Security Threats

Threats Incidents Live News

Start with an app, service or company you use. Unsure what runs your website or work device? Ask your host or IT team for the product name and version. Search covers threats, incidents and news.

September 11, 2026 80 threats

com.linecorp.centraldogma 0.84.0 (2)

Central Dogma: SSH host-key verification permanently disabled in Git mirror (SshGitMirror)

Central Dogma: Hard-coded ZooKeeper replication secret 'ch4n63m3' with silent fallback enables cluster takeover

shopper/framework 2.9.2 (4)

Filament bulk actions has an access control flaw

Shopper: privilege escalation via improper Livewire admin component authorization

Shopper: Unauthorized inventory stock manipulation

Shopper: Missing authorization on product removal actions in CollectionProducts component

FrontMCP and mcp-from-openapi have bypass of OpenAPI external $ref SSRF fix

yayson: Prototype pollution in Store/LegacyStore deserialization

n8n security advisory (AV26-916)

ExLlamaV3 contains Denial of Service vulnerability

MySQL MCP Server: Missing Origin/Host Validation in SSE Transport Enables Unauthenticated SQL Execution

URLhaus delivery (7)

Msstore URLs listed by URLhaus

Stealc URLs listed by URLhaus

Linux malware served from 176.9.104.142 (1 URL)

Malware served from 176.9.88.12 (1 URL)

Malware served from 167.235.91.194 (1 URL)

Clip64.dll URLs listed by URLhaus

Clip.dll URLs listed by URLhaus

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS.

An (2)

the WS-Security (wsse:UsernameToken) verification routine within has a security flaw

An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890

Progress security advisory (AV26-915)

AI-Accelerated Attacks and Zero-Days Push Defenders Toward Machine Speed

Check Point VPN gateways need urgent updates

Gray Rabbits and the Tale of a One-Click Backdoor

SloppyRAT samples seen in MalwareBazaar

RevStealer indicators tracked by ThreatFox

Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions.

Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versions.

Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions.

Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions.

Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions.

GeoVision security advisory (AV26-913)

National Instruments security advisory (AV26-914)

Malicious Twitch Browser Extension Exposes 30,000 Users’ OAuth Tokens to Russian Bot Service

The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet

Phishing Research Challenges Conventional Security Awareness Testing

Artifactory flaws chained in attacks deploying backdoor malware

SPIP (2)

the editer_objet action can run code

the administrative action endpoints under has an access control flaw

Hackers Favor US Eastern Business Hours in M365 Phishing Campaign

Hackers Impersonate CEOs in 1 Million Emails to Trick Employees Into $50,000 Payments

Russia-Aligned Hackers Use GuardBreaker Prompt Injection to Disrupt AI Malware Analysis

MongoDB security advisory (AV26-911)

Schneider Electric security advisory (AV26-912)

The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment

The Self-Expanding Stolen Inference Supply Chain: An AI Agent Harvesting and Re-Serving LLM Access, (Fri, Sep 11th)

N0va Phishkit Targets North America and Europe Through Microsoft Logins

Microsoft Defender ShieldBreak bypass still lets attackers read files

Russian attackers rebuild malware with AI tool Claude

How Threat Actors Are Turning Trusted AI Platforms Into an Attack Surface

Beware of the LegionLoader malware being distributed via the ClickFix method

From Fake DocuSign to ScreenConnect: Attack Blocked

WAVLINK WN535M1 and WN535M3 routers running (2)

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated OS command

WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 contain an unauthenticated arbitrary file

A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0.

A (2)

A flaw resulting in XML external entity (XXE) was found in Akana API Platform

A vulnerability in the Chef Automate API gateway and identity validation path

Headroom compresses data before the data reaches a large language model.

Fortinet FortiOS Insufficient Session Expiration

Researchers Uncover 10,000+ Malware Loaders Behind YouTube and SEO Poisoning Campaign

HashiCorp security advisory (AV26-910)

JFrog Artifactory Self-Managed bug can bypass access checks

OpenSSL bug can crash services

Launching managed CRA Article 14 reporting for open source maintainers

Hugo is a static site generator.

AVideo (4)

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerabilityCVE-2026-89256

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerabilityCVE-2026-89255

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerabilityCVE-2026-89254

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerabilityCVE-2026-89249

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting

The Gutenverse News WordPress plugin before 3.3.3 does not restrict the extra HTML it adds to WordPress's

The advanced-customized-prompts WordPress plugin

teddy-bear-customize-addon WordPress (2)

The teddy-bear-customize-addon WordPress pluginCVE-2026-14560

The teddy-bear-customize-addon WordPress pluginCVE-2026-14559

New IoT Malware Uses Public Linux Exploits to Gain Root and Launch DDoS Attacks

Critical GitLab Flaws Let Attackers Read Arbitrary Files, Steal Credentials and Execute Code

Hackers Weaponize AI Safety Guardrails to Hide Malware From LLM-Powered Security Scanners

Siemens SIMATIC S7 1500 CPU bug can corrupt memory

Enterprise Linux bug can run code

Load more threats

CISA KEV170922m ago

VulnCheck KEV20022m ago

NVD150822m ago

WPScan0never

HIBP8022m ago

URLhaus6022m ago

GitHub Advisory12022m ago

OSV.dev322m ago

ransomware.live8022m ago

Microsoft MSRC20022m ago

CISA Advisory3022m ago

Exploit-DB4022m ago

BleepingComputer1122m ago

KrebsOnSecurity122m ago

TheHackerNews2422m ago

SecurityWeek522m ago

SecurityAffairs722m ago

VPNCentral022m ago

SC World122m ago

eSecurityPlanet922m ago

DarkReading1322m ago

SchneierOnSecurity122m ago

ThreatFox8022m ago

MalwareBazaar1022m ago

Chrome Releases422m ago

Apple Security022m ago

Mozilla MFSA3022m ago

Adobe PSIRT3022m ago

AlienVault OTX3222m ago

Pulsedive122m ago

SANS ISC322m ago

Cisco Talos422m ago

Unit 42322m ago

Mandiant02mo ago

Microsoft Threat Intelligence522m ago

Patchstack1522m ago

Rapid7622m ago

CERT/CC1022m ago

Openwall oss-security8022m ago

Wordfence722m ago

Socket1022m ago

SafeDep522m ago

Sonatype322m ago

Snyk022m ago

StepSecurity122m ago

Oracle Security Alerts722m ago

GitLab Security Releases622m ago

Palo Alto PSIRT1122m ago

Veeam Security Advisories622m ago

Plesk Support1122m ago

ConnectWise Security Bulletins422m ago

Cisco PSIRT922m ago

CERT-FR Advisories3922m ago

CERT-FR Alerts222m ago

CERT-EU Advisories222m ago

CERT-Bund Advisories5022m ago

INCIBE Advisories1022m ago

ACN CSIRT Italy4622m ago

Jenkins Advisories122m ago

Drupal Advisories322m ago

FreeBSD Advisories1022m ago

Gentoo Advisories3422m ago

QNAP Advisories022m ago

Synology Advisories022m ago

Huawei PSIRT CN022m ago

Debian DSA3022m ago

JPCERT/CC622m ago

JVN EN2022m ago

Splunk1722m ago

Node.js222m ago

HashiCorp2322m ago

Joomla2522m ago

Elastic Security2522m ago

JetBrains122m ago

CISA ICS Advisories3022m ago

CISA Medical Advisories222m ago

MS-ISAC922m ago

CCCS Canada5022m ago

CERT-SE222m ago

NCSC UK022m ago

CISA News022m ago

Proofpoint022m ago

Datadog Security Labs022m ago

Recorded Future222m ago

Cyble322m ago

Varonis022m ago

Sygnia122m ago

Vectra AI022m ago

JPCERT Blog022m ago

SOCRadar522m ago

Graham Cluley322m ago

SecurityOnline1322m ago

GBHackers822m ago

Cyber Security News822m ago

Infosecurity Magazine3022m ago

The Cyber Express622m ago

NNS Blog322m ago

elttam122m ago

Intruder Research122m ago

SpaceRaccoon022m ago

Exodus Intelligence422m ago

VoidSec122m ago

Chocapikk422m ago

Exploit Reversing222m ago

Tim Blazytko122m ago

Zellic122m ago

EUVD022m ago

Ubuntu USN4022m ago

Red Hat5022m ago

Zero Day Initiative4022m ago

Fortinet PSIRT722m ago

NeuraCybIntel722m ago