Microsoft Addresses Critical Zero-Day in Malware Protection Engine
PremiumMicrosoft released fixes for the RoguePlanet Defender zero-day (CVE-2026-50656), addressing privilege escalation in the Malware Protection Engine.
Friday, July 10
Wednesday, July 8
Critical Vulnerabilities Found in BeyondTrust Software
BeyondTrust disclosed two critical vulnerabilities in Remote Support and Privileged Remote Access that could bypass authentication.
Critical Flaw in Writer AI Allows Cross-Tenant Account Takeovers
WriteOut session isolation bug in Writer AI could leak session tokens across tenants enabling full account takeover.
Cyber Breach at Leading Japanese Telco Exposes 12 Million Emails
Cyberattack on major Japanese telco exposed 12 million customer emails from ISP-managed systems and webmail stores.
BusySnake Infostealer Targets Critical Infrastructure with Advanced Tactics
BusySnake infostealer used by 'Armored Likho' reached government agencies and electrical power entities, targeting critical infrastructure.
Chinese Espionage Group Targets Universities via Roundcube Exploits
China-linked actors used a Roundcube exploit chain to compromise university physics and engineering departments and harvest credentials.
Teen Exploits Streaming Service Flaw, Cancels Thousands of Anime Subscriptions
Japanese teen arrested for exploiting a streaming platform flaw to fraudulently cancel over 46,000 subscriptions.
Phishing Attack Turns AnyDesk Into Stealthy Espionage Tool
Phishing campaign weaponizes AnyDesk, uses scheduled tasks for persistence and artifact deletion to maintain stealthy backdoors.
Iranian Hackers Deploy Advanced Cavern C2 Framework Against Israeli Targets
Iran-linked Cavern (Cav3rn) modular C2 framework used to target Israeli IT providers and government for espionage and lateral access.
Critical Adobe ColdFusion Vulnerability Under Active Exploitation
Attackers are exploiting Adobe ColdFusion CVE-2026-48282 (CVSS 10.0) to achieve remote code execution on web servers.
RedWing Malware as a Service: A New Threat to Android Users
RedWing Android malware rented on Telegram enables bank fraud, stealing credentials and OTPs via device takeover.
JadePuffer: A New Era of AI-Driven Ransomware Unfolds
Researchers report JadePuffer, an agentic ransomware automating attack steps and accelerating operations.
Critical Gitea Vulnerability Exploited to Bypass Authentication
Gitea flaw allows auth bypass via HTTP header, exposing repositories and secrets to attackers.
Critical Linux Vulnerability Allows VM Escape and Host Takeover
Januscape KVM vulnerability enables VM escape to execute code on hosts across Intel and AMD platforms.
Exploiting Adobe ColdFusion: A Race Against Time for Cybersecurity Teams
Active exploitation of Adobe ColdFusion CVE-2026-48282 (CVSS 10.0) enables remote code execution on web servers.
Monday, July 6
Global Effort Disrupts NetNut Proxy Network Tied to Millions of Compromised Devices
PremiumLaw enforcement and industry partners disrupted a vast proxy network, cutting off millions of compromised devices and reducing attack surface.
Critical 'Bad Epoll' Vulnerability Threatens Linux and Android Security
PremiumUnprivileged users can escalate to root via a race condition in epoll, enabling OS-level compromise on Linux and Android systems.
Medtronic Data Breach Exposes Millions of Patient Records
PremiumMajor healthcare data breach exposed millions of patients’ personal and medical information, raising regulatory and patient-care risks.
Friday, July 3
CISA Urges Immediate Patching of Critical SharePoint Vulnerability
PremiumCISA reports active exploitation of a patched SharePoint RCE; prioritize remediation across SharePoint servers.
Cisco Urges Immediate Update as Unified CM Vulnerability Exploited
PremiumActive exploitation of a Unified CM flaw confirmed with PoC activity; update and monitor for exploit attempts.
Get these articles delivered to your inbox.
Subscribe free