Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable 2026-07-26 True True Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patch Available 2026-07-26 True True CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking 2026-07-26 True True Hackers Hijack Hotel Wi-Fi DNS to Steal Microsoft 365 Accounts 2026-07-26 True True CVE-2026-15704: Critical Auth Bypass in Eclipse BaSyx Go Components 2026-07-25 True True Steam Forum ClickFix Attacks Infect Gamers with XMRig Cryptominers 2026-07-25 True True CVE-2026-10818: WPForms Pro Arbitrary File Upload — Unauthenticated RCE 2026-07-25 True True Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git 2026-07-25 True True CVE-2026-47724: nebula-mesh API Authorization Bypass Enables Cross-Tenant Takeover (CVSS 9.9) 2026-07-24 True True WordPress Helpdesk Plugin Unauthenticated Code Injection — CVE-2026-15011 2026-07-24 True True Seeing AI Agents Is Not Enough — Security Teams Must Enforce What They Can Do 2026-07-24 True True GoDAM WordPress Plugin Arbitrary File Upload — CVE-2026-14282 2026-07-24 True True CVE-2026-15981: WordPress SAML SSO Authentication Bypass (CVSS 9.8) 2026-07-24 True True In Other News: Dolphin X AI Malware, Car Anti-Theft Hack, 432 Linux Kernel CVEs 2026-07-24 True True ChatGPT 'AgentForger' Flaw Could Deploy Rogue Workspace Agents via a Phishing Link 2026-07-24 True True Hermes AI Agent Used to Automate Attack on Thai Finance Ministry 2026-07-24 True True Kimi K3 AI Agents Discovered Redis Zero-Days and Built RCE Exploits in Under 90 Minutes 2026-07-24 True True fastjson RCE Without Gadget or AutoType — CVE-2026-16723 2026-07-24 True True NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats 2026-07-24 True True OnTrac Notifies Customers of Data Breach After Network Hack 2026-07-24 True True Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data 2026-07-23 True True Russian Laundry Bear Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes 2026-07-23 True True Upbound Group Data Breach Triggers $13M in Fraudulent Acima Lease Losses 2026-07-23 True True CVE-2026-14291: WordPress Security Ninja Premium 2FA Authentication Bypass 2026-07-23 True True Origin Energy Data Breach Exposes Millions of Australian Customers 2026-07-23 True True Swiss Rail Giant Stadler Refuses $12.3M Ransom Demand from Everest Group 2026-07-23 True True Check Point Patches SmartConsole Zero-Day Exploited in Attacks 2026-07-23 True True msaRAT: Chaos Ransomware's New Backdoor Hides C2 Traffic Inside Chrome and Edge 2026-07-23 True True How Enterprise GenAI Can Amplify Ransomware Risk — and How to Contain It 2026-07-22 True True South Korea Discloses Data Breach Impacting Diplomats Worldwide 2026-07-22 True True Swiss Rail Giant Stadler Rejects $12.3M Ransom Demand After Cyberattack 2026-07-22 True True CVE-2026-65048: Ninja Forms Unauthenticated Stored XSS via Repeatable Fieldset 2026-07-22 True True CVE-2026-65049: Ninja Forms Multisite Flaw Enables Network-Wide Data Deletion 2026-07-22 True True Upbound Says Hack Caused $13 Million in Fraudulent Acima Leases 2026-07-22 True True CVE-2026-65008: Grav CMS RCE via Uncontrolled Callable in Blueprint::dynamicData() 2026-07-22 True True Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts 2026-07-22 True True CVE-2026-64606: Apache Fury Critical Deserialization Flaw (CVSS 9.8) 2026-07-22 True True CVE-2026-65007: Grav API Plugin Broken Authorization Allows API Key Takeover 2026-07-22 True True CVE-2026-28302: SolarWinds Serv-U IDOR Leads to Root RCE 2026-07-22 True True CVE-2026-16232: Check Point SmartConsole Improper Authentication 2026-07-22 True True CVE-2026-62415: Joomla Membership Pro Allows Unauthenticated File Upload 2026-07-22 True True Critical Palo Alto VPN Bug Now Exploited by Qilin Ransomware Gang 2026-07-21 True True Weekly Digest — Issue #28 2026-07-21 True True CVE-2024-51311: Critical Stack Overflow in Tenda TX9 Router Firmware 2026-07-21 True True Anubis Ransomware Claims Coca-Cola Fairlife Attack, Threatens Data Leak 2026-07-21 True True New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack 2026-07-21 True True FakeGit Campaign Uses 7,600 GitHub Repos to Push SmartLoader Malware 2026-07-21 True True Spain Fines 23andMe Nearly $3 Million for Cybersecurity Failings Enabling 2023 Hack 2026-07-21 True True WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning 2026-07-21 True True CVE-2026-13439: WordPress Easy Form Builder Unauthenticated Privilege Escalation (CVSS 9.8) 2026-07-21 True True 
