Threat intelligence
Recently added to CISA KEV (confirmed exploited, per CISA)
| CVE | Added | Due date | Ransomware use |
|---|---|---|---|
| CVE-2026-119977 | 2026-11-03 | 2026-11-06 | not reported |
| CVE-2026-111357 | 2026-10-30 | 2026-11-02 | not reported |
| CVE-2026-118527 | 2026-10-30 | 2026-11-13 | Unknown |
| CVE-2026-97229 | 2026-10-29 | 2026-11-01 | not reported |
| CVE-2026-76418 | 2026-10-29 | 2026-11-01 | not reported |
| CVE-2026-46300 | 2026-10-28 | 2026-10-31 | not reported |
| CVE-2026-41709 | 2026-10-28 | 2026-11-11 | not reported |
| CVE-2026-111497 | 2026-10-27 | 2026-11-10 | not reported |
| CVE-2026-48356 | 2026-10-27 | 2026-11-10 | not reported |
| CVE-2026-109618 | 2026-10-26 | 2026-10-29 | Unknown |
Threat reporting
threat-intel
Critical Rails Bug Threatens to Derail Vulnerable Servers
malwareGoogle, Partners Disrupts 1.3 Million-Device-Strong XCPE Botnet
threat-intelDebian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root
threat-intelAPT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits
malwareAI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks
malwareChina-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
supply-chainMalicious cPGuard Updates Served in OpsShield Supply Chain Attack
threat-intelRigged Coding Assignment, Abused AI Tool Opened Path to $6 Billion Binance Heist
threat-intelRussian Police Arrest 3 Suspected VasyGrek Hackers, Dismantle Criminal Infrastructure
malwareGorbag: Orcs at the border harvesting intelligence from Ukraine
ransomwareUK organisations warned to brace for AI-powered ransomware attacks
threat-intelFree the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles

