Skip to content
Threat Feed
Subscribe

Vendor

Alinto

2 briefs RSS
high advisory

CVE-2026-93453 Password Reset Poisoning in SOGo

SOGo versions before 5.12.11 are vulnerable to password reset poisoning, allowing unauthenticated attackers to manipulate reset links by injecting malicious values into the Origin header.

PoC SOGo +1 web-application credential-theft cve-2026-93453
1t 1c updated
high threat

FrostyNeighbor Targets Ukraine with Updated PicassoLoader Chain

The FrostyNeighbor threat actor is targeting Ukrainian governmental organizations with spearphishing emails containing malicious PDFs that deliver a JavaScript dropper (PicassoLoader) and ultimately a Cobalt Strike beacon.

PoC Cobalt Strike +9 FrostyNeighbor cyberespionage cobaltstrike picassoloader ukraine
2r 3t 5c 16i updated