Source intelligence
425 collected source records. Original advisories and security research.
298 matching sources · Newest published first
Open CVE tracker →Original publisher records, awaiting Egret editorial review. Headlines open the original source; CVE identifiers open the tracker.
Scroll across the table to see all columns.
| Published | Finding / research | Publisher | Identifiers |
|---|---|---|---|
| Heartbreaker 💔 A newly discovered macOS ransomware sample attempts to rewrite, recompile, and replace itself with a metamorphic variant. In this blog post, we analyze Heartbreaker's encryption, persistence, and unusual self-rebuilding … |
Objective-See | None reported |
|
| Hackers Use Codex and DeepSeek AI Agents to Breach 440 PaperCut Servers Worldwide A cybercrime campaign used hundreds of AI agents to target internet-facing PaperCut NG and MF print-management servers, compromising at least 440 instances linked to 395 organizations in 48 countries, according to GreyNo… |
Cyber Security News | ||
| Fortinet Multiple Products Path Traversal Vulnerability CVE-2025-61624 — Fortinet / Multiple Products. FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-wr… |
CISA KEV | ||
| BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability CVE-2026-102764 — BeyondTrust / Remote Support. BeyondTrust Remote Support contains an authentication bypass by spoofing vulnerability that could allow a remote attacker to perform file operations on the appliance. CISA … |
CISA KEV | ||
| ARMORY CASTLE Exploits BeyondTrust Written by: Jayson Frost, Bryce Greathouse, Brian Meyer, John Palmisano, Rajesh Rajeshirke, Steve Rasch, John Wolfram Introduction On October 15, BeyondTrust disclosed a vulnerability, CVE-2026-102764, impacting BeyondTr… |
Google Threat Intelligence | ||
| One HTTP request within the default size limit could exhaust server memory during validation GHSA: GHSA-46jr-4wx8-v453 CVE: CVE-2026-111768 Reported severity: high Advisory package entry 1: Affected package: @modelcontextprotocol/sdk (npm) Affected versions: >= 1.3.0, < 1.32.0 Patched version: 1.32.0 Advisory pa… |
MCP TypeScript SDK advisories | CVE-2026-111768GHSA-46JR-4WX8-V453 |
|
| Shared transport or server instances delivered one HTTP client's messages to another GHSA: GHSA-jm63-cq47-j5jp CVE: CVE-2026-111770 Reported severity: high Advisory package entry 1: Affected package: @modelcontextprotocol/server (npm) Affected versions: >= 2.0.0, < 2.3.0 Patched version: 2.3.0 Advisory d… |
MCP TypeScript SDK advisories | CVE-2026-111770GHSA-JM63-CQ47-J5JP |
|
| HTTP server transports and handlers did not limit request body size or JSON-RPC batch length GHSA: GHSA-f897-62hf-6gxq Reported severity: high Advisory package entry 1: Affected package: @modelcontextprotocol/sdk (npm) Affected versions: >= 1.10.0, < 1.30.1 Patched version: 1.30.1 Advisory package entry 2: Affec… |
MCP TypeScript SDK advisories | GHSA-F897-62HF-6GXQ |
|
| Investigating Ephemeral Supply Chain Tampering Written by: Tyler McLellan Introduction Google Threat Intelligence Group (GTIG) and Mandiant investigated a software supply chain compromise campaign targeting the update infrastructure belonging to AOMEI Technology betw… |
Google Threat Intelligence | None reported |
|
| Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability CVE-2026-21589 — Atlassian / Multiple Products. Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data C… |
CISA KEV |