LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Ssw

5 CVEs published in the last four months and 12 stories. Exploited flaws first.

Critical1
High2
Medium2
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-287929.6criticaltinacms\/cliTina is a headless content management system.223d ago
CVE-2026-287938.4hightinacms\/cliTina is a headless content management system.223d ago
CVE-2026-287917.4hightinacms\/cliTina is a headless content management system.223d ago
CVE-2026-241256.3mediumtinacms\/graphqlTina is a headless content management system.223d ago
CVE-2026-290666.2mediumtinacms\/cliTina is a headless content management system.223d ago

Filter the full tracker by Ssw →

Our coverage of Ssw

nation-state

The people who know passkeys best are still typing passwords

A recent survey of nearly 1,900 technology and security professionals across nine countries reveals that while 87% are familiar with passkeys, 43% still rely on usernames and passwords for work accounts. This preference for traditional authentication methods persists despite the known vulnerabilities associated with passwords and the respondents' high level of expertise in the field.

data breachhigh

French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks

France's tax administration recently experienced a significant data breach, where an attacker reportedly used stolen staff passwords to access sensitive tax data. The incident, which impacted hundreds of thousands of individuals and businesses, went undetected for seven weeks. The breach was only brought to light after the attacker publicly claimed responsibility online, prompting an…

nation-state

Gopass: Open-source command-line password manager for teams

Gopass, an open-source command-line password manager designed for teams, stores credentials in an encrypted format and operates without requiring a network connection, making it suitable for air-gapped systems. The tool functions as a direct replacement for the traditional Unix password manager, `pass`.

phishing

A fake ChatGPT billing email is after your OpenAI password

A new phishing campaign is targeting ChatGPT users with a fake billing email designed to steal OpenAI account credentials. The scheme directs users to a deceptive login page that captures any username and password entered.

phishing

In Other News: InjectEave Attack, SIM Swapper Sentenced, Glasswing Findings Review

Recent reports have highlighted several significant developments in the cybersecurity landscape, including a novel phishing technique leveraging invisible Unicode characters, a substantial bounty offered for an Iranian cyber official, and new insights into the military affiliations of a Chinese hacking group. These stories, though varied in nature, underscore ongoing challenges in digital…

security

Your Employee’s Password Appeared in an Infostealer Log. Now What?

The proliferation of infostealer logs has become a significant operational security challenge for organizations, moving beyond a niche underground commodity to a mainstream threat. Security teams are increasingly confronted with alerts indicating that employee corporate credentials, including email addresses and passwords for SaaS applications, have appeared in these logs. These logs often…

security

Security vets rally around $4 paper password books for sale in Australia

A resurgence of interest in physical password books is being observed, particularly in Australia where the national postal service, AusPost, is selling them for AU$4.90 (approximately US$3.51) for a small version and a dollar more for a larger one. These paper-based password vaults, once dismissed by cybersecurity professionals, are now gaining traction as a viable, albeit limited, security…

phishing

New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets

A new phishing toolkit, dubbed iAuthFlow V2, has been identified by security researchers. This toolkit reportedly leverages passkeys to maintain persistent access to compromised accounts, even in scenarios where the legitimate user has reset their password and revoked active sessions. The core innovation reported is the toolkit's ability to register an attacker-controlled passkey, which then…

ciscocritical

Cisco Patches Nine Flaws in Crosswork and Secure Workload Software

Cisco has issued security updates to address a total of nine vulnerabilities impacting its Crosswork platforms and Secure Workload Software. Among these, five distinct flaws have been assigned a critical Common Vulnerability Scoring System (CVSS) score of 10.0, indicating the highest level of severity. The company’s advisory notes that the vulnerabilities affect specific components within the…

security

Even MOAR Powershell, looking at Entra logins - the good, the bad and the password sprays, (Fri, Aug 21st)

A recent report highlights a persistent oversight in cloud security practices, specifically regarding the monitoring of login attempts within Microsoft Entra ID (formerly Azure Active Directory). The report emphasizes that organizations migrating to cloud environments often neglect to maintain the same level of vigilance over their cloud logs, particularly successful and failed login attempts,…

vulnerability

N-able Bug Exposes Password Vault Master Keys

A recently disclosed vulnerability in N-able's Passportal password manager reportedly exposed master keys for password vaults. The flaw, which affects a product widely used by Managed Service Providers (MSPs) and Small and Medium Businesses (SMBs), raises concerns about the security of cloud-based password management solutions even after a patch has been applied.

vulnerabilitycritical

Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities

Cisco has released patches addressing critical vulnerabilities in its Crosswork Network Automation and Secure Workload (formerly Tetration) products. These security flaws have been reported to potentially enable remote code execution, authentication bypasses, and path traversal attacks against affected systems. The patches are intended to mitigate the risk posed by these vulnerabilities.