NEW A2
100 CVE-2026-97785
The alert contains only the CVE summary; no information on active exploitation, affected versions, or attacker TTPs.
Critical
CVSS
10.0
EPSS
0%
Archive view — this data may be outdated.
CTI status
Joel Traber AG
As of:
Last pipeline run:
Status High
All threats
Sorted by KEV · Risk · EPSSAdmiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
NEW Storm-0940 C3
85 Microsoft Links Storm-0940 to ConnectWise Supply Chain Attack
The report shows a China-linked actor automated an MSP supply-chain campaign with an AI-enabled penetration-testing tool and compromised more than 2,200 tenants , a strategic supply-chain risk beyond patch management.
Critical
NEW Sandworm / UAC-0099 (Earth Sirrush) C3
85 Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
The report shows that Sandworm, together with UAC-0099, is using a new mesh-network backdoor for destructive wiper attacks on logistics targets, making the state-sponsored threat to European supply chains more concrete.
Critical
NEW China APT C3
83 China APT Uses AI Pentest Tool Artex in ConnectWise Attacks
The report adds to patch information the insight that a Chinese state actor is using an AI-powered pentest tool to compromise hundreds of organizations via ConnectWise remote-access/MSP channels.
Critical
NEW Sandworm C3
83 Russia-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
The report shows that Sandworm, together with UAC-0099, deployed a new mesh network backdoor in a destructive attack on a Ukrainian logistics company, demonstrating ongoing Russian cyber-warfare against supply chains.
Critical
NEW A2
81 CVE-2026-115723
The advisory adds to the bare patch information by describing the attack vector via the BSend length field, through which an active S7 partner can trigger buffer overflows in SCADA, HMI or gateway processes; active exploitation is not demonstrated.
Critical
CVSS
7.4
EPSS
0%
B3
80 AI-Powered Espionage Campaign Targets Government Linux Infrastructure
The report shows that AI is increasingly being used in state-sponsored espionage against Linux infrastructure, although the specific technical attack vector remains unclear in the excerpt.
Critical
NEW DataSuckers, Candiru F6
80 Risky Bulletin: Russia arrests DataSuckers hacking group
The report shows Russia taking action against its own hacking groups while North Korea and commercial spyware vendors like Candiru continue to operate globally.
Critical
NEW Prince of Persia C3
78 Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016
The report shows that the Iranian APT group Prince of Persia is again operating command-and-control infrastructure via US shared hosting after a pause, indicating continued state-sponsored cyber activity and adjustments in operational security.
Critical
C3
20 Attackers exploit security vulnerabilities in Fortinet products and BeyondTrust
CISA confirms exploitation in the wild , these flaws are therefore no longer mere patch candidates but already active attack surfaces on edge and remote-access devices.
High
NEW C3
20 PwnEscape: Linux vulnerability allows attackers to escape from VMs
The report describes a VM escape vulnerability in the Linux network stack that, without a CVE or evidence of active exploitation, is primarily relevant to Linux-based virtualization hosts.
High
NEW C3
20 Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
The campaign shows that exposed FortiGate and GlobalProtect edge devices are actively targeted and that compromised credentials are used worldwide for further attacks, going beyond patch information.
High
NEW B3
14 Infostealer riding the AI Train
The report shows that AI themes are used as a lure for a modular infostealer that collects system, clipboard and browser data.
Medium
NEW A3
0 Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail and FortiAuthenticator: Multiple vulnerabilities enable unspecified attack
The advisory bundles several Fortinet vulnerabilities without CVE, version or exploitation details and therefore adds no independent insight for prioritisation beyond the vendor advisories.
Medium
NEW A3
0 [UPDATE] Google Chrome / Microsoft Edge: Multiple Vulnerabilities
The report aggregates several vulnerabilities in Chromium-based browsers without naming a concrete active exploitation or CVE details, so the patch status of the deployed browser versions is the decisive factor.
Medium
NEW A3
0 Google Chrome / Microsoft Edge: Multiple Vulnerabilities
The report lists no CVE IDs, CVSS scores, or active exploitation details; prioritization requires the Google and Microsoft advisories.
Medium