{"title":"Flash signals","description":"Stories scoring 75 or more: act now.","home":"https://vulnpocalypse.dev/feeds/","items":[{"id":"https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/","title":"[FLASH 98] PHP2Shell Exploitation on Check Point Gateway","url":"https://research.checkpoint.com/2026/php2shell-exploitation-on-check-point-gateway/","date":"2026-11-12T13:56:37","summary":"Check Point Research, 54 source(s). On CISA KEV EPSS 1.00 Exploit public CVSS 9.2","tags":["flash","vulnerability","CVE-2026-109618","CVE-2026-109619","CVE-2026-115560","CVE-2026-73695"]},{"id":"https://ccb.belgium.be/advisories/warning-six-new-danfoss-vulnerabilities-refrigeration-controllers-risk-immediate-action","title":"[FLASH 98] Warning: Six New Danfoss Vulnerabilities - Refrigeration Controllers at Risk - Immediate Action Required!","url":"https://ccb.belgium.be/advisories/warning-six-new-danfoss-vulnerabilities-refrigeration-controllers-risk-immediate-action","date":"2026-11-12T07:43:48","summary":"CERT-BE, 63 source(s). ","tags":["flash","incident"]},{"id":"https://thehackernews.com/2026/11/4837-hijacked-github-accounts-ran-ci.html?m=1","title":"[FLASH 90] Nearly 4,837 GitHub accounts hijacked in major supply-chain attack","url":"https://thehackernews.com/2026/11/4837-hijacked-github-accounts-ran-ci.html?m=1","date":"2026-11-12T15:48:41","summary":"thehackernews.com, 14 source(s). ","tags":["flash","incident"]},{"id":"https://www.bankinfosecurity.com/cisa-orders-patch-for-cisco-flaw-tied-to-ai-agent-attack-a-33364","title":"[FLASH 86] CISA Orders Patch for Cisco Flaw Tied to AI Agent Attack","url":"https://www.bankinfosecurity.com/cisa-orders-patch-for-cisco-flaw-tied-to-ai-agent-attack-a-33364","date":"2026-11-12T15:32:07","summary":"Bank Info Security, 6 source(s). ","tags":["flash","vulnerability"]},{"id":"https://www.thehindu.com/sci-tech/technology/binance-hack-reveals-cryptos-uphill-battle-against-hackers/article71692230.ece","title":"[FLASH 83] Binance hack reveals crypto's uphill battle against hackers","url":"https://www.thehindu.com/sci-tech/technology/binance-hack-reveals-cryptos-uphill-battle-against-hackers/article71692230.ece","date":"2026-11-12T04:43:57","summary":"The Hindu, 43 source(s). ","tags":["flash","incident"]},{"id":"https://cybersecuritynews.com/active-exploitation-of-outlook-0-day-vulnerability/","title":"[FLASH 82] CISA Confirms Active Exploitation of Outlook User Interaction 0-Day Vulnerability","url":"https://cybersecuritynews.com/active-exploitation-of-outlook-0-day-vulnerability/","date":"2026-11-12T14:11:54","summary":"Cyber Security News, 8 source(s). ","tags":["flash","vulnerability"]},{"id":"https://www.techradar.com/pro/security/antifox-ai-agents-hijacked-by-hackers-to-carry-out-theft-of-aws-credentials","title":"[FLASH 81] AntiFox AI agents hijacked by hackers to carry out theft of AWS credentials","url":"https://www.techradar.com/pro/security/antifox-ai-agents-hijacked-by-hackers-to-carry-out-theft-of-aws-credentials","date":"2026-11-12T15:35:00","summary":"TechRadar security, 7 source(s). ","tags":["flash","incident"]},{"id":"https://cybernews.com/security/russian-hackers-microsoft-exchange-nato-emails/","title":"[FLASH 81] Russian hackers compromised Microsoft Exchange to steal NATO, EU emails","url":"https://cybernews.com/security/russian-hackers-microsoft-exchange-nato-emails/","date":"2026-11-11T15:48:37","summary":"cybernews.com, 6 source(s). ","tags":["flash","incident"]},{"id":"https://security.paloaltonetworks.com/CVE-2026-111497","title":"[FLASH 81] CVE-2026-111497 Portfolio Status: Impact of Brotli Vulnerability (CVE-2026-111497) on Palo Alto Networks Products (Severity: CRITICAL)","url":"https://security.paloaltonetworks.com/CVE-2026-111497","date":"2026-11-09T21:00:00","summary":"Palo Alto PSIRT, 3 source(s). On CISA KEV EPSS 0.83 Exploit public CVSS 9.2","tags":["flash","vulnerability","CVE-2026-111497"]},{"id":"https://www.securityweek.com/attacker-targets-60000-github-repositories-in-credential-theft-campaign/","title":"[FLASH 80] Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign","url":"https://www.securityweek.com/attacker-targets-60000-github-repositories-in-credential-theft-campaign/","date":"2026-11-12T13:39:03","summary":"SecurityWeek, 7 source(s). ","tags":["flash","incident"]},{"id":"https://www.bitdefender.com/en-us/blog/hotforsecurity/whitearmor-gang-cyberattack-maersk","title":"[FLASH 79] WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk","url":"https://www.bitdefender.com/en-us/blog/hotforsecurity/whitearmor-gang-cyberattack-maersk","date":"2026-11-12T15:12:29","summary":"Graham Cluley, 6 source(s). ","tags":["flash","incident"]},{"id":"https://www.bleepingcomputer.com/news/security/baker-tilly-notifies-clients-of-data-breach-at-third-party-provider/","title":"[FLASH 79] Baker Tilly notifies clients of data breach at third-party provider","url":"https://www.bleepingcomputer.com/news/security/baker-tilly-notifies-clients-of-data-breach-at-third-party-provider/","date":"2026-11-11T23:01:31","summary":"BleepingComputer, 6 source(s). ","tags":["flash","incident"]},{"id":"https://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/","title":"[FLASH 79] Hackers Exploit Decade-Old OpenSSH Flaw to Bypass Linux Logins","url":"https://hackread.com/hackers-exploit-old-openssh-bypass-linux-logins/","date":"2026-11-11T07:28:12","summary":"Hackread, 20 source(s). On CISA KEV EPSS 0.19 Exploit public CVSS 8.1","tags":["flash","vulnerability","CVE-2026-123158"]},{"id":"https://socradar.io/blog/artex-ai-pentest-consoles-us/","title":"[FLASH 78] ARTEX: 916 Exposed AI Pentest Consoles Mapped in the U.S.","url":"https://socradar.io/blog/artex-ai-pentest-consoles-us/","date":"2026-11-12T14:55:03","summary":"SOCRadar, 5 source(s). ","tags":["flash","incident"]},{"id":"https://www.malwarebytes.com/blog/news/2026/11/vanderbilt-restores-systems-after-cyberattack-as-hackers-claim-data-theft","title":"[FLASH 78] Vanderbilt restores systems after cyberattack as hackers claim data theft","url":"https://www.malwarebytes.com/blog/news/2026/11/vanderbilt-restores-systems-after-cyberattack-as-hackers-claim-data-theft","date":"2026-11-11T18:29:01","summary":"Malwarebytes, 9 source(s). ","tags":["flash","incident"]},{"id":"https://www.csoonline.com/article/4247578/hackers-stole-ai-credentials-to-get-740000-in-free-compute-railway-picked-up-the-bill.html","title":"[FLASH 76] Hackers stole AI credentials to get $740,000 in free compute; Railway picked up the bill","url":"https://www.csoonline.com/article/4247578/hackers-stole-ai-credentials-to-get-740000-in-free-compute-railway-picked-up-the-bill.html","date":"2026-11-12T02:53:41","summary":"CSO Online, 6 source(s). ","tags":["flash","incident"]},{"id":"https://gbhackers.com/exploit-wordpress-core-over-240000-attack/","title":"[FLASH 76] Hackers Exploit WordPress Core RCE Vulnerability in Over 240,000 Attack Attempts","url":"https://gbhackers.com/exploit-wordpress-core-over-240000-attack/","date":"2026-11-07T08:06:17","summary":"GBHackers, 13 source(s). ","tags":["flash","vulnerability"]}]}