Cyberattack Forces Nihon Kotsu to Halt Operations, Exposing Sector Vulnerabilities
Japan's Nihon Kotsu halts systems after cyberattack impacting dispatch and operations, showing transport-sector operational risks from intrusions.
Wednesday, July 15
CISA Alerts Organizations to SharePoint Vulnerability Exploits
CISA issues alert urging immediate SharePoint hardening after new exploitations affecting enterprise SharePoint environments were observed.
Lidl Alerts Customers to Data Breach and Phishing Threats
Retailer Lidl notifies customers after a third-party supplier breach exposed stored customer data hosted externally.
Finnish Authorities Pursue Convicted Hacker in Psychotherapy Data Breach Case
Finnish authorities issue wanted notice for suspect in massive psychotherapy provider Vastaamo breach that exposed sensitive patient records.
Ransomware Negotiator Betrays Clients, Sells Information to Attackers
Investigation reveals ransomware negotiation firm leaked victims' insurance and strategy to attackers, undermining incident response trust and outcomes.
Claude for Chrome Vulnerabilities Expose Sensitive Google Data to Extensions
Anthropic's Claude for Chrome extension has exploitable flaws enabling extensions to read Gmail, Docs, and Calendar data.
Zero-Day Vulnerability Forces Emergency Action on ShareFile Systems
Critical ShareFile Storage Zone Controller zero-day forced emergency shutdowns and prompted immediate vendor guidance and patches.
Microsoft's July 2026 Patch Tuesday Addresses Record 570 Vulnerabilities, Including Critical Zero-Days
Record Patch Tuesday: Microsoft released fixes for hundreds of vulnerabilities, including multiple zero-days; urgent prioritization required.
Monday, July 13
Global Exploitation Campaign Targets Vulnerable CMS Systems
PremiumACSC warns of global exploitation campaign targeting vulnerable CMS platforms and plugins, urging patching and monitoring.
Ghostcommit Exploits Image Files to Evade AI Detection and Steal Data
PremiumGhostcommit conceals prompt-injection payloads inside PNG images to bypass AI code reviewers and exfiltrate repo secrets.
Urgent Update Required: Critical XSS Vulnerability in Zimbra's Classic Web Client
PremiumCritical stored XSS in Zimbra Classic Web Client could execute crafted-email scripts and enable arbitrary code or session compromise.
CISA Reveals Lessons from AWS Credential Exposure Incident
PremiumCISA publishes after-action lessons following contractor exposure of AWS GovCloud credentials and IaC repos on public GitHub.
Injective Labs GitHub Breach Compromises Crypto Wallet Security
PremiumCompromise of Injective Labs' GitHub published @injectivelabs/[email protected] npm package that exfiltrates crypto wallet keys and seeds.
Critical Security Flaw in Gitea Docker Image Under Active Exploitation
PremiumCritical auth-bypass in official Gitea Docker image is actively exploited to impersonate any user, including administrators.
RedHook Malware Leverages Wireless ADB for Enhanced Device Control
PremiumRedHook Android malware abuses Wireless ADB to obtain shell-level access and persistence on compromised devices.
Supreme Court Ruling Could Transform Use of License Plate Cameras in Policing
PremiumSupreme Court changes to location-tracking law could limit ALPR searches and reshape policing use of license-plate cameras.
Cyber Wargame Highlights AI's Role in Ransomware Threats to Critical Infrastructure
PremiumWargame simulates water-sector attack; analysts warn that agentic AI speeds ransomware attack development and automation.
Fake QR Code Scams Surge, Threatening Financial Security
PremiumRise in deceptive QR-code scams leading to credential theft, fraudulent payments and account takeover attempts.
Critical U-Boot Vulnerabilities Threaten Device Security with Potential Pre-Boot Code Execution
PremiumSix U-Boot vulnerabilities allow device crashes and potential pre-boot code execution, risking persistent firmware compromise.
Cyberattacks on Healthcare Businesses Surge Amid Shift in Criminal Tactics
PremiumAttacks against healthcare service providers more than doubled in H1 2026 as criminals shift focus from hospitals to vendors.
Get these articles delivered to your inbox.
Subscribe free