May 26, 2026 - Swedish eTrade platform signs an agreement for vulnerability scanning. May 21, 2026 - Swedish software producer signs agreement for continuous pentesting. May 20, 2026 - Swedish CRM producer signs an agreement for continuous penetration testing. May 16, 2026 - eBuilder signs an agreement for SOC/MDR with a TechHub. May 11, 2026 - eBuilder signs an agreement for SOC/MDR and automated pentests with a company in the publishing business. May 8, 2026 - eBuilder signs a pentest agreement with a leading petrochemical producer. April 8, 2026 - eBuilder signs an agreement for MDR/SOC with a hotel business. March 13, 2026 - eBuilder signs an agreement for SOC-operations with a Swedish municipality. May 26, 2026 - Swedish eTrade platform signs an agreement for vulnerability scanning. May 21, 2026 - Swedish software producer signs agreement for continuous pentesting. May 20, 2026 - Swedish CRM producer signs an agreement for continuous penetration testing. May 16, 2026 - eBuilder signs an agreement for SOC/MDR with a TechHub. May 11, 2026 - eBuilder signs an agreement for SOC/MDR and automated pentests with a company in the publishing business. May 8, 2026 - eBuilder signs a pentest agreement with a leading petrochemical producer. April 8, 2026 - eBuilder signs an agreement for MDR/SOC with a hotel business. March 13, 2026 - eBuilder signs an agreement for SOC-operations with a Swedish municipality.

News & Threat Intelligence

Vulnerabilities

The latest Vulnerabilities coverage, tracked and summarised by the analysts who run our SOC.

Updated daily · last update July 7, 2026

Citrix NetScaler Memory Flaw Under Active Exploitation by Four Threat Groups

Vulnerabilities

Citrix NetScaler Memory Flaw Under Active Exploitation by Four Threat Groups

A high-severity memory overread vulnerability in Citrix NetScaler is being actively exploited across multiple threat campaigns. Citrix disclosed CVE-2026-8451, a CVSS 8.8

July 7, 2026 Read more · 5 min

Microsoft June 2026 Patch Tuesday Sets Record with 200 Vulnerabilities and Three Zero-Days

Vulnerabilities

Microsoft June 2026 Patch Tuesday Sets Record with 200 Vulnerabilities and Three Zero-Days

Three zero-days. Over 200 vulnerabilities. Microsoft's June 2026 Patch Tuesday is the largest single monthly update the company has ever released, and

June 15, 2026 Read more · 5 min

Vulnerabilities

Veeam Patches Critical RCE Flaw That Hands Backup Servers to Domain Users

Veeam has patched a critical remote code execution vulnerability in Backup & Replication 12.x that allows a low-privilege domain user to take over backup servers…

June 10, 2026 Read more · 4 min

Vulnerabilities

Two 7-Zip Flaws Are Being Exploited. Both Were Patched Months Ago

Two vulnerabilities in 7-Zip are being exploited in the wild, and both were fixed before the attacks started. CVE-2025-0411 was patched in November 2024. CVE-2025-11001…

May 26, 2026 Read more · 4 min

Verizon DBIR Vulnerability Exploitation Overtakes Credentials as Top Breach Vector

Vulnerabilities

Verizon DBIR: Vulnerability Exploitation Overtakes Credentials as Top Breach Vector

Vulnerability exploitation has surpassed stolen credentials as the leading cause of data breaches for the first time in the 19-year history of

May 21, 2026 Read more · 4 min

Critical n8n Sandbox Escape Exposes 100,000 Automation Instances to Remote Takeover

Vulnerabilities

Critical n8n Sandbox Escape Exposes 100,000 Automation Instances to Remote Takeover

A critical vulnerability in n8n's workflow automation platform allows authenticated attackers to break out of security sandboxes and execute arbitrary code on

May 20, 2026 Read more · 4 min

Fortinet and Ivanti Close Critical Security Holes. Two Still Await AI-Driven Discovery

Vulnerabilities

Fortinet and Ivanti Close Critical Security Holes: Two Still Await AI-Driven Discovery

Fortinet and Ivanti patched 18 critical vulnerabilities on Tuesday, including two critical-severity flaws that allow unauthenticated remote code execution. Both companies say

May 14, 2026 Read more · 4 min

Vulnerabilities

Microsoft 365 Copilot Zero-Click Flaw Let Attackers Steal Data Via Email

Microsoft 365 Copilot contained a critical zero-click vulnerability that allowed attackers to exfiltrate sensitive company data simply by sending a malicious email. The flaw, discovered…

May 13, 2026 Read more · 4 min

Vulnerabilities

cPanel Zero-Day Exploited for Months Before Patch 44,000 Servers Hit

A critical authentication bypass vulnerability in cPanel has been under active exploitation since February, two months before the vendor issued a patch. CVE-2026-41940 carries a…

May 5, 2026 Read more · 4 min

CISA Fast-Tracks Nine-Year-Old Linux Root Bug to Known Exploited List

CISA added CVE-2026-31431 to its Known Exploited Vulnerabilities catalogue on Friday, confirming that a nine-year-old Linux kernel flaw is being exploited in live attacks. The…

May 4, 2026 Read more · 4 min

Single Git Push Could Have Compromised Millions of GitHub Repositories

Vulnerabilities

Single Git Push Could Have Compromised Millions of GitHub Repositories

A command injection flaw in GitHub's git push pipeline could have allowed attackers to execute arbitrary code on GitHub servers and access

April 30, 2026 Read more · 4 min

Microsoft Defender Targeted by Three Zero-Days, Two Remain Unpatched

Vulnerabilities

Microsoft Defender Targeted by Three Zero-Days, Two Remain Unpatched

Microsoft Defender is under coordinated attack through three zero-day vulnerabilities that turn the security software into an attack vector. Huntress confirmed active

April 24, 2026 Read more · 4 min

Adobe Reader Zero-Day Exploited for Weeks Before Patch Existed

Vulnerabilities

Adobe Reader Zero-Day Exploited for Weeks Before Patch Existed

Attackers have been inside Adobe Reader systems for four months before anyone caught them. The zero-day vulnerability, discovered by EXPMON researcher Haifei

April 9, 2026 Read more · 3 min

BlueHammer Windows Zero-Day Exploited Six Weeks Before Microsoft Knew

Vulnerabilities

BlueHammer Windows Zero-Day Exploited Six Weeks Before Microsoft Knew

A frustrated security researcher has released working exploit code for an unpatched Windows vulnerability that allows attackers to escalate from ordinary user

April 9, 2026 Read more · 4 min

Ninja Forms File Upload Flaw Lets Attackers Hijack 50,000 WordPress Sites

Vulnerabilities

Ninja Forms File Upload Flaw Lets Attackers Hijack 50,000 WordPress Sites

A critical flaw in the Ninja Forms File Upload plugin allows unauthenticated attackers to upload malicious files and execute arbitrary code on

April 8, 2026 Read more · 3 min

Chrome Zero-Day CVE-2026-2441 Exploited in Wild as Google Ships Emergency Patch

Vulnerabilities

Chrome Zero-Day CVE-2026-2441 Exploited in Wild as Google Ships Emergency Patch

Google shipped an emergency patch on February 13 to address a Chrome zero-day vulnerability that attackers have been exploiting in the wild.

February 16, 2026 Read more · 3 min

Behind the Feed

The Same Analysts Who Track These Stories Run Our SOC

This isn't a content mill. The threats we summarise here are the ones our Sweden-based analysts watch for across client environments, around the clock. When something breaks, our customers hear it from us first.

See how MDR works

3 min Average time to contain a confirmed threat

3 days To full 24/7 MDR coverage from contract

40+ Swedish organisations actively protected

24/7 SOC coverage, 365 days a year, in Sweden

Keep Going

Go deeper

Articles

Cyber intelligence from our analysts

Longer-form briefings and explainers, from incident breakdowns to practical NIS2 and Zero-Trust guidance.

Cyber Security 101

Security fundamentals, explained simply

Plain-language explainers on the core concepts, threats and frameworks behind modern security, for specialists and decision-makers alike.

Start with the basics