Advisories

Vulnerabilities, security writing, standards and rules as they were filed.

Showing everything from threatfilter.dev · Show all

NameByWhereWhen
[INFO] Identity Visibility in 2026: The Foundation of Identity Securitythreatfilter.devSep 19
[INFO] Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flawsthreatfilter.devSep 19
[HIGH] SolarWinds Patches ARM Hard-Coded Key Flaw Enabling Unauthenticated RCEthreatfilter.devSep 19
[CRITICAL] Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wildthreatfilter.devSep 19
[INFO] Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Upthreatfilter.devSep 19
[INFO] CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositoriesthreatfilter.devSep 19
[CRITICAL] CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wildthreatfilter.devSep 19
[INFO] Friday Squid Blogging: On Squid Egg Sacsthreatfilter.devSep 18
[INFO] TestFlight Updatethreatfilter.devSep 18
[INFO] Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacksthreatfilter.devSep 18
[CRITICAL] Cisco Zero-Day Highlights API Endpoint Authentication Issuesthreatfilter.devSep 18
[INFO] EY Survey Finds Autonomous AI Implementation Outpaces Oversightthreatfilter.devSep 18
[INFO] MFA Won't Save You From OAuth Consent Abusethreatfilter.devSep 18
[INFO] Public Exploits Released for Four Linux Kernel Flaws That Enable Local Rootthreatfilter.devSep 18
[INFO] Don’t Call Us, We’ll Call Your APIs | TraderTraitor Backdoors Resurface on Victim With No Crypto Tiesthreatfilter.devSep 18
[INFO] Xcode 27.1 beta (27A9269)threatfilter.devSep 18
[INFO] New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Executionthreatfilter.devSep 18