LIVE · cybersecurity feed
Live wire
vendor

Aten

4 CVEs published in the last four months and 3 stories. Exploited flaws first.

Critical0
High4
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-97767.5highunizonATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability.125d ago
CVE-2026-97777.2highunizonATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability.125d ago
CVE-2026-97787.2highunizonATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability.125d ago
CVE-2026-97797.2highunizonATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerabi125d ago

Filter the full tracker by Aten →

Our coverage of Aten

ransomware

ShinyHunters hacks Clop leak site, threatens to extort ransomware gang

The ShinyHunters cybercrime group has claimed responsibility for breaching and defacing the data leak site operated by the Clop ransomware gang. The attack, which began on a Friday night, involved defacing Clop's Tor-based site with ASCII art and a message, and ShinyHunters alleges it also stole server data and private keys for Clop's onion service.

phishing

SilkParasite Threatens Central Asian Orgs With Flurry of RATs

A new spear-phishing campaign, dubbed "SilkParasite," has been observed targeting organizations in Central Asia. The campaign, attributed to a Chinese-nexus threat group with reported links to FamousSparrow, is notable for deploying a variety of Remote Access Trojans (RATs). This activity provides a window into the evolving geopolitical, technical, and strategic operational patterns of certain…

CVE-2026-66066critical

KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)

A critical vulnerability, designated CVE-2026-66066 and nicknamed "KindaRails2Shell," has been identified in Ruby on Rails (Rails), a widely used framework for web applications. The flaw could allow unauthenticated attackers to read arbitrary files from a server and, in some configurations, achieve full remote code execution.