Threat intelligence
Emerging cyber security threats explained clearly
Practical vulnerability intelligence for defenders. Technical details, impacted versions, exploitation context and actionable guidance - all in one place.
Latest briefing
Active exploitation alert · 14/10/2026
CVE-2026-21589: Atlassian Products Arbitrary File Access Exploited in Attacks
CVE-2026-21589: Atlassian Products Arbitrary File Access Exploited in Attacks
CVE-2026-21589 is a critical unauthenticated arbitrary file-access vulnerability affecting eight self-managed Atlassian products. Following public technical details and proof-of-concept release, exploitation has been reported; defenders should patch affected Data Center deployments, restrict exposure, and investigate logs for suspicious path-traversal requests.
CVE-2026-102255: SonicWall SMA 1000 Critical SSRF Vulnerability Exploited in Attacks
Security researchers have reported exploitation attempts targeting CVE-2026-102255, a CVSS 10.0 pre-authentication SSRF flaw in SonicWall SMA 1000 appliances. The vulnerability may let remote unauthenticated attackers reach internal appliance functionality; organisations should urgently patch affected devices and investigate suspicious activity.
CVE-2026-97229: GitLab CI/CD Regular Expression Compiler Remote Code Execution
GitLab has patched CVE-2026-97229, under certain conditions an unauthenticated attacker could exploit insufficient regular-expression validation by supplying a specially crafted regular expression in a CI/CD configuration to execute arbitrary code on vulnerable self-managed instances.
CVE-2026-86950: Apple Patches CoreGraphics Zero-Day
Apple has patched CVE-2026-86950, an out-of-bounds write vulnerability in CoreGraphics that may allow arbitrary code execution when processing a maliciously crafted file. Apple reports possible exploitation in extremely sophisticated attacks against specific targeted individuals. Organisations should prioritise patching affected Apple devices and verify update compliance across their managed estate.
No reports match. Try another search or category.