German vulnerability intelligence in real time.

Vulnerability explorer

970,271 advisories curated for SMB and KRITIS operators under NIS2. Actively exploited vulnerabilities (CISA KEV) and critical CVEs are surfaced first.

Refreshed every 30 seconds — counters tick live without a reload.

• Newssecurityweek

  Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model

  The company claims MAI-Cyber-1-Flash tops Anthropic’s Mythos and OpenAI’s GPT-5.6 Sol in CyberGym testing. The post Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model appeared first on SecurityWeek .

  2026-07-28 11:11 UTC
• Newssecurityweek

  Act Security Emerges from Stealth to Fight the Patch Problem

  Act Security tackles the spiraling patch problem caused by AI’s ability to find new vulnerabilities in existing cloud environments. The post Act Security Emerges from Stealth to Fight the Patch Problem appeared first on SecurityWeek .

  2026-07-28 11:00 UTC
• Newssecurityweek

  Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker

  Tal Kollander’s history divides neatly into two halves: first as an active hacker and then as the block that stops hacks. The post Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker appeared first on SecurityWeek .

  2026-07-28 11:00 UTC
• Newssecurityweek

  Hush Security Raises $30 Million for AI Agent Governance

  The startup will invest in expanding engineering and sales teams, accelerating ecosystem support, and expanding corporate partnerships. The post Hush Security Raises $30 Million for AI Agent Governance appeared first on SecurityWeek .

  2026-07-28 10:17 UTC
• Newstheregister-security

  Arista patches actively exploited VeloCloud bug as CISA puts admins on the clock

  Unauthenticated command injection scores perfect 10 and may expose managed Edge devices

  2026-07-28 09:15 UTC
• Newsbleepingcomputer

  Data breach at medical billing firm MCBS affects 1.26 million people

  Healthcare billing company Medical Computer Business Services (MCBS) has disclosed that a 2025 network breach exposed the sensitive information of more than 1.2 million people. [...]

  2026-07-28 09:10 UTC

• 2026-07-01

  Cybersecurity Is Survival

  Howard Solomon's CSO Online piece says out loud what many in the industry think but rarely state plainly: any organization that still treats prevention as the centre of its security strategy is buying theatre. What that means for German entities under NIS2 — and why resilience on paper is worth nothing.

  nis2resilienz
• 2026-07-01

  Iran Imports China's Playbook — The Barati Arrest and the Mabna Institute

  An Iranian national arrested in Montenegro, a 2018 US indictment thread reaching back to Tehran, 31 terabytes of stolen research data over eight years. Kim Zetter traces how Iran — around 2013, the same year Mandiant exposed China as APT-1 — appears to have imported an economic-espionage playbook from Beijing. What that means for German universities and research institutions.

  iranapt
• 2026-07-01

  Google Ads as Malware Delivery: The MacSync Stealer Case

  A Google Ad impersonating Anthropic's Claude Code sends macOS users to a Google Sites page, delivers a Base64-obfuscated terminal command, and steals — in one motion — browser passwords, cloud tokens, and, if present, the seed phrase of a Ledger hardware wallet. Lucas Martin's CyberPress report walks through the six stages. What that means for German developers and their employers.

  malvertisingmacos

• CVE-2026-10520

  [KEV] [critical] Ivanti Sentry — Ivanti Sentry OS Command Injection Vulnerability

  An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution

  Actively exploitedCritical2026-06-09 16:16 UTC

• CVE-2026-48907

  [KEV] [critical] Widget Factory Joomla Content Editor: Schwachstelle ermöglicht Codeausführung

  A vulnerability in the JCE editor extension for Joomla allows the creation of new editor profiles for unauthenticated users, ultimately resulting in PHP code upload and execution.

  Actively exploitedCritical2026-06-18 10:19 UTC

• CVE-2026-34908

  [KEV] [critical] Ubiquiti UniFi OS Server: Mehrere Schwachstellen

  A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS devices to make unauthorized changes to the system.

  Actively exploitedCritical2026-06-24 08:31 UTC

• CVE-2026-32202

  [KEV] [medium] Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff

  Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

  Actively exploited2026-07-17 07:32 UTC

• CVE-2021-22555

  [KEV] [high] Oracle JD Edwards: Mehrere Schwachstellen

  A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space

  Actively exploited2026-07-22 09:52 UTC

• CVE-2023-22518

  [KEV] [high] Atlassian Produkte (Bamboo, Bitbucket, Confluence, Crucible, Fisheye und Jira): Mehrere Schwachstellen

  All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. This Improper Authorization vulnerability allows an unauthenticated attacker to reset Confluence and create a Confluence instance administrator account. Using this account, an attacker can then perform all administrative actions that are available to Confluence instance administrator leading to - but not limited to - full loss of confidentiality, integrity and availability.  Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.

  Actively exploited2026-07-20 10:42 UTC