September 2026 Patch Tuesday: Record patch count, 2 zero-days, and a SigRed successor
September 2026 Patch Tuesday is here, with Microsoft delivering another record-breaking number of patches, including those for two vulnerabilities that have ...
Red
Unknown
auto-detected
AI Intelligence Brief cached
Edit Profile
Entity Relationships
Related YARA Rules View all on YARA Rules page →
90-Day Activity
All Articles (897)
Last 90 Days
All Time
The 12 Best Managed XDR Services, Compared and Priced
Best value overall: Bitdefender — competent managed XDR at pricing that mid-market organizations can approve, which most of this list cannot claim. Best dete...
The 12 Best Managed Detection & Response (MDR) Services, Compared and Priced
Best value overall: Huntress — published pricing, purpose-built for small business, and genuinely good at the threats that segment faces. Best response autho...
The 12 Best Extended Detection & Response (XDR) Platforms, Compared and Priced
Best value overall: Microsoft Defender XDR — included in Microsoft 365 E5 and genuinely strong across Microsoft’s own surface, which for most organizations i...
The 12 Best Endpoint Detection & Response (EDR) Solutions, Compared and Priced
Best value overall: Microsoft Defender for Endpoint P2 — included in Microsoft 365 E5 and genuinely competitive, which makes its marginal cost zero for a lar...
The 12 Best Antivirus Software for Mac, Compared and Priced
Best value overall: Bitdefender — leading detection at mid-range pricing with a light footprint. Best free option: Malwarebytes’ scanner, which cleans an inf...
Infostealers Target Claude, Cursor, Codex and Other AI Agents to Steal Credentials and Sensitive Data
Information-stealing malware is expanding its collection logic to target locally stored data from AI coding agents, including Claude, Cursor, Codex, Cline, C...
Massive Redis Cryptojacking Campaign Hijacks Thousands of Linux Servers
A large-scale Redis cryptojacking operation targets thousands of exposed Linux servers by abusing unauthenticated Redis deployments to install XMRig cryptocu...
ZDI-26-635: Oracle Outside In Technology PDF File Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Outside In Technology. User interaction is required ...
ZDI-26-634: Flowise CSV Agent Prompt Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Flowise. Authentication is not required to exploit this vul...
ZDI-26-633: GIMP PSP File Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerab...
ZDI-26-631: NI LabVIEW VI File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of NI LabVIEW. User interaction is required to exploit...
ZDI-26-630: NI LabVIEW VI File Parsing Integer Overflow Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of NI LabVIEW. User interaction is required to exploit...
ZDI-26-629: Microsoft Azure Entra ID OAuth Device Code Grant Information Disclosure Vulnerability
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft Azure. Authentication is not required to ...
ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiSandbox. Authentication is required to exploi...
ZDI-26-638: Oracle Outside In Technology WPS File Parsing Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Outside In Technology. User interaction is required ...
ZDI-26-637: Oracle Outside In Technology GEM File Parsing Integer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Outside In Technology. User interaction is required ...
ZDI-26-636: Oracle Outside In Technology PostScript File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Oracle Outside In Technology. User interaction is required ...
Mars Security launches real-time threat intelligence to detection platform
The platform, developed by former military red team operators, systematically ingests threat reports from sources like CISA, Mandiant, and Microsoft.
DoppelCart fraud network uses 119,000 fake shops to steal credit cards
A massive operation dubbed "DoppelCart" uses more than 119,000 domains to run a network of fake e-shops that steal payment card details. [.