Topic

Patch and exposure management

Locating vulnerable assets via inventory and internet-scan fingerprints and choosing the version that clears all known issues.

Current clusters

build1 distinct publisher

Honeypots logged a SharePoint JWT bypass hunting for a Business Data Catalog sink

Attackers are forging tokens SharePoint accepts, then enumerating management APIs and probing Business Connectivity Services for the execution sink. BleepingComputer reports nobody has seen that last step land.

Publishers:dev.to

Reality

Evidence55
Adoption42
Hype gap+18
Incentives30

security2 distinct publishers

CVE-2026-52806 turns a Gogs branch name into command execution as the git user

Rapid7 scored it 9.9 and Gogs shipped 0.14.3 on June 7, 2026. The reason it rates that high is configuration: open registration and unlimited repository creation let a stranger own the repo they attack from.

Publishers:rapid7.comrunzero.com

Reality

Evidence84
Adoption52