The Archive
Back Issues
Every weekly digest filed by the desk, preserved for the record.
28 editions · 1,084 stories indexed
- 44Vol. 2026Current Issue26 October – 1 November 2026
Threat Brief: Critical Vulnerabilities in PHP: CVE-2026-109618, CVE-2026-109619
- [NEU] [hoch] Splunk SOAR: Mehrere Schwachstellen
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
29stories filedOpen issue → - 43Vol. 2026Back Issue19 – 25 October 2026
Anthropic 'SneakPeek' Flaw Is a Silent Zero-Click Threat
- [NEU] [hoch] Sonatype Nexus Repository Manager: Mehrere Schwachstellen
- [NEU] [hoch] JetBrains TeamCity: Mehrere Schwachstellen
29stories filedOpen issue → - 42Vol. 2026Back Issue12 – 18 October 2026
[NEU] [hoch] Argo CD: Mehrere Schwachstellen
- FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
- FBI Removes Accenture Contractor After Patch Failure Led to ShinyHunters Breach
31stories filedOpen issue → - 41Vol. 2026Back Issue5 – 11 October 2026
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
- Cisco warns of new SD-WAN zero-day exploited in attacks
- [NEU] [kritisch] Citrix NetScaler ADC und Citrix NetScaler Gateway: Mehrere Schwachstellen
28stories filedOpen issue → - 40Vol. 2026Back Issue28 September – 4 October 2026
CRA Reporting Is Live: What Manufacturers, Vendors, and Distributors Need to Know
- Russia Escalating Hybrid Attacks Across Europe
- Codetta: High-Capacity, Keyless, and Undetectable Multi-Agent Collusion
33stories filedOpen issue → - 39Vol. 2026Back Issue21 – 27 September 2026
Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
- New Check Point flaw lets hackers execute code with root privileges
- Cisco warns of max severity ISE zero-day exploited in attacks
29stories filedOpen issue → - 38Vol. 2026Back Issue14 – 20 September 2026
EU Cyber Resilience Act to Enforce New Reporting Requirements
- Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
- Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent
33stories filedOpen issue → - 37Vol. 2026Back Issue7 – 13 September 2026
New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
- Critical Citrix NetScaler auth bypass now leveraged in attacks
- Version 1.0: Deutsche Institutionen über TerminalFix-Kampagne kompromittiert
28stories filedOpen issue → - 36Vol. 2026Back Issue31 August – 6 September 2026
VMs won't contain cyber-capable agents
- CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday
- Chinese and Russian spies stepping up cyberattacks, German companies report
32stories filedOpen issue → - 35Vol. 2026Back Issue24 – 30 August 2026
Microsoft warns of max severity Entra ID flaw exploited in attacks
- Critical RCE flaw in Windows IKE Extension now actively exploited
- Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud
28stories filedOpen issue → - 34Vol. 2026Back Issue17 – 23 August 2026
When Agents Talk: Honeytokens under Shared Memory
- Critical Progress LoadMaster flaw now actively exploited in attacks
- Max severity SAP Commerce Cloud flaw now targeted in attacks
33stories filedOpen issue → - 33Vol. 2026Back Issue10 – 16 August 2026
[NEU] [hoch] Jenkins Plugins: Mehrere Schwachstellen
- ChainDrop: Inside a Self-Propagating npm Worm
- Cyberattacks on water systems expand to 12 states as South Dakota, Georgia announce incidents
32stories filedOpen issue → - 32Vol. 2026Back Issue3 – 9 August 2026
The OpenAI Hack Shows the Genie Is Out of the Bottle
- The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software
- Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction
32stories filedOpen issue → - 31Vol. 2026Back Issue27 July – 2 August 2026
Critical ServiceNow code execution flaw now exploited in attacks
- Autonomous AI Intrusions Are Here: Lessons from the Hugging Face Compromise
- New HollowGraph malware uses Microsoft Graph for stealthy C2 comms
18stories filedOpen issue → - 30Vol. 2026Back Issue20 – 26 July 2026
EU sanctions Russian GRU military hackers over cyberattacks
- UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign
- WordPress Core "wp2shell" RCE flaws get public exploits, patch now
26stories filedOpen issue → - 29Vol. 2026Back Issue13 – 19 July 2026
EU takes member states to court over unimplemented cybersecurity law
- Compromised AsyncAPI npm packages: inside a CI supply-chain attack
- Mako: A Self-Evolving Agentic Operating System (SE-AOS) for Autonomous Web Exploitation
27stories filedOpen issue → - 28Vol. 2026Back Issue6 – 12 July 2026
Supreme Court decision threatens EU-US data transfer agreement
- CISA: Microsoft SharePoint RCE flaw now actively exploited
- New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android
54stories filedOpen issue → - 27Vol. 2026Back Issue29 June – 5 July 2026
Behind the console: An AiTM phishing kit harvesting AWS console credentials and beyond
- Lazarus Group's Latest: Brandjacking Campaign on npm
- Europe Evolves Into Ransomware's Favorite Region
31stories filedOpen issue → - 26Vol. 2026Back Issue22 – 28 June 2026
We beat Google’s zero-knowledge proof of quantum cryptanalysis
- Scripting the disassembler: Local agentic reverse engineering through vbdec’s live COM object model
- V8 Heap Archaeology: Finding Exploitation Artifacts in Chrome’s Memory
82stories filedOpen issue → - 25Vol. 2026Back Issue15 – 21 June 2026
New GitHub Action supply chain attack: reviewdog/action-setup
- [NEU] [hoch] VMware Tanzu Spring Cloud Gateway Server und Sleuth: Mehrere Schwachstellen
- Software Dark Matter: Gazing at Uncharted Files to Navigate SBOM Integrations
82stories filedOpen issue → - 24Vol. 2026Back Issue8 – 14 June 2026
s1ngularity: supply chain attack leaks secrets on GitHub: everything you need to know
- EU unveils tech sovereignty package to cut reliance on US, Chinese suppliers
- Critical vulnerabilities in NetScaler ADC exploited in-the-wild: everything you need to know
70stories filedOpen issue → - 23Vol. 2026Back Issue1 – 7 June 2026
[NEU] [UNGEPATCHT] [kritisch] Gogs: Schwachstelle ermöglicht Codeausführung
- [NEU] [hoch] vllm: Schwachstelle ermöglicht Codeausführung
- When AI Meets Wall Street: A Survey on Trustworthy AI in Fintech
31stories filedOpen issue → - 22Vol. 2026Back Issue25 – 31 May 2026
Investigating unauthorized access to GitHub-owned repositories
- The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave
- [NEU] [hoch] Splunk Splunk Enterprise: Mehrere Schwachstellen
33stories filedOpen issue → - 21Vol. 2026Back Issue18 – 24 May 2026
Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access
- Who Owns This Agent? Tracing AI Agents Back to Their Owners
- Compositional Jailbreaking: An Empirical Analysis of Mutator Chain Interactions in Aligned LLMs
63stories filedOpen issue → - 20Vol. 2026Back Issue11 – 17 May 2026
Europe is scaling back GDPR and relaxing AI laws
- Top 10 web hacking techniques of 2024
- Europe's GDPR privacy law is headed for red tape bonfire within 'weeks'
35stories filedOpen issue → - 19Vol. 2026Back Issue4 – 10 May 2026
Linux-Lücke „Copy Fail“ wird bereits angegriffen
- [NEU] [UNGEPATCHT] [hoch] Microsoft Windows RPC: Schwachstelle ermöglicht Privilegieneskalation
- [UPDATE] [kritisch] GNU libc: Mehrere Schwachstellen
20stories filedOpen issue → - 18Vol. 2026Back Issue27 April – 3 May 2026
Two new critical Spinnaker vulns allow RCE and production access
- What Anthropic’s Mythos Means for the Future of Cybersecurity
- ChaosDB: How we hacked thousands of Azure customers’ databases
62stories filedOpen issue → - 15Vol. 2026Back Issue6 – 12 April 2026
AI voice cloning used in $4.3M CEO fraud scheme targeting European banks
- CVE-2026-21345: Critical RCE in widely-used Java XML parser (CVSS 9.8)
- Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account
53stories filedOpen issue →