Tracking critical CVEs, zero-days, and actively exploited flaws across enterprise software, operating systems, and infrastructure — with actionable guidance on what to patch first.
Phishing
+5

May 3, 2026
•
5 min read
GitHub cross-tenant RCE via git push, SAP npm backdoored in Mini Shai-Hulud, 276 pig-butchering arrests, 30K Facebook accounts phished via Google, and LiteLLM exploited in 36 hours.

Phishing
+6

Apr 25, 2026
•
5 min read
2005 malware predates Stuxnet by five years. PIBuster permanently bricks EV chargers in 30 seconds. Firestarter backdoor survives Cisco patches. Chinese engineer phished NASA for five years.
