Skip to main content
GDMME
Enquire
SECURITY INTELLIGENCE / Global Cyber Threat Intelligence

Global Cyber Threat Intelligence

Hong Kong official advisories and global cybersecurity reporting, with original publication dates and source provenance retained.

Reset

GDMME follow-up priority uses official ratings and headline/summary rules. It is not a CVSS score or official vulnerability rating, and does not confirm that your business is affected.

Ransomware file check

Latest available advisories 100 · Matching filters 100 · Shown on this page 41–60

Intelligence data updated (Hong Kong time):2026/10/22 09:05 HKT

Software vulnerabilitiesGDMME watch closely

Fortinet Products Elevation of Privilege Vulnerability

HKCERT has published this security advisory. This entry indexes the official title, original link and publication date. Available official recommendations are shown separately as original-language excerpts, without individual human analysis.

Basis: the headline or summary mentions a vulnerability, malware or a data incident; check applicability.

Source publication date · HKCERT
Software vulnerabilitiesGDMME watch closely

Microsoft Edge Multiple Vulnerabilities

HKCERT has published this security advisory. This entry indexes the official title, original link and publication date. Available official recommendations are shown separately as original-language excerpts, without individual human analysis.

Basis: the headline or summary mentions a vulnerability, malware or a data incident; check applicability.

Source publication date · HKCERT
Software vulnerabilitiesGDMME watch closely

BeyondTrust Remote Support Security Restriction Bypass Vulnerability

HKCERT has published this security advisory. This entry indexes the official title, original link and publication date. Available official recommendations are shown separately as original-language excerpts, without individual human analysis.

Basis: the headline or summary mentions a vulnerability, malware or a data incident; check applicability.

Source publication date · HKCERT
Global attacksGDMME priority follow-up

CVE-2026-96652 — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

CISA has added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. The date is the KEV addition date, not the original vulnerability publication date. This is an automatically collected official index entry without individual human analysis.

Basis: listed by CISA KEV as a known exploited vulnerability.

KEV added date · CISA KEV
Global attacksGDMME priority follow-up

CVE-2026-96654 — Plex Media Server Improper Neutralization of Encoded URI Schemes in a Web Page Vulnerability

CISA has added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. The date is the KEV addition date, not the original vulnerability publication date. This is an automatically collected official index entry without individual human analysis.

Basis: listed by CISA KEV as a known exploited vulnerability.

KEV added date · CISA KEV
Global attacksGDMME priority follow-up

CVE-2026-96655 — Plex Media Server Server-Side Request Forgery (SSRF) Vulnerability

CISA has added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. The date is the KEV addition date, not the original vulnerability publication date. This is an automatically collected official index entry without individual human analysis.

Basis: listed by CISA KEV as a known exploited vulnerability.

KEV added date · CISA KEV
Global attacksGDMME priority follow-up

CVE-2026-96656 — Plex Media Server External Control of File Name or Path Vulnerability

CISA has added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalog. The date is the KEV addition date, not the original vulnerability publication date. This is an automatically collected official index entry without individual human analysis.

Basis: listed by CISA KEV as a known exploited vulnerability.

KEV added date · CISA KEV
Overseas cybersecurity newsGDMME watch closely

Hackers Exploit Plex2Shell Flaws to Install Crypto Miners and Linux Proxy Backdoor

The Hacker News published this cybersecurity report. This entry collects the headline, original link and report publication date without individual human analysis. A news report is not official remediation guidance.

Basis: the headline or summary mentions a vulnerability, malware or a data incident; check applicability.

Source publication date · The Hacker News
Overseas cybersecurity newsGeneral information

⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More

The Hacker News published this cybersecurity report. This entry collects the headline, original link and report publication date without individual human analysis. A news report is not official remediation guidance.

Basis: general cybersecurity information; no explicit exploitation or patching indicator was found.

Source publication date · The Hacker News
Overseas cybersecurity newsGeneral information

GhostAction Attackers Plant Credential Stealer Disguised as Font in 94 GitHub Repositories

The Hacker News published this cybersecurity report. This entry collects the headline, original link and report publication date without individual human analysis. A news report is not official remediation guidance.

Basis: general cybersecurity information; no explicit exploitation or patching indicator was found.

Source publication date · The Hacker News
Overseas cybersecurity newsGeneral information

From Email-to-Case to the Boardroom: How Inherited Agents Break Governance Built for Software

The Hacker News published this cybersecurity report. This entry collects the headline, original link and report publication date without individual human analysis. A news report is not official remediation guidance.

Basis: general cybersecurity information; no explicit exploitation or patching indicator was found.

Source publication date · The Hacker News
Overseas cybersecurity newsGDMME watch closely

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic

The Hacker News published this cybersecurity report. This entry collects the headline, original link and report publication date without individual human analysis. A news report is not official remediation guidance.

Basis: the headline or summary mentions a vulnerability, malware or a data incident; check applicability.

Source publication date · The Hacker News
Overseas cybersecurity newsGDMME watch closely

Unpatched Broadcom Wi-Fi Flaw Lets Attackers in Range Run Code as Root on Routers

The Hacker News published this cybersecurity report. This entry collects the headline, original link and report publication date without individual human analysis. A news report is not official remediation guidance.

Basis: the headline or summary mentions a vulnerability, malware or a data incident; check applicability.

Source publication date · The Hacker News
Overseas cybersecurity newsGDMME watch closely

OpenCode Console Breach May Have Exposed OpenAI, Anthropic, and Google API Keys

The Hacker News published this cybersecurity report. This entry collects the headline, original link and report publication date without individual human analysis. A news report is not official remediation guidance.

Basis: the headline or summary mentions a vulnerability, malware or a data incident; check applicability.

Source publication date · The Hacker News
Overseas cybersecurity newsGeneral information

ConnectWise Suspends Cloud Backup After Attackers Compromise Microsoft 365 Tenants

The Hacker News published this cybersecurity report. This entry collects the headline, original link and report publication date without individual human analysis. A news report is not official remediation guidance.

Basis: general cybersecurity information; no explicit exploitation or patching indicator was found.

Source publication date · The Hacker News
Overseas cybersecurity newsGeneral information

MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon

The Hacker News published this cybersecurity report. This entry collects the headline, original link and report publication date without individual human analysis. A news report is not official remediation guidance.

Basis: general cybersecurity information; no explicit exploitation or patching indicator was found.

Source publication date · The Hacker News

Educational information only. Confirm affected versions, mitigations and exploitation status with the original vendor advisory. Reports do not imply that GDMME equipment blocks every vulnerability.

Global Cyber Threat Intelligence