cve-2026-35616
86 articles with this tag
✨
AI summary
Loading…
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
HIGH
CRITICAL
HIGH
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
CRITICAL
June 2026 CVE Landscape
FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations
3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
China-linked recon botnet outpaces enterprise defenses
China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance
China-linked JDY botnet expands targeting of U.S. military networks
PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation
New infostealer reaches enterprise devices through FortiClient EMS vulnerability
Hackers exploit FortiClient EMS flaw to push infostealer malware
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks
April 2026 CVE Landscape
Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator
13th April – Threat Intelligence Report
Anthropic MCP Design Vulnerability Enables RCE, Threatening AI Supply Chain
Researchers Detect ZionSiphon Malware Targeting Israeli Water, Desalination OT Systems
Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials
$13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence Claims
Mirai Variant Nexcorium Exploits CVE-2024-3721 to Hijack TBK DVRs for DDoS Botnet
Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched
Google Blocks 8.3B Policy-Violating Ads in 2025, Launches Android 17 Privacy Overhaul
CISA flags Apache ActiveMQ flaw as actively exploited in attacks
NIST Limits CVE Enrichment After 263% Surge in Vulnerability Submissions
Operation PowerOFF Seizes 53 DDoS Domains, Exposes 3 Million Criminal Accounts
Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation
Newly Discovered PowMix Botnet Hits Czech Workers Using Randomized C2 Traffic
Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution
Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks
Hidden Passenger? How Taboola Routes Logged-In Banking Sessions to Temu
UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign
Patch these critical Fortinet sandbox bugs that let attackers bypass login, run commands over HTTP
n8n Webhooks Abused Since October 2025 to Deliver Malware via Phishing Emails
Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover
April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More
Deterministic + Agentic AI: The Architecture Exposure Validation Requires
Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities
OpenAI Launches GPT-5.4-Cyber with Expanded Access for Security Teams
Microsoft April 2026 Patch Tuesday fixes 167 flaws, 2 zero-days
New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released
AI-Driven Pushpaganda Scam Exploits Google Discover to Spread Scareware and Ad Fraud
Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance Security
Mirax Android RAT Turns Devices into SOCKS5 Proxies, Reaching 220,000 via Meta Ads
Analysis of 216M Security Findings Shows a 4x Increase In Critical Risk (2026 Report)
108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 Users
ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers
CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software
JanelaRAT Malware Targets Latin American Banks with 14,739 Attacks in Brazil in 2025
Veikleikar hjá Fortinet, Cisco, Juniper, Adobe og Marimo
FBI and Indonesian Police Dismantle W3LL Phishing Network Behind $20M Fraud Attempts
Bulletin d'actualité CERTFR-2026-ACT-017 (13 avril 2026)
13th April – Threat Intelligence Report
Your MTTD Looks Great. Your Post-Alert Gap Doesn't
North Korea's APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware
CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads
Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621
Citizen Lab: Law Enforcement Used Webloc to Track 500 Million Devices via Ad Data
GlassWorm Campaign Uses Zig Dropper to Infect Multiple Developer IDEs
Browser Extensions Are the New AI Consumption Channel That No One Is Talking About
Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure
Google Rolls Out DBSC in Chrome 146 to Block Session Theft on Windows
Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers
EngageLab SDK Flaw Exposed 50M Android Users, Including 30M Crypto Wallets
UAT-10362 Targets Taiwanese NGOs with LucidRook Malware in Spear-Phishing Campaigns
The Hidden Security Risks of Shadow AI in Enterprises
Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025
Bitter-Linked Hack-for-Hire Campaign Targets Journalists Across MENA Region
New Chaos Variant Targets Misconfigured Cloud Deployments, Adds SOCKS Proxy
Masjesu Botnet Emerges as DDoS-for-Hire Service Targeting Global IoT Devices
APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies
Fortinet FortiClientEMS Remote Code Execution Vulnerability
Fortinet releases emergency hotfix for FortiClient EMS zero-day flaw
Vulnérabilité dans Fortinet FortiClientEMS (07 avril 2026)
Fortinet Releases Emergency Patch After FortiClient EMS Bug Is Exploited
Fortinet customers confront actively exploited zero-day, with a full patch still pending
Fortinet Issues Emergency Patch for FortiClient Zero-Day
Attackers exploited this critical FortiClient EMS bug as a 0-day
50,000 WordPress Sites affected by Arbitrary File Upload Vulnerability in Ninja Forms – File Upload WordPress Plugin
CISA orders feds to patch exploited Fortinet EMS flaw by Friday
CISA Adds One Known Exploited Vulnerability to Catalog
CVE-2026-35616: Fortinet FortiClientEMS improper access control vulnerability exploited in the wild
⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More
Fortinet Rushes Emergency Fixes for Exploited Zero-Day
New FortiClient EMS flaw exploited in attacks, emergency patch released
Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS
FortiClient EMS zero-day exploited, emergency hotfixes available (CVE-2026-35616)