DEFCON·2026-08-16·MAXIMUM

TODAY

Apache under active attack — patch CVE-2026-34486 now

THE THREE

#1 · CVE-2026-34486
Apache
KEV
What: Apache — being actively exploited in the wild right now; unpatched systems are getting hit.
Why it moved: Actively exploited · Everyone runs this · 83% exploit odds
Who is exploiting: Actively-exploited (CISA KEV)
Action · Patch immediately or take affected systems offline.
#2 · CVE-2026-10520
Ivanti
KEV
What: Ivanti — being actively exploited in the wild right now; unpatched systems are getting hit.
Why it moved: Actively exploited · Widely deployed · Critical severity · 100% exploit odds
Who is exploiting: Actively-exploited (CISA KEV)
Action · Patch immediately or take affected systems offline.
#3 · CVE-2026-0257
Palo Alto
KEV
What: Palo Alto — being actively exploited in the wild right now; unpatched systems are getting hit.
Why it moved: Actively exploited · Widely deployed · Critical severity · 94% exploit odds
Who is exploiting: Actively-exploited (CISA KEV)
Action · Patch immediately or take affected systems offline.

TRAVERSAL

Graph links this vulnerability to maven/org.apache.tomcat:tomcat-tribes.

software · maven/org.apache.tomcat:tomcat-tribessoftware · maven/org.apache.tomcat:tomcatsoftware · maven/org.apache.tomcat.embed:tomcat-embed-core

NUMBERS

Entities: 11M
Relationships: 64M
Threat actors: 356
Indicators: 556k
Feeds live: 0
Sources total: 21

ShareLinkedIn X

Past editions →

Get tomorrow's brief in your inbox

07:15 UK. One email. One link. Nothing else.

Daily · one email · unsubscribe in one click · UK GDPR double opt-in.