feed: livevuln intel, fast.

$ briefings

Briefings

Periodic SITREPs that compress the week's vulnerability and exploit news into a single readable digest, sourced throughout.

28

editions

172

items covered

19

critical flags

~/briefings/2026-09-03 --latest

Latest edition·September 3, 2026

Sep 3: Elasticsearch ML RCE, Seven KEV Additions, FalconFlank PoC

Elasticsearch patches CVSS 8.8 RCE in its machine learning module. CISA adds seven exploited flaws to KEV. CrowdStrike Falcon privilege escalation PoC published.

Elasticsearch patches CVE-2026-72649 (CVSS 8.8): deserialization flaw in the machine learning module enables RCE via crafted model artifact. Affected versions in the 8.x and 9.x branches.
CISA adds seven exploited flaws to KEV. Confirmed entry: CVE-2026-9586 (Sangoma Switchvox unauthenticated SQL injection, CVSS 9.8). Attackers deploying reverse shells and crypto miners across affected products.
CrowdStrike Falcon: researcher Chaotic Eclipse releases FalconFlank PoC for a privilege escalation zero-day. No CVE assigned publicly as of this briefing.
Forescout Vedere Labs used Claude to port a working pre-auth RCE exploit across WAGO PLC models. Cross-vendor ICS exploit reuse demonstrated with AI assistance.

Read full briefing →

$ archive

September 2026

Sep 2Sep 2: SonicWall Zero-Days, Langflow Theft, Sality Down

5 items Sep 1Sep 1: PaperCut KEV, McKesson Deadline, MAG Claim

August 2026

Aug 31Aug 31: Elixir CVE Wave, ToolJet 9.9, Ransomware Claims Spike

5 items Aug 31Week in Review: Aug 24-30, 2026

6 items Aug 24Aug 24: StackGres 9.9, GitLab RCE, Zimbra KEV

6 items Aug 23Aug 17–23: Entra ID CVSS 10 KEV, Citrix, RedC2

7 items Aug 17Aug 17: Clop/GE/Philips, Azure claim, ShieldBreak unpatched

5 items Aug 10Aug 3–10: Four KEV Additions, Metabase CVSS 10

July 2026

Jul 30July 29: VMware trio, Cisco FMC KEV, Minnesota water attack

7 items Jul 29July 28 evening: Check Point MDS scope, vBulletin

3 items Jul 29July 28: TeamCity RCE, OpenWrt critical, AI sandbox escape

6 items Jul 28July 27 evening: Certighost PoC, KEV adds, Fairlife

5 items Jul 27July 27 desk: TELESHIM Telegram C2, supply chain cooldown

4 items Jul 26July 25 desk: Fastjson CVE-2026-16723, GitLab RCE PoC

7 items Jul 25Week in Review: AI Ops, Certighost, M365 Failure

9 items Jul 25July 23-24 desk: AI agents weaponized, Clop active

12 items Jul 23July 21-22 desk: Three KEVs, SharePoint stripped

11 items Jul 19Week in Review: KEV, Certificates, and the Old Debt

5 items Jul 19Weekend desk: wp2shell in the open, 27 DigiCert EV certs

8 items Jul 17Desk briefing: KEV +3 in 24 hours, Fairlife goes dark

8 items Jul 15Desk briefing: KEV grew by four, SonicWall deadline is Friday

7 items Jul 14Desk briefing: Gatekeeper cleared it, and that is the story

5 items Jul 13Desk briefing: the fire drill this week is on the routers

5 items Jul 11Week in Review: AI Attacks Stopped Being Theoretical

5 items Jul 6Desk Briefing: the install-time gate is not the gate you think it is

5 items Jul 4Week in Review: DPRK Broke Supply Chains, an LLM Ran Ransomware

June 2026

Jun 29Week in Review: Five Zero-Days, One Pattern — Edge Devices Are the Front Line

Archive begins June 29, 2026.