Pwnspectrum

CISA has added another vulnerability to its catalog, signaling that attackers are actively hunting for weaknesses. These vulnerabilities are a reminder to always keep your systems up-to-date – a timely patch can be the difference between a successful attack and a secure system. The threat actors are relentless, constantly scanning for new avenues of entry.

CISA has just announced two new vulnerabilities, indicating that exploitation is already underway. This is a critical escalation, demanding immediate attention. Cybercriminals are leveraging these holes to gain unauthorized access, potentially impacting sensitive data and disrupting operations. The speed at which these vulnerabilities are being exploited underscores the urgency of proactive security measures.

Thirteen vulnerabilities, specifically targeting the JavaScript sandbox, represent a monumental security risk. Attackers can now execute arbitrary code within these environments, effectively taking complete control of affected systems. This is a devastating discovery, highlighting the dangers of outdated software and highlighting a complex attack vector.

Palo Alto Networks has issued an urgent warning: a critical buffer overflow vulnerability is being actively exploited. Attackers are gaining unauthorized access to systems, potentially exfiltrating data or launching further attacks. This requires immediate patching and vigilant monitoring to prevent further damage.

Threat actors are attempting to exploit a recently disclosed critical security flaw in PAN-OS software. This represents a significant escalation, as attackers are employing established techniques to gain root access and potentially orchestrate broader espionage campaigns. Defenders must prioritize rapid detection and response to mitigate this serious threat.

Security researchers have uncovered vulnerabilities in the Spring Cloud Config Server, providing attackers with the ability to access arbitrary files and leak sensitive GCP secrets. This represents a sophisticated attack, enabling comprehensive data breaches and potentially crippling critical infrastructure. Constant vigilance and rigorous security audits are necessary to prevent such compromises.

A deceptive Claude AI website has emerged, delivering a malicious Claude-Pro Relay download – a backdoor for Windows dubbed 'Beagle.' This highlights the growing threat of AI-powered deception, as attackers leverage sophisticated techniques to lure users into compromising their systems. Vigilance and skepticism are key to avoiding this trap.

CISA is warning that Palo Alto Networks PAN-OS is under active attack – a Code Red situation. This is a critical escalation, demanding immediate patching and vigilant monitoring to prevent further damage. Attackers are leveraging established techniques to gain unauthorized access, potentially exfiltrating data or launching further attacks.

Wiz used an AI reverse-engineering tool to pinpoint a vulnerability that previously would have been too costly and time-consuming to undertake. This innovative approach demonstrates the evolving landscape of cybersecurity, showcasing how AI is becoming a powerful tool for threat detection and remediation.

Several npm packages for SAP’s cloud application development ecosystem have been compromised as TeamPCP’s supply chain attacks broaden. This highlights the critical importance of supply chain security and the potential for malicious actors to infiltrate widely used software components.

Researchers have identified vulnerabilities in OpenStack Cyborg before 16.0.1, providing a clear path for attackers to gain unauthorized control. Patching immediately is crucial to safeguarding OpenStack deployments from exploitation and maintain security posture.

React Server 19.2.0 - Remote Code Execution represents a severe threat, as attackers can execute arbitrary code within these environments, effectively taking complete control of affected systems. This is a devastating discovery, highlighting the dangers of outdated software and the need for proactive security measures.

The Canvas breach is a devastating ransomware attack targeting schools and colleges, disrupting learning and exposing sensitive student data. This highlights the vulnerability of educational institutions to cyberattacks and the critical need for robust cybersecurity defenses.

28 fake call history utilities on Google Play represent a sophisticated financial ransomware attack, tricking users into paying subscription fees for fabricated logs. This demonstrates the deceptive tactics employed by cybercriminals to exploit unsuspecting individuals.

This report provides statistical data on published vulnerabilities and exploits we researched during Q1 2026. It also includes summary data on the use of C2 frameworks in APT attacks. This represents a snapshot of the threat landscape and informs security strategies.

Iranian-affiliated cyber actors are exploiting Programmable Logic Controllers across US critical infrastructure, posing a significant threat to national security. This highlights the expanding scope of state-sponsored cyberattacks and the urgent need for robust defenses against sophisticated adversaries.

This joint Cybersecurity Advisory is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. This demonstrates the importance of collaboration in combating ransomware.

Sophos XDR delivers 100% detection coverage in the latest ATT&CK Evaluation, showcasing the power of AI in security monitoring. This underscores the transformative potential of AI in proactive threat detection and response.

ESET researchers have discovered PromptSpy, the first known Android malware to abuse generative AI in its execution flow. This marks a watershed moment in cybersecurity, signaling the emergence of a new generation of AI-powered threats.

The NIST's revisions to the Security and Privacy Control Catalog are a crucial step in strengthening cybersecurity nationwide, responding directly to the recent executive order. This highlights the ongoing efforts to enhance security posture and protect critical infrastructure.

The revised NIST Security and Privacy Control Catalog reflects a proactive response to recent cybersecurity challenges, providing updated guidance and frameworks for enhanced protection.