Browse public community intelligence reports, source analysis, and threat research.
3 intel reports
F5 BIG-IP APM is vulnerable to a critical unauthenticated remote code execution flaw (CVE-2026-94127) when configured as an OAuth Authorization Server, which is actively being exploited in the wild.
Unauthenticated attackers are actively exploiting a maximum-severity path traversal vulnerability (CVE-2026-85706) in GitLab to read arbitrary files and sensitive configuration data.
The Kimsuky group is deploying a new multi-stage LNK malware campaign targeting South Korean financial sectors using GitHub, Dropbox, and WordPress as functional C2 channels.
