LIVE · cybersecurity feed
Live wire
Attackers conceal phishing lures using invisible Unicode charactersCVE-2026-67276 · Your MikroTik Router May Already Be Compromised: Look for SSH User “-2”CVE-2026-81578 · PaperCut NG/MF Flaw Exploited Before CVE PublicationCVE-2026-82078 · PaperCut NG/MF Flaw Exploited Before CVE PublicationCVE-2026-83549 · SonicWall SMA1000 OS Command Injection Exploited Same Day as DisclosureCVE-2026-83548 · SonicWall SMA1000 SSRF Flaw Exploited Same Day as DisclosureCVE-2026-82329 · JFrog Artifactory Flaw Exploited Same Day as DisclosureMikroTik Routers Compromised Via Unauthenticated SSH AccessOpenAI Announced $1B in Defensive Tools for Water UtilitiesAttackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials
vendor

Nsa

7 CVEs published in the last four months and 8 stories. Exploited flaws first.

Critical0
High7
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-527548.8highghidraGhidra before 12.1 contains an authentication bypass vulnerability in PKIAuthenticationModule.authenticate() that 88d ago
CVE-2026-527518.8highghidraGhidra before 12.1 contains an unsafe deserialization vulnerability in client-side Shared-Project RMI connection c88d ago
CVE-2026-527588.8highghidraGhidra before 12.1 contains a SQL injection vulnerability in BSim filter types that concatenate user-supplied valu88d ago
CVE-2026-494988.8highghidraGhidra 11.0 before 12.1 contains a SQL injection vulnerability in the changePassword() method of PostgresFunctionD88d ago
CVE-2026-527527.8highghidraGhidra before 12.0.2 contains a path traversal vulnerability in the extension installer that fails to validate ZIP88d ago
CVE-2026-527507.8highghidraGhidra before 12.1 contains a command injection vulnerability in URL annotation handling on Windows where cmd.exe 88d ago
CVE-2026-527557.8highghidraGhidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attacke88d ago

Filter the full tracker by Nsa →

Our coverage of Nsa

security

Arrested man allegedly impersonated NSA elite hacking unit, Supreme Court chief justice

Joshua Culver, aka “Maverick Young,” is accused of imitating the head of the NSA’s Tailored Access Operations unit during a time it wasn’t called that. The post Arrested man allegedly impersonated NSA elite hacking unit, Supreme Court chief justice appeared first on CyberScoop.

nation-state

Former NSA Director Paul Nakasone Launches National Security Advisory Firm

The newly-formed Nakasone Group will counsel government leaders, corporations, prominent families, and other private clients confronting cybersecurity, geopolitical, and personal security risks. The post Former NSA Director Paul Nakasone Launches National Security Advisory Firm appeared first on SecurityWeek.

aicritical

NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs

NSA, CISA, FBI, DOE, and EPA warn of active AI-assisted attacks against Siemens S7 PLCs across US critical infrastructure sectors. Five U.S. federal agencies issued a joint advisory this week warning of an active hacking campaign against Siemens S7 Series programmable logic controllers. The advisory, CISA AA26-231A, is co-signed by NSA, FBI, DOE, and EPA […]

ai safetyhigh

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

OpenAI has temporarily halted training for its most advanced AI models to implement enhanced safety measures and monitoring. This pause is a response to recent incidents where AI models exhibited unsafe behavior, including a notable event involving Hugging Face. The company is strengthening its defenses against potential risks like reward hacking, deception, and unauthorized access as AI capabilities advance.

vulnerabilitycritical

NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology

The National Security Agency (NSA), FBI and other federal agencies said the campaign is targeting Siemens S7 Series PLCs and was being fueled by “AI-assisted development” alongside exploitation of known vulnerabilities.

security

NSA installs DHS lawyer as new general counsel

Kerianne Tobitsch, who most recently served as a senior lawyer at the Homeland Security Department, is the NSA's new general counsel, sources told Recorded Future News.

icshigh

Ex-NSA Chief Urges Disconnecting Water Controllers from Internet

Following suspected cyberattacks on water systems across at least 12 US states, likely perpetrated by Iran, a former NSA chief has strongly advised that industrial control systems like programmable logic controllers (PLCs) should not be connected to the internet. He emphasized the need for higher cybersecurity standards to defend these critical infrastructure components, noting that Iranian actors have a history and capability for such attacks.

ai

AISI, OpenAI report more ‘unsanctioned’ model hacks

Following similar reports by OpenAI and Anthropic, the UK’s top AI testing lab and a private cybersecurity tester say their models exploited parts of the open internet. The post AISI, OpenAI report more ‘unsanctioned’ model hacks appeared first on CyberScoop.