Skip to content

CVEs

Weekly Report: New Hacking Techniques and Critical CVEs 13 Jul to 19 Jul 2026

The week of 13 to 19 July 2026 was defined by operational disruption. A ransomware attack shut down all US production at Coca-Cola’s Fairlife dairy subsidiary, attackers stole client tax documents from EY through a third-party support platform, and a previously undocumented threat actor exploited SonicWall VPN zero-days for weeks before public disclosure. One incident… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 13 Jul to 19 Jul 2026

Weekly Report: New Hacking Techniques and Critical CVEs 10 Feb – 16 Feb 2026

Critical vulnerabilities dominated with Microsoft Patch Tuesday addressing 6 zero-days (CVE-2026-21510, CVE-2026-21513, CVE-2026-21514, CVE-2026-21519, CVE-2026-21533) exploited in Windows Shell and Office. ZLAN ICS devices face complete takeover via CVE-2026-XXXX series. Warlock ransomware exploited CVE-2026-23760 in SmarterMail. TeamPCP worm compromised 60K cloud servers. North Korea’s UNC1069 deployed AI deepfakes against crypto firms. FileZen command injection (CVE-2026-25108)… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 10 Feb – 16 Feb 2026

Weekly Report: New Hacking Techniques and Critical CVEs 3 Feb- 9 Feb 2026

The week of February 3–9, 2026 saw threat actors increasingly abusing trusted platforms-cloud workloads, Linux‑on‑Windows via WSL, and enterprise‑grade ITSM appliances-to execute stealthy, AI‑accelerated operations. This report highlights four critical CVEs, two new offensive techniques, one national‑level breach, and key darkweb chatter that directly impact modern attack‑surface planning. >>Outpace Attackers With AI-Based Automated Penetration Testing… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 3 Feb- 9 Feb 2026

Weekly Report: New Hacking Techniques and Critical CVEs 13 Jan- 19 Jan 2026

Three actively exploited zero-days, two CVSS 10.0 flaws, and critical supply chain compromises. Threat activity spans infrastructure (Cisco, Microsoft, Fortinet), AI/DevOps platforms (n8n, Chainlit, Zoom), and legacy systems. Dominant pattern: improper input validation enabling unauthenticated infrastructure takeover. Key Metrics: 3 zero-days exploited | 2 CVSS 10.0 flaws | 509 GB (ASRock Rack) + 861 GB… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 13 Jan- 19 Jan 2026

Weekly Cybersecurity Intelligence Report Cyber Threats & Breaches 7 Jan – 12 Jan 2026

The first full operational week of 2026 (January 7-12) shattered expectations with a cascade of maximum-severity vulnerabilities and mass-scale data exposures. The week was dominated by Cyera’s disclosure of CVE-2026-21858 (Ni8mare)-a CVSS 10.0 unauthenticated RCE in n8n workflow automation affecting ~100,000 instances globally-and the re-emergence of 17.5 million Instagram user records on dark web forums,… Read More »Weekly Cybersecurity Intelligence Report Cyber Threats & Breaches 7 Jan – 12 Jan 2026

Use Cases
Technology
About
Partner
Resources

FireCompass – An EC Council Ecosystem Company.
©2025 . All Rights Reserved.