“Networks”

Researchers published Redis authenticated RCE PoCs for multiple versions, prompting emergency Redis security releases.

Russian state-linked actors exploited a Zimbra zero-day to steal emails and bypass MFA, prompting urgent patching and mitigations.

Qilin ransomware exploits critical Palo Alto PAN-OS GlobalProtect authentication bypass to breach networks and deploy ransomware.

Ransomware disrupted operations at a Japanese frozen-food logistics firm, delaying shipments to major clients including national franchises.

Check Point patched an actively exploited SmartConsole zero-day used against customer admin panels; immediate patching recommended.

CISA mandated urgent patching for actively exploited Fortinet FortiSandbox vulnerabilities with near-term federal deadlines.

Spanish police dismantled an organized cyber fraud ring that laundered ~uro140M through complex financial networks.

Four @asyncapi npm packages were compromised to distribute a multi-stage botnet loader with credential-stealing payloads.

Daxin kernel rootkit resurfaces with a new Stupig pre-login backdoor targeting a Taiwan manufacturing firm for persistence.

CISA issued an emergency order forcing federal agencies to patch an actively exploited Oracle E-Business Suite vulnerability immediately.

SonicWall SMA1000 zero-days (including SSRF CVE-2026-15409) are actively exploited; apply mitigations and emergency patches.

Microsoft released its largest Patch Tuesday, fixing hundreds of CVEs including two zero-days actively exploited, requiring prioritization.

Jalisco and OmegaLord phishing kits target Microsoft 365, using MFA-evasion techniques to steal credentials and session tokens.

ACSC warns of global exploitation campaign targeting vulnerable CMS platforms and plugins, urging patching and monitoring.

Supreme Court changes to location-tracking law could limit ALPR searches and reshape policing use of license-plate cameras.

Attacks against healthcare service providers more than doubled in H1 2026 as criminals shift focus from hospitals to vendors.

Progress tells ShareFile Storage Zone Controller admins to immediately shut down servers to mitigate a credible external threat.

Threat group O UNC 066 uses phone-based phishing to trick employees into registering attacker-controlled Entra passkeys to hijack accounts.