a planned official disclosure. On Wednesday, just hours after releasing emergency patches for the t

CVSS 9.8·3 sources·today
View full story →

Story Highlights

Stories this week by category, vs. the previous 7 days

Malware
1
same as last week
Exploit
1
new this week
Threat Intelligence
1
new this week
Phishing
1
new this week

Latest Stories

Earlier

Ransomware● KEV
USN-8900-1: Go Networking vulnerabilities
10 CVEs · Shinyhunters, Embargo · Embargo, EtherHiding · Microsoft, Progress
CVSS 9.813d ago · 10 sources
Ransomware
Ransomware recovery CEO charged over secret ransom payments
Fabian, Atlassian
4 sources14d ago
Threat Intelligence● KEV
ECサイトを侵害してカード情報60万件超が流出 複数のAIエージェントが役割分担
CVE-2026-11645 · Google, Linux
CVSS 8.814d ago · 2 sources
Exploit● KEV
The vulnerabilities AI finds are the ones attackers want
5 CVEs · dropped, SparkRAT · Totolink, Google
CVSS 9.814d ago · 3 sources
Malware
ClickFix Attack Hides VBScript Payload in Browser Cache
ClickFix, EtherHiding · Microsoft, Python
4 sources15d ago
Malware● KEV
[webapps] WordPress 7.0.2 - Path Travesal
4 CVEs · stage2, stage1 · Wordpress, Php
CVSS 8.115d ago · 3 sources
Malware● KEV
Atlassian urges immediate patching of critical Data Center file access vulnerability (CVE-2026-21589)
2 CVEs · automated, quirk · Atlassian, Citrix
CVSS 5.37d ago · 7 sources
Phishing
Russia's Star Blizzard Ditches ClickFix to Widen Phishing Net
Star Blizzard · Proton · Wordpress, Trellix
6 sources15d ago
Ransomware● KEV
NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)
22 CVEs · base64 · Citrix, Cisco
CVSS 1016d ago · 11 sources
Malware● KEV
GitLab warns of critical RCE vulnerability in AI Gateway service
3 CVEs · docker · Nvidia, Atlassian
CVSS 1017d ago · 3 sources
Exploit
Exploitation Hits Rejetto HFS Vulnerability Discovered by AI
3 CVEs · Linux, Atlassian
CVSS 9.815d ago · 4 sources
Exploit
New Dell System Update flaw lets hackers gain root privileges
2 CVEs · HAFNIUM, Lazarus Group · ZIPLINE · Linux, Atlassian
CVSS 1016d ago · 2 sources