Threat intelligence
Emerging cyber security threats explained clearly
Practical vulnerability intelligence for defenders. Technical details, impacted versions, exploitation context and actionable guidance - all in one place.
Latest briefing
Active exploitation alert · 13/10/2026
CVE-2026-102255: SonicWall SMA 1000 Critical SSRF Vulnerability Exploited in Attacks
CVE-2026-102255: SonicWall SMA 1000 Critical SSRF Vulnerability Exploited in Attacks
Security researchers have reported exploitation attempts targeting CVE-2026-102255, a CVSS 10.0 pre-authentication SSRF flaw in SonicWall SMA 1000 appliances. The vulnerability may let remote unauthenticated attackers reach internal appliance functionality; organisations should urgently patch affected devices and investigate suspicious activity.
CVE-2026-97229: GitLab CI/CD Regular Expression Compiler Remote Code Execution
GitLab has patched CVE-2026-97229, under certain conditions an unauthenticated attacker could exploit insufficient regular-expression validation by supplying a specially crafted regular expression in a CI/CD configuration to execute arbitrary code on vulnerable self-managed instances.
CVE-2026-86950: Apple Patches CoreGraphics Zero-Day
Apple has patched CVE-2026-86950, an out-of-bounds write vulnerability in CoreGraphics that may allow arbitrary code execution when processing a maliciously crafted file. Apple reports possible exploitation in extremely sophisticated attacks against specific targeted individuals. Organisations should prioritise patching affected Apple devices and verify update compliance across their managed estate.
No reports match. Try another search or category.