VORANT. Threat Intelligence Sign in Get the full feed

Latest threat intelligence reports

Public briefs, updated continuously. Full detail — IOCs, detections, alerts — in the app.
Genesis group lists JSP Slip Forming as victim medium
Triple X claims Bank of Baroda data leak high
Russian Shahed drones strike Mali villages medium
Iran exploits SS7 to track US troops medium
Apereo CAS Client MITM cert flaw disclosed medium
Qilin ransomware claims Kean University breach medium
GNU coreutils uniq, unexpand flaws patched medium
Nova ransomware claims Digital Edge MSP medium
Microsoft Edge Patches Twelve Vulnerabilities medium
MongoDB patches multiple Compass, Server flaws medium
Moxa Linux devices hit by SSH keysign flaw medium
ESET macOS Products Get Privilege Escalation Patches medium
NetApp ONTAP 9 Flaw Patched by Vendor medium
Logto SSO flaws enable account takeover, MFA bypass high
Johnson Controls XAAP Android Stores Data Unencrypted low
Panduit IntraVUE ICS software has five flaws medium
MZ Automation libIEC61850 IEC 61850 flaws disclosed medium
Weintek cMT3092X HMI patches privilege flaws medium
Johnson Controls C-CURE 9000 RCE flaw disclosed high
Ransomware.live lists new Gentlemen victim low
JPCERT tracks shifting Mirai-like IoT scanning low
Check Point flaw CVE-2026-16232 exploited in wild high
Oracle patches flaws in Process Manufacturing, Solaris medium
Mitel MiCollab, OpenScape UC flaws patched medium
BlackNevas lists Zuni Shopping Center as victim medium
Duplicati DLL Hijack Flaw Enables SYSTEM Access medium
Picturall Media Server Root Escalation Flaw Patched medium
GNU diffutils diff3 buffer overflow disclosed medium
Open Mercato ReDoS Flaw Patched in 0.6.4 low
GLPI patches multiple data-security flaws medium
SharePoint RCE flaws exploited in the wild critical
Multiple flaws hit HPE Aruba Networking gear medium
Elastic patches multiple Elasticsearch, Kibana flaws medium
Plane PM tool has multi-tenant IDOR flaw medium
WordPress "wp2shell" RCE bug added to CISA KEV high
Rockwell Studio 5000 Logix Designer flaws patched medium
Rockwell FactoryTalk JWT Auth Bypass Flaw medium
Siemens Opcenter X JWT auth bypass flaw high
CISA adds four exploited flaws to KEV catalog medium
Rockwell ThinManager path traversal flaw patched medium
Tycon TPDIN-Monitor-WEB2 auth bypass flaw high
Siemens SIDIS SmartPlug hit by multiple CVEs medium
Siemens RUGGEDCOM Hit by PAN-OS Flaws medium
Siemens IAM Client Unquoted Path Flaw medium
Rockwell 1734 POINT I/O DoS Flaw Disclosed medium
Rockwell 1718/1719-AENTR DoS flaw patched low
Tenable Security Center gets patch for many flaws medium
Windu CMS Patches Three Chained Vulnerabilities medium
WordPress Core RCE Chain Actively Exploited high
WordPress patches RCE chain, PoC public high
SonicWall SMA flaws exploited in the wild high
WordPress Core flaws chain to unauthenticated RCE high
Nova ransomware claims Dephub as victim medium
Iran suspected in SS7 tracking of US troops high
Red Hat patches multiple Linux kernel flaws medium
Google Chrome patches multiple vulnerabilities medium
Microsoft SharePoint flaws risk data exposure medium
Microsoft Windows Patches Multiple Vulnerabilities medium
HTTP/2 flow-control flaw enables server DoS medium
Bellingcat unmasks LeakedBB forum admin low
SGLang expert-backup flaw enables unauth RCE high
NASA cFS Health & Safety App DoS Flaw medium
SALTO ProAccess Space fixes partition escalation flaw medium
CISA adds Fortinet, SharePoint bugs to KEV high
Rockwell Logix Controllers Get DoS Patches medium
Stored XSS Flaw Hits Rockwell DataMosaix medium
Rockwell Flex 5000 Adapter DoS Flaw Patched medium
Rockwell Arena Simulation memory corruption flaws patched medium
AutomationDirect Productivity Suite has six flaws medium
Siemens SICAM 8 patches four flaws medium
Rockwell 1756 modules face DoS flaw medium
ESET Products Vulnerable to Denial of Service low
Drupal patches XSS and data exposure flaws medium
Cisco RoomOS patches multiple vulnerabilities medium
Rails Sanitizer Flaw Enables Remote XSS medium
F5 patches multiple BIG-IP, NGINX flaws medium
ANSSI warns of multiple Splunk vulnerabilities medium
Google Chrome Patches 14 Vulnerabilities medium
Pegatron tdeio64.sys driver flaw enables SYSTEM access medium
node-forge signature verification bypass flaws high
CERT Polska discloses ICU Boomerang flaws medium
Fortinet patches multiple products across suite medium
Citrix Patches Flaws in Access Clients, XenCenter medium
Microsoft .NET patches 17 vulnerabilities medium
Tenable Nessus Agent flaw enables RCE medium
Veeam Backup & Replication privilege escalation flaw medium
Microsoft Azure Linux patches dozens of CVEs medium
Google Chrome Patches Multiple Vulnerabilities medium
Active Exploitation Hits Microsoft CVE-2026-56164 high
Xen XAPI flaw allows security bypass medium
SonicWall SMA1000 flaws under active exploitation high
Apache Tomcat patches two security bypass flaws medium
Mozilla Firefox patches multiple security flaws medium
Schneider EcoStruxure Admin Expert security bypass flaw medium
Multiple Azure Vulnerabilities Patched by Microsoft medium
SAP Patches Batch of July 2026 Flaws medium
SonicWall SMA 1000 flaws exploited in wild high
ESET Inspect Connector privilege escalation flaw medium
Progress LoadMaster patches RCE flaws high
Microsoft Patches Two Actively Exploited Flaws high

This is the public brief

Subscribers see the full picture: extracted IOCs, ready-to-deploy detections (Sigma, Splunk, KQL, Elastic, YARA, Suricata), the entity graph, TAXII 2.1 feed and real-time alerts matched to your sectors.

Start free