Distributed security
for modern teams.

Apache ActiveMQ on your message queue infrastructure allows unauthenticated remote code execution.

The ClassInfo OpenWire protocol allows remote attackers to execute arbitrary shell commands by sending a specially crafted packet. HelloKitty ransomware and multiple nation-state actors are actively targeting unpatched instances.

Any server running Erlang SSH — including your RabbitMQ nodes — is remotely exploitable with no credentials.

A flaw in the Erlang/OTP SSH daemon lets an unauthenticated attacker execute arbitrary OS commands before authentication completes. Every product that embeds Erlang SSH is affected: RabbitMQ, CouchDB, and network gear from Cisco and Ericsson.

Apache Tomcat on your servers allows unauthenticated remote code execution through a malformed file upload.

A flaw in Tomcat's partial PUT implementation lets an attacker upload a serialized session file. On configurations with session persistence enabled — the default in many setups — a follow-up request triggers arbitrary code execution as the Tomcat service user.

A hardcoded JWT in Cisco IOS XE gives any attacker root-level access to your wireless controllers.

Cisco IOS XE's Out-of-Band AP Image Download feature ships with a hardcoded JSON Web Token. An unauthenticated attacker on any reachable network can use this token to upload arbitrary files and execute commands at the OS level — no credentials, no exploit chain required.

An unauthenticated attacker can execute code inside your Kubernetes cluster via the ingress controller.

The ingress-nginx admission controller is network-reachable without authentication in most default cluster configurations. A crafted request triggers code execution inside the controller pod, which holds cluster-admin-equivalent access — exposing every secret, credential, and API token in the cluster.

A Windows kernel flaw is being actively used by ransomware actors to escalate any user to SYSTEM.

Storm-2460, the threat group behind RansomEXX ransomware, is exploiting a use-after-free in the Windows Common Log File System driver to escalate from a standard user to SYSTEM. Any existing foothold — phishing, weak credential, exposed RDP — becomes an immediate full system compromise.

OpenSSH on your servers has an unauthenticated remote code execution flaw.

A race condition in sshd's SIGALRM handler lets an attacker gain root access through any exposed SSH port — no credentials required. Exploitation confirmed in the wild across millions of glibc-based Linux systems.

Your TeamCity CI/CD server is fully compromised without authentication.

A path traversal flaw in the REST API lets any unauthenticated user bypass access controls and create admin accounts. Ransomware groups began mass-exploiting this within 48 hours of disclosure.

A backdoor was planted in xz-utils on your Linux systems — remote access is possible.

A malicious maintainer embedded a backdoor into xz-utils 5.6.0–5.6.1 that intercepts SSH authentication via systemd. Any system using the affected version is potentially backdoored, regardless of whether SSH is exposed.

Your Fortinet firewall's SSL VPN is being actively exploited — unauthenticated RCE confirmed.

An out-of-bounds write in the FortiOS SSL VPN web interface lets an unauthenticated attacker execute arbitrary code. Exploitation was observed before the patch was available and is ongoing across thousands of perimeter devices.

Apache ActiveMQ on your message queue infrastructure allows unauthenticated remote code execution.

The ClassInfo OpenWire protocol allows remote attackers to execute arbitrary shell commands by sending a specially crafted packet. HelloKitty ransomware and multiple nation-state actors are actively targeting unpatched instances.

Any server running Erlang SSH — including your RabbitMQ nodes — is remotely exploitable with no credentials.

A flaw in the Erlang/OTP SSH daemon lets an unauthenticated attacker execute arbitrary OS commands before authentication completes. Every product that embeds Erlang SSH is affected: RabbitMQ, CouchDB, and network gear from Cisco and Ericsson.