feed: livevuln intel, fast.

$ briefings

Briefings

Periodic SITREPs that compress the week's vulnerability and exploit news into a single readable digest, sourced throughout.

40

editions

230

items covered

37

critical flags

~/briefings/2026-09-29 --latest

Latest edition·September 29, 2026

Sep 29: Citrix KEV Deadline, PeopleSoft Live Campaign

CISA's Citrix patch deadline is September 30. ShinyHunters is running a live Oracle PeopleSoft exploit campaign. Plus: JADEPUFFER on Azure, and a $387M crypto heist closed out.

CISA added CVE-2026-88771 and CVE-2026-88772 to the KEV catalog with a federal patch deadline of September 30. Both allow unauthenticated RCE against NetScaler ADC and Gateway.
ShinyHunters retooled its CVE-2026-35273 exploit and launched a broader campaign against Oracle PeopleSoft, per a Google Threat Intelligence advisory published September 28.
JADEPUFFER-linked operators are using compromised Azure service principals with excessive permissions to delete cloud resources across targeted tenants.
Obot AI platform patched three CVEs including an unauthenticated Docker socket exposure. Bitget resumed withdrawals after a $387.5M DPRK-linked theft.

Read full briefing →

$ archive

September 2026

Sep 22Sep 22: Cl0p Extorted, CrowdSec Source Code, BigCommerce

4 items Sep 21Sep 21: REDCap 9.8 RCE, Keycloak IAM, Jade Sleet Backdoors

5 items Sep 21Week in Review: Sep 14-20, 2026

6 items Sep 18Sep 18: Two CVSS 10 Zero-Days Active, Pixel Deadline Tomorrow

5 items Sep 17Sep 17: Cisco SEG Deadline Today, GitLab Still Exploited

5 items Sep 16Sep 16: Cisco SEG in KEV, Apple 200 Patches, Japan VPN Breach

5 items Sep 15Week in Review: Sep 7-13, 2026

6 items Sep 15Sep 15: ScreenConnect Worm, Revolut Breach, GrayRabbit

4 items Sep 11Sep 11: Cisco FMC, Fortinet Hit KEV; Sept. 12 Deadline

5 items Sep 7Week in Review: Sep 1-6, 2026

5 items Sep 7Sep 7: N-central Exploited, MikroTik Hijacked

4 items Sep 3Sep 3: Elasticsearch ML RCE, Seven KEV Additions, FalconFlank PoC

4 items Sep 2Sep 2: SonicWall Zero-Days, Langflow Theft, Sality Down

5 items Sep 1Sep 1: PaperCut KEV, McKesson Deadline, MAG Claim

August 2026

Aug 31Aug 31: Elixir CVE Wave, ToolJet 9.9, Ransomware Claims Spike

5 items Aug 31Week in Review: Aug 24-30, 2026

6 items Aug 24Aug 24: StackGres 9.9, GitLab RCE, Zimbra KEV

6 items Aug 23Aug 17–23: Entra ID CVSS 10 KEV, Citrix, RedC2

7 items Aug 17Aug 17: Clop/GE/Philips, Azure claim, ShieldBreak unpatched

5 items Aug 10Aug 3–10: Four KEV Additions, Metabase CVSS 10

July 2026

Jul 30July 29: VMware trio, Cisco FMC KEV, Minnesota water attack

7 items Jul 29July 28 evening: Check Point MDS scope, vBulletin

3 items Jul 29July 28: TeamCity RCE, OpenWrt critical, AI sandbox escape

6 items Jul 28July 27 evening: Certighost PoC, KEV adds, Fairlife

5 items Jul 27July 27 desk: TELESHIM Telegram C2, supply chain cooldown

4 items Jul 26July 25 desk: Fastjson CVE-2026-16723, GitLab RCE PoC

7 items Jul 25Week in Review: AI Ops, Certighost, M365 Failure

9 items Jul 25July 23-24 desk: AI agents weaponized, Clop active

12 items Jul 23July 21-22 desk: Three KEVs, SharePoint stripped

11 items Jul 19Week in Review: KEV, Certificates, and the Old Debt

5 items Jul 19Weekend desk: wp2shell in the open, 27 DigiCert EV certs

8 items Jul 17Desk briefing: KEV +3 in 24 hours, Fairlife goes dark

8 items Jul 15Desk briefing: KEV grew by four, SonicWall deadline is Friday

7 items Jul 14Desk briefing: Gatekeeper cleared it, and that is the story

5 items Jul 13Desk briefing: the fire drill this week is on the routers

5 items Jul 11Week in Review: AI Attacks Stopped Being Theoretical

5 items Jul 6Desk Briefing: the install-time gate is not the gate you think it is

5 items Jul 4Week in Review: DPRK Broke Supply Chains, an LLM Ran Ransomware

June 2026

Jun 29Week in Review: Five Zero-Days, One Pattern — Edge Devices Are the Front Line

Archive begins June 29, 2026.