NEW
94 CVE-2022-49042
The vulnerability allows local users to execute arbitrary code on backup management systems, compromising the integrity of backup infrastructure.
Critical
CVSS
7.8
EPSS
0%
What has changed?
Comparing 3 June 2026 with the previous day 2 June 2026.
Newly added
17 NEW
92 CVE-2022-49036 , Arbitrary Code Execution in Synology Active Backup for Business Recovery Media Creator
Local code execution vulnerability in Synology Active Backup for Business requires patching to version 2.5.0-2081 or later to mitigate risks from local attackers.
Critical
CVSS
7.8
EPSS
0%
NEW Chinese APT C3
80 Chinese hackers use new Atlas RAT malware in European cyberattacks
New Atlas RAT malware demonstrates targeted adaptation by Chinese APT groups toward European infrastructure and signals escalation of DACH-region targeting.
Critical
NEW
70 Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes
The vulnerability exploits URI handler mechanisms to force network authentication, enabling passive capture of NTLMv2 hashes without requiring user interaction.
High
CVSS
4.3
EPSS
0%
NEW C3
70 Coding Gaffe Exposes Microsoft 365 Accounts to Widespread Takeover
A debugging error in Microsoft 365 Android apps (Excel, Word, PowerPoint, OneNote, Loop, Copilot) disabled a critical security setting for token protection validation in production releases, allowing attackers to steal authentication tokens and take over accounts.
Critical
NEW
63 Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign
A large-scale npm supply chain attack compromises 32 packages under the @redhat-cloud-services scope via CI/CD pipeline infiltration, where attackers abused legitimate GitHub Actions OIDC workflows to publish trojanized packages with authentic signatures.
Critical
NEW
52 CVE-2024-47273
A path-traversal vulnerability in Synology Hyper Backup before version 4.1.2-4036 allows authenticated users to write arbitrary files and potentially compromise the integrity of backup systems.
Medium
CVSS
4.3
EPSS
0%
NEW
50 CVE-2024-47263
Path-traversal vulnerability in Hyper Backup allows authenticated administrators to write non-sensitive files via unspecified vectors , requires admin privileges and is already fixed in version 4.1.2-4036.
Medium
CVSS
4.1
EPSS
0%
NEW
37 Mozilla Firefox and Thunderbird: Multiple Vulnerabilities
Three of the patched vulnerabilities are already being actively exploited for remote code execution; immediate updates required.
Critical
NEW
20 Microsoft Defender and Malware Protection Engine: Multiple Vulnerabilities
BSI warns of multiple vulnerabilities in Microsoft Defender and Malware Protection Engine that enable attackers to achieve local privilege escalation, code execution, and denial of service.
High
NEW
20 New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
The vulnerability affects HTTP/2 default configurations across multiple web server vendors and enables unauthenticated remote DoS , a newly discovered classification issue, not merely a patch.
High
NEW
20 'HTTP/2 Bomb' Exploit Knocks Web Servers Offline in Seconds
A novel attack combination exploits HTTP/2 compression bombs and Slowloris-style techniques to incapacitate web servers without requiring specific patches.
High
NEW
20 Mozilla Firefox: Multiple Vulnerabilities Enable Unspecified Attack
High
NEW A3
20 CVE-2026-42840
An authenticated user can inject persistent JavaScript into a customer record and compromise every POS operator in the organization who retrieves that record.
High
EPSS
0%
NEW C3
20 Attackers Use AI to Automate EDR Evasion Testing
Attackers are using AI-driven automation to systematically test and refine evasion techniques against EDR solutions , signaling a professionalization of attack preparation workflows.
High
NEW
17 VS Code zero-day lets hackers steal GitHub tokens in one click
A zero-day vulnerability in VS Code enables attackers to exfiltrate GitHub tokens with minimal user interaction, potentially compromising access to code repositories and CI/CD pipelines.
High
[UPDATE] Intel Processor: Multiple Vulnerabilities
BSI advisory on Intel processor vulnerabilities without CVE identifiers; specific versions and affected processor generations must be retrieved from the complete BSI publication.
Medium
Newly KEV-listed
0No changes in this category.
Score moved
0No changes in this category.
No longer in report
9 KEV NEW
100 CVE-2022-0492 , Linux Kernel Improper Authentication Vulnerability
CVE-2022-0492 has been known since 2022 and is already catalogued in the CISA KEV; this alert repeats an established patching obligation without new exploit data or contextual information.
Critical
CVSS
7.8
EPSS
5%
KEV NEW Gamaredon
80 Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
Gamaredon employs a multi-stage exploitation chain leveraging the WinRAR vulnerability to establish system fingerprinting and remote payload delivery, indicating escalation of Russian APT activity targeting Eastern Europe.
Critical
CVSS
8.8
EPSS
9%
NEW
78 CVE-2025-59612 , Memory Corruption in Windows Drivers via Incorrect Trusted Application Request
A memory corruption vulnerability in Windows drivers can be triggered via malformed trusted application requests, potentially enabling local privilege escalation.
Critical
CVSS
6.7
EPSS
0%
NEW lwxat (Chinese-speaking cybercriminal collective)
70 From PDB strings to MaaS: Tracking a commodity BadIIS ecosystem used by Chinese-speaking threat actors
Organized Chinese-speaking cybercriminals operate BadIIS as a Malware-as-a-Service since at least 2021 with continuous evasion updates targeting security products such as Norton,a systemic threat to Windows Server environments in European manufacturing firms.
High
NEW
63 AI-built ransomware toolkit automates EDR evasion, AD discovery
AI-driven ransomware toolkits with automated EDR evasion and AD reconnaissance represent a new class of threats capable of rendering traditional defenses obsolete through machine-learning-based evasion techniques.
Critical
NEW
20 Microsoft SharePoint: Vulnerability Enables Code Execution
BSI alerts to an RCE vulnerability in Microsoft SharePoint Server; as no CVE is specified, this may be a not-yet-publicly-disclosed or aggregated advisory.
High
NEW
20 Red Hat Infostealer Reaches Over 100,000 Downloads
An npm-based infostealer with over 100,000 downloads demonstrates active supply-chain risk through manipulated open-source packages that exfiltrate credentials and environment data from developers.
High
NEW
20 FBI-Flagged Phishing Kit Kali365 Expands Its Reach
Kali365 operators have expanded their attack capabilities from pure Microsoft 365 phishing to AWS, Okta, and Russian platforms, using device-code phishing to bypass MFA.
High
NEW
20 [UPDATE] Linux Kernel: Vulnerability Enables Unspecified Attack
BSI warns of a kernel vulnerability with local exploitability and potential arbitrary code execution that poses a risk to systems with uncontrolled local access.
High