@moton profile picture
moton @moton
Joined October 2007
  • Tweets 25,811
  • Following 603
  • Followers 660
181 Photos and videos
CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA - cisa.gov/news-events/alerts/…

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

cisa.gov
13
Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks - bleepingcomputer.com/news/se…

Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks

Cisco has released security updates to address a vulnerability in the Catalyst SD-WAN Manager, tracked as CVE-2026-20262, that was exploited in attacks to escalate to root privileges.

bleepingcomputer.com
12
Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites - thehackernews.com/2026/06/po…

Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites

Tampered JavaScript in three Awesome Motive plugins exposed WordPress sites to rogue admin accounts and hidden backdoors.

thehackernews.com
1
15
Jenkins RCE Vulnerability CVE-2026-53435 Now Exploited - securityonline.info/jenkins-…

Daily CyberSecurity

Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.

securityonline.info
47
SecSuite - AI-powered Tool for OSINT, Web and API Security Testing - cybersecuritynews.com/secsui…

SecSuite - AI-powered Tool for OSINT, Web and API Security Testing

A new open-source security platform called SecSuite, developed under the TheSecuredAnalyst project, has been released, combining OSINT reconnaissance, web vulnerability scanning, API security...

cybersecuritynews.com
12
Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw - thehackernews.com/2026/06/pa…

Palo Alto Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw

Palo Alto says CVE-2026-0257 is being exploited to bypass PAN-OS GlobalProtect authentication and create unauthorized VPN sessions.

thehackernews.com
14
FBI disrupts massive AI-powered phishing service using a million URLs - bleepingcomputer.com/news/se…

FBI disrupts massive AI-powered phishing service using a million URLs

In a coordinated effort, the FBI, working with Google and Black Lotus Labs, has dismantled a massive Chinese phishing-as-a-service operation called Outsider Enterprise with thousands of phishing...

bleepingcomputer.com
9
Now Available: Practical Guidelines for Preventing and Mitigating Ransomware | NIST - nist.gov/news-events/news/20…

Now Available: Practical Guidelines for Preventing and Mitigating Ransomware

The NIST NCCoE has published the final version of

nist.gov
23
moton@moton
Jun 13
CVE-2026-35273: Oracle PeopleSoft Unauth RCE | Horizon3 - horizon3.ai/attack-research/…

CVE-2026-35273: Oracle PeopleSoft Unauth RCE

CVE-2026-35273 is a critical Oracle PeopleSoft vulnerability that enables unauthenticated remote code execution and is actively exploited in the wild.

horizon3.ai
74
moton@moton
Jun 13
CISA Adds One Known Exploited Vulnerability to Catalog - cisa.gov/news-events/alerts/…

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

cisa.gov
27
moton@moton
Jun 13
ShinyHunters linked to exploitation of critical flaw in Oracle PeopleSoft | Cybersecurity Dive - cybersecuritydive.com/news/s…

ShinyHunters linked to exploitation of critical flaw in Oracle PeopleSoft

More than 100 organizations, about two-thirds in higher education, have been notified of potential impact.

cybersecuritydive.com
42
moton@moton
Jun 13
Researchers release details, PoC for exploited Check Point VPN flaw (CVE-2026-50751) - Help Net Security - helpnetsecurity.com/2026/06/…

Researchers release details, PoC for exploited Check Point VPN flaw (CVE-2026-50751) - Help Net...

WatchTowr researchers have disclosed a technical analysis and PoC exploit for an actively exploited Check Point VPN flaw (CVE-2026-50751).

helpnetsecurity.com
72
moton@moton
Jun 12
DHS cyber modernization efforts bolster federal resilience despite mounting cost, staffing, acquisition hurdles - Industrial Cyber - industrialcyber.co/cisa/dhs-…

DHS cyber modernization efforts bolster federal resilience despite mounting cost, staffing,...

GAO reports DHS cyber modernization efforts bolster federal resilience despite mounting cost, staffing, and acquisition hurdles.

industrialcyber.co
12
moton@moton
Jun 12
Oracle PeopleSoft 0-Day RCE Vulnerability Exploited in Attacks by ShinyHunters - cybersecuritynews.com/oracle…

Oracle PeopleSoft 0-Day RCE Vulnerability Exploited in Attacks by ShinyHunters

Mandiant and Google Threat Intelligence Group (GTIG) have issued a critical warning after identifying an active compromise-and-extortion campaign targeting Oracle PeopleSoft infrastructure, attribu...

cybersecuritynews.com
38
moton@moton
Jun 12
What is CISA BOD 26-04: Impact on vulnerability remediation| Tenable® - tenable.com/blog/cisa-bod-26…

What you need to know about CISA BOD 26-04

CISA’s BOD 26-04 now requires federal agencies to patch the most dangerous vulnerabilities in as few as three days. Read our FAQ to understand the new four-variable prioritization model.

tenable.com
29
moton@moton
Jun 11
CISA Adds One Known Exploited Vulnerability to Catalog | CISA - cisa.gov/news-events/alerts/…

CISA Adds One Known Exploited Vulnerability to Catalog | CISA

cisa.gov
19
moton@moton
Jun 11
CISA orders federal agencies to "patch smarter" - Help Net Security - helpnetsecurity.com/2026/06/…

CISA orders federal agencies to "patch smarter" - Help Net Security

CISA has issued a Binding Operational Directive that will push US federal government agencies towards risk-based vulnerability management.

helpnetsecurity.com
15
moton@moton
Jun 11
CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk - SecurityWeek - securityweek.com/cisa-direct…

CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk

The new BOD 26-04 requires agencies to review and update vulnerability management policies with a focus on KEV catalog entries.

securityweek.com
1
32
moton@moton
Jun 11
Ivanti Command Injection Vulnerability Exploited in Attacks following PoC Release - cybersecuritynews.com/ivanti…

Ivanti Command Injection Vulnerability Exploited in Attacks Following PoC Release

Attackers are actively exploiting a critical Ivanti Sentry command injection flaw days after a public PoC exploit was released.

cybersecuritynews.com
28
moton@moton
Jun 11
CISA BOD 26-04 directs agencies to prioritize exploited vulnerabilities and assess compromise before patching - Industrial Cyber - industrialcyber.co/cisa/cisa…

CISA BOD 26-04 directs agencies to prioritize exploited vulnerabilities and assess compromise...

New CISA BOD 26-04 calls upon agencies to prioritize exploited vulnerabilities and assess compromise before patching.

industrialcyber.co
1
1
36
Load more