Mirasvit Magento Full Page Cache Warmer PHP Object Injection Under Active Exploitation (CVE-2026-45247)

Scope: Mirasvit Full Page Cache Warmer for Magento 2 / Adobe Commerce (Versions Prior to 1.11.12)

Severity: Red

Read More

Google DoubleClick Abused as Redirector to Deliver DesckVB RAT via Malspam Campaign

Scope: Enterprise Email Users (Windows Endpoints)

Severity: Red

Read More

Marimo Python Notebook Pre-Authentication RCE Now Weaponized with LLM-Driven Post-Exploitation (CVE-2026-39987)

Scope: Marimo Python Notebook Versions 0.20.4 and Earlier

Severity: Red

Read More

PAN-OS GlobalProtect Authentication Bypass Under Active Exploitation Added to CISA KEV (CVE-2026-0257)

Scope: Palo Alto Networks PAN-OS with GlobalProtect Portal or Gateway Configured

Severity:  Red

Read More

Cybercriminals Targeting Formula 1 Fans with Fake Streaming Services, Counterfeit Merchandise, and Phishing Scams

Scope: Formula 1 Fans (Global)

Severity: Medium

Read More

Trend Micro Apex One Directory Traversal Zero-Day Added to CISA KEV (CVE-2026-34926)

Scope: Trend Micro Apex One On-Premises (Server and Agent Builds Below 17079)

Severity: High

Read More