XDR Security News & Threat Intel | Hexnode Threat Watch

Extended Detection and Response

Sep 7

Malware

CVE-2026-14894: Super Forms, Elementor Pro RCE Under Attack

cve 2026 14894

Sep 7

Identity Abuse

Ted Backdoor Hijacks HAProxy to Intercept Web Traffic

ted backdoor

Sep 4

Supply Chain Attack

Coder Registry Compromise Pushed Credential-Stealing Terraform Modules

Coder Registry Compromise Pushed Credential-Stealing Terraform Modules

Sep 3

Network and VPN

Sangoma Switchvox Attack Exploits CVE-2026-9586 to Attempt Reverse Shells

Sangoma Switchvox Attack Exploits CVE-2026-9586 to Attempt Reverse Shell

Sep 3

Zero-Day

CVE-2026-19949: All-in-One WP Migration Plugin Under Attack

cve 2026 19949

Sep 2

Supply Chain Attack

Aesto Health AWS Breach Exposes Millions of Patient Records

Aesto Health AWS Breach Exposes Millions of Patient Records

Sep 2

Windows

Faronics Deploy Abuse Turns Endpoint Management into an Attack Path

Faronics Deploy Abuse Turns Endpoint Management into an Attack Path

Sep 1

Cloud and SaaS

TWINLOOT Hides C2 in Microsoft 365 to Steal Credentials and Pivot Internally

TWINLOOT Hides C2 in Microsoft 365 to Steal Credentials and Pivot Internally

Sep 1

Patch Management

PaperCut CVE-2026-82078: Second Emergency Patch After Attackers Broke the First Fix

papercut cve 2026 82078

Sep 1

Cloud and SaaS

ownCloud KEV Exploitation Turns WebDAV Defaults Into Nuclear Research Data Theft

ownCloud KEV Exploitation Turns WebDAV Defaults Into Nuclear Research Data Theft