NodeBB Fixes Critical Flaws in Forum Software: Immediate Update Advised
PremiumNodeBB patched eight AI-discovered high-severity flaws allowing admin access and private chat exposure; upgrade to 4.14.2 recommended.
Monday, July 27
SourTrade Malvertising Uses Browsers to Assemble Malware
PremiumSourTrade malvertising instructs browsers to assemble Windows executables in-memory, targeting retail traders and evading static detection.
Unattended AI Agent Exploits Thai Finance Ministry's Network
PremiumHermes AI agent run in unattended mode automated post-exploitation at Thailand's Finance Ministry, escalating access and data discovery.
Critical Security Fixes Released for Redis Following Zero-Day Exploits
PremiumResearchers published Redis authenticated RCE PoCs for multiple versions, prompting emergency Redis security releases.
Certighost Flaw Enables AD Users to Masquerade as Domain Controllers
PremiumCertighost exploit lets low-privileged AD users obtain a DC certificate and authenticate as that machine, risking full directory compromise.
Cl0p Ransomware Exploits Critical Vulnerabilities in PTC Software
PremiumCl0p affiliates exploit unauthenticated RCEs in Windchill and FlexPLM to steal data for extortion campaigns.
Critical Zimbra Vulnerability Exploited by Russian Espionage Group
PremiumRussian state-linked actors exploited a Zimbra zero-day to steal emails and bypass MFA, prompting urgent patching and mitigations.
Sunday, July 26
JadePuffer's New Ransomware Threatens AI Infrastructure with ENCFORGE
JadePuffer resurfaces deploying ransomware designed to encrypt or wipe AI models, datasets and vector DBs.
Iran-Linked APT42 Enhances Phishing Tactics with AI and Advanced TAMECAT Malware
APT42 leverages AI-assisted reconnaissance and the resilient TAMECAT malware to target senior government and defense personnel.
HollowGraph Malware Exploits Microsoft 365 Calendar for Covert Operations
HollowGraph malware uses compromised Microsoft 365 calendars as covert two-way dead-drop C2 channels leveraging Graph API.
Qilin Ransomware Gang Exploits Critical Vulnerability in Palo Alto VPN
Qilin ransomware exploits critical Palo Alto PAN-OS GlobalProtect authentication bypass to breach networks and deploy ransomware.
Addressing Windows LegacyHive Zero-Day Flaw with New Patches
Windows LegacyHive local privilege escalation zero-day allows attackers to gain elevated privileges on up-to-date Windows systems.
Critical NGINX Flaw Exposes Servers to Remote Code Execution
CVE-2026-42533 in nginx script engine enables crashing worker processes and potential remote code execution since 2011.
Russian Intelligence Exploits IP Cameras to Monitor NATO and Ukrainian Military Movements
Russian intelligence hijacks IP cameras across Europe and Ukraine to monitor military logistics and transport routes.
Researchers Unveil Bit2Watt: A New Threat to Data Center and Grid Stability
Bit2Watt research shows GPU workloads by cloud tenants can oscillate data-center power draw, threatening grid stability without code exploits.
South Korean Diplomatic Academy Suffers Nine-Month Cyber Breach
Unknown attackers compromised South Korea's diplomatic academy training system for nine months, exfiltrating personal data of ministry staff.
Estée Lauder Faces Data Breach Linked to Oracle EBS Vulnerability
Attackers exploited Oracle E-Business Suite zero-day to exfiltrate personal, financial and health information from Este9e Lauder systems.
SecurityWeek Unveils New Awards for Industrial Cybersecurity Excellence
SecurityWeek announces Critical Impact Awards honoring industrial cybersecurity achievements, winners at ICS Cybersecurity Conference.
ServiceNow Vulnerability Exploited Soon After Patch Release
ServiceNow AI platform CVE-2026-6875 is being exploited for remote code execution days after disclosure.
Clover Health Data Breach Exposes Sensitive Information
Social-engineering attack compromised employee accounts exposing personal and health information at Clover Health Investments.
Get these articles delivered to your inbox.
Subscribe free