ThreatWire

182 posts

ThreatWire

@ThreatWire_

🚨 Breaking cybersecurity news • CVEs • Zero-days • Exploits • Web3 & Crypto Security • Threat intelligence in real time.

News Katılım September 2024

145 Takip Edilen511 Takipçiler

2026 Yıllık Özeti

@ThreatWire_ hesabının Twitter yılını gör

Sabitlenmiş Tweet

ThreatWire@ThreatWire_·Jul 23

🚨 A public PoC has been released for CVE-2026-25243 affecting Redis. The flaw could allow authenticated remote code execution (RCE) via a crafted RESTORE payload. Fixed in Redis 8.6.3. 🔗 github.com/berabuddies/re… #Redis #RCE #CVE #CyberSecurity

English

133

22.8K

ThreatWire@ThreatWire_·3h

🚨 A public PoC has been released for CVE-2026-12940 affecting IBM Langflow OSS. The vulnerability allows unauthenticated RCE via environment variable injection in the MCP stdio launcher. 🔗 github.com/biitts/cve-202… #Langflow #RCE #CVE #CyberSecurity

English

319

ThreatWire@ThreatWire_·5h

🚨 A public PoC has been released for CVE-2026-58424 affecting Gitea The flaw allows repository writers to execute arbitrary shell commands via a malicious Git hook, potentially leading to RCE on default configurations 🔗 github.com/imbas007/CVE-2… #Gitea #RCE #CVE #CyberSecurity

English

114

ThreatWire@ThreatWire_·8h

🚨 Researchers uncovered a campaign using fake Apple and AWS login pages to target iPhone users 100+ malicious sites are linked to a suspected Chinese threat actor using the leaked DarkSword kit Successful attacks deploy GHOSTBLADE to steal credentials and files #Apple #iPhone

English

ThreatWire@ThreatWire_·1d

🚨 CVE-2026-61511: A critical unauthenticated RCE vulnerability affects vBulletin 5.x/6.x via runMaths eval injection. #vBulletin #RCE #CVE #CyberSecurity

English

2.3K

ThreatWire@ThreatWire_·1d

🚨 Google has fixed 1,442 Chrome vulnerabilities across versions 149–151, exceeding the combined total of the previous 23 releases. The surge was largely driven by AI-powered vulnerability discovery. #Google #Chrome #AI #CyberSecurity

English

1.1K

ThreatWire@ThreatWire_·1d

🚨 UPDATE: A third wave of attacks targeting Coldcard-generated Bitcoin wallets is now underway. Estimated losses have surpassed $88 million. #Bitcoin #Coldcard #Crypto #CyberSecurity

Galaxy Research@glxyresearch

🚨 A 3rd wave in what we suspect are hacks of Coldcard-generated addresses has been identified in which 207.7294 BTC has been drained. Our estimated observed size of the Coldcard hack is now 1,367.05 BTC (~$88.6m) across 4,585 addresses. More updates in the thread below 👇

English

313

ThreatWire@ThreatWire_·2d

🚨 UPDATE: A 41-minute attack drained 1,196 Bitcoin wallets of 1,082.65 BTC (~$70M). Researchers linked the theft to a Coldcard firmware flaw that weakened wallet seed generation. Installing the patch alone is not enough. #Bitcoin #Coldcard #Crypto #CyberSecurity

ThreatWire@ThreatWire_

🚨 BREAKING: An attacker exploited a Coldcard Mk3 seed generation flaw to steal 594 BTC (~$38M) from ~500 Bitcoin wallets in just 25 minutes. The vulnerability made some recovery phrases predictable due to weak entropy. #Bitcoin #Coldcard #Crypto #CyberSecurity

English

1.5K

ThreatWire@ThreatWire_·2d

🚨 OpenAM 16.1.2 patches 4 vulnerabilities, including CVE-2026-62379 (CVSS 9.8), which could allow unauthenticated RCE, and CVE-2026-62261 (CVSS 9.9). No active exploitation or public PoC has been reported. 🔗 github.com/OpenIdentityPl… #OpenAM #RCE #CVE #CyberSecurity

English

835

ThreatWire@ThreatWire_·2d

🚨 CVE-2026-16771: An authentication bypass vulnerability in the Arris BGW210-700 (AT&T gateway) allows a LAN user to retrieve the Wi-Fi password. #Arris #AuthBypass #CVE #CyberSecurity

English

746

ThreatWire@ThreatWire_·2d

🚨 Adobe has patched a CVSS 10.0 vulnerability in Campaign Classic that could allow arbitrary code execution with no user interaction. The update also fixes a file disclosure flaw and 8 vulnerabilities in Adobe Bridge. #Adobe #RCE #CyberSecurity #CVE

English

ThreatWire@ThreatWire_·2d

🚨 A public PoC has been released for CVE-2026-58025 (CVSS 9.8) affecting MediaWiki. The deserialization flaw could lead to RCE via malicious log imports. Upgrade to 1.43.9, 1.44.6, 1.45.4, or 1.46.0. 🔗 github.com/shinthink/CVE-… #MediaWiki #RCE #CVE #CyberSecurity

English

5.1K

ThreatWire@ThreatWire_·3d

English

2.6K

ThreatWire@ThreatWire_·4d

🚨 A public PoC is available for CVE-2026-64600, a Linux kernel vulnerability affecting XFS. The flaw involves stale data fork mappings after an ILOCK cycle, potentially impacting filesystem integrity. 🔗 github.com/litosmartin/cv… #Linux #XFS #CVE #CyberSecurity

English

1.8K

ThreatWire@ThreatWire_·4d

🚨 A public PoC is available for CVE-2026-66066 affecting Ruby on Rails Active Storage. 🔗 github.com/Zer0SumGam3/CV… #RubyOnRails #RCE #CVE #CyberSecurity

ThreatWire@ThreatWire_

🚨 CVE-2026-66066: A critical Ruby on Rails flaw lets unauthenticated attackers read server files via crafted image uploads. Apps using Active Storage with Vips are affected. Stolen Rails keys, DB credentials, cloud keys, and API tokens could lead to RCE. #RubyOnRails #RCE #CVE

English

1.3K

ThreatWire@ThreatWire_·4d

🚨 The new Dysphoria botnet has infected over 200,000 IoT devices, using blockchain domains and proxy nodes to hide its C2 infrastructure. #IoT #Botnet #CyberSecurity #Malware

English

418

ThreatWire@ThreatWire_·4d

🚨 A public PoC is available for CVE-2026-60004, a critical Gitea RCE (CVSS 9.8) via the diffpatch Git hook. 🔗 github.com/go-gitea/gitea… #Gitea #RCE #CVE #CyberSecurity

English

5.3K

ThreatWire@ThreatWire_·4d

🚨 Bitdefender disclosed a Windows Bind Links technique that can bypass EDRs. With local admin privileges, attackers can execute malicious code while security tools still see trusted files. 🔗 github.com/bitdefender/bi… #Windows #EDR #CyberSecurity

English

786

ThreatWire@ThreatWire_·4d

🚨 MongoDB has patched 27 vulnerabilities across Server and Compass. The fixes include memory corruption, RBAC bypass, and DoS vulnerabilities. #MongoDB #CyberSecurity #Vulnerability #Patch

English

707

ThreatWire@ThreatWire_·4d

🚨 UPDATE: Pavel Durov has confirmed Russia officially designated him a “terrorist” after he refused demands for mass surveillance and Telegram censorship. He says Russian authorities have also banned him from publishing information online #Telegram #Russia #CyberSecurity #News

English

156

ThreatWire@ThreatWire_·4d

🚨 A public PoC has been released for CVE-2026-57827 affecting the RSFiles extension for Joomla. The flaw allows unauthenticated file upload, potentially leading to full RCE. 🔗 github.com/shinthink/cve-… #Joomla #RCE #CVE #CyberSecurity

English

3.6K