Cybersecurity News

OAuth abuse via Klue integration enables CRM data exfiltration; review third-party app grants and tokens.

Critical RCE chain in Splunk enables unauthenticated remote code execution via PostgreSQL sidecar; immediate patching and access controls are essential.

Binding Directive 26-04 compels remediation of critical flaws within three calendar days for federal agencies.

June 2026 cycle patches 198 flaws, including 3 zero-days actively exploited; prioritize critical systems first.

Critical Serv-U vulnerability actively exploited; apply vendor patches and segment file-transfer services.

High-profile exposure in password reset flow; emergency hotfix deployed; verify user impact and tighten auth checks.

Critical Linux kernel flaw being actively exploited; remediation and KEV tracking require immediate patching and monitoring.

Critical RCE in Magento extension actively exploited; urgent patching recommended for e-commerce sites.

Malicious code was injected into @redhat-cloud-services packages, enabling credential theft across developer environments. Immediate package revocation and scans advised.

Active exploitation of PAN-OS auth bypass CVE-2026-0257. Exploit can enable remote access without authentication; prioritize patching and access control.

Microsoft SharePoint Server remote code execution vulnerability disclosed and patched as CVE-2026-45659.

Attacker-inserted backdoors via GitHub tags affected numerous Laravel-Lang packages. Audit dependencies and rotate credentials.

A stored XSS flaw in Open WebUI allows 1-click remote code execution when uploading a profile image. Patch status and mitigations required to protect AI workspaces.

Fortinet disclosed a critical remote code execution flaw in FortiSandbox (CVE-2026-26083) requiring urgent patching to prevent unauthenticated code execution. Prioritize affected deployments.

Microsoft released a broad May 2026 Patch Tuesday covering 120 vulnerabilities across Windows, Azure, and Office, including 29 critical RCE flaws. Patch management is essential to reduce exposure.

Short halt on issuance due to a cross-signed root issue; service restored after hours with mitigations.

Three critical disclosures in Microsoft 365 Copilot and Copilot Chat were remediated; end-user action not required per advisories.

Ivanti Endpoint Manager Mobile 0-day vulnerabilities are being exploited; patch on-premises deployments immediately.

ScarCruft trojanized a gaming platform to deploy backdoors on Windows and Android. Review supply chain and application trust.