Intelligence / Cybersecurity
Cybersecurity Intelligence
Live cybersecurity intelligence from CISA, NIST, NVD, SEC EDGAR, BLS, and other authoritative sources. DecipherU is a cybersecurity career platform; every item here connects to career implications for security professionals.
CVE-2026-123998, Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an authentication by...
Read moreCVE-2026-123993, Hisense VIDAA Smart TV firmware V0000.01.00a.P0220 contains an unauthenticated a...
Read moreCVE-2026-89017, Skyline DataMiner BrokerGateway contains an embedded API key vulnerability that ...
Read moreCVE-2026-53980, Charmbracelet wish before 2.0.5 contains a path traversal vulnerability in the g...
Read moreCVE-2026-123786, Agenta before 0.122.5 contains a server-side request forgery vulnerability that ...
Read moreCVE-2026-123784, Fluxbox through 1.3.7 contains an OS command injection vulnerability in RootThem...
Read moreCVE-2026-123783, Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authe...
Read moreCVE-2026-123621, Usermin through 2.570 contains a path traversal vulnerability in mailbox/detacha...
Read moreCVE-2026-123620, Usermin through 2.570 contains an OS command injection vulnerability in the Read...
Read moreCVE-2026-123491, Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an SQL injection ...
Read moreCVE-2026-123490, Craft CMS from 5.8.17 before 5.11.2 contains a privilege escalation vulnerabilit...
Read moreCVE-2026-123489, Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains a blind SQL injec...
Read moreCVE-2026-123487, Parse Server before 8.6.115 and 9.0.0 before 9.10.7-alpha.1 validates user email...
Read moreCVE-2026-112340, Wazuh dashboard plugins from 4.9.0 before 4.14.9 contain an authorization bypass...
Read moreCVE-2026-92895, The Live2DWebCanvas plugin for WordPress is vulnerable to Arbitrary File Upload ...
Read moreCVE-2026-116624, The Advanced Members for ACF plugin for WordPress is vulnerable to Privilege Esc...
Read moreCVE-2026-104010, The WPSyncSheets For Contact Form 7 – CF7 Google Sheets Connector & Save to Data...
Read moreCVE-2026-103479, The Pubjet | پابجت plugin for WordPress is vulnerable to Privilege Escalation i...
Read moreCVE-2026-87964, The Product Feed Manager for WooCommerce – CTX Feed – Support 220+ Shopping, AI ...
Read moreCVE-2026-110776, The MDTF – Meta Data and Taxonomies Filter plugin for WordPress is vulnerable to...
Read moreCVE-2026-110291, The Graphina – Charts and Graphs For Elementor plugin for WordPress is vulnerabl...
Read moreCVE-2025-71458, FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 c...
Read moreThreat actors use agentic AI tooling to find and abuse exposed secrets
Read moreCVE-2026-123202, libnxml before 0.18.6 contains a stack-based buffer overflow vulnerability in sr...
Read moreCVE-2026-123200, VRPN through 07.36 contains an out-of-bounds stack write vulnerability in vrpn_E...
Read moreCVE-2026-123196, Authorizer before 2.4.2 contains a password reset poisoning vulnerability that a...
Read moreCVE-2026-97847, A flaw was found in the protocol mapper and identity resolution components of Ke...
Read moreCVE-2026-97175, A flaw was found in the idp-auto-link authenticator of the keycloak-services com...
Read moreCVE-2026-96453, A flaw was found in the Keycloak Admin CLI kcadm tool, which is used by administ...
Read moreCVE-2026-92857, Keycloak provides a Dynamic Client Registration feature that allows users with s...
Read moreCVE-2026-92855, A flaw was found in the SAML identity broker component of Keycloak, which is use...
Read moreCVE-2026-120859, PyMoDAQ before 4.4.13, and pymodaq_data, pymodaq_gui, and pymodaq_utils before 5...
Read moreCVE-2026-121995, A stack buffer overflow in the GDB client's tracepoint upload handler allows an ...
Read moreCVE-2026-112208, A flaw was found in the Organization identity-first login flow of the Keycloak a...
Read moreWhere the field is heading
AI is compressing entry-level SOC Tier-1 work (alert triage, routine log review) faster than it's creating junior roles to replace it: SANS' 2026 workforce survey found 52% of security professionals expect AI to reduce entry-level demand specifically. The roles growing instead sit on top of that compression: adversarial testing of the AI systems doing the compressing, and governing how they get deployed.
AI Red Teamer career guide →NIS2, DORA, and the EU AI Act have created what European recruiters describe as a sustained compliance-hiring wave, not a spike, because none of the three are optional and all three require role-specific, documented, auditable training. Each EU member state transposes NIS2 into its own national law on its own timeline, so tracking which version applies where is now a real part of the job.
NIS2 transposition tracker →"AI security" is splitting into distinct disciplines rather than staying a sub-skill inside general security work: adversarial testing, model governance, and third-party AI risk are becoming separate hiring lines with their own job titles.
NIS2 & DORA Compliance Manager career guide →