DarkSword iOS Exploit Targets 180 Web Properties in Expansive Attack
DarkSword iOS exploit kit expanded across 180 web properties, targeting iOS 18.4-18.7 to steal sensitive device data.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesWednesday, August 5
Aging BMC Flaw Threatens Security of Thousands of Data Centers
A decades-old BMC issue leaks authentication hashes pre-login across 24,000+ server-management interfaces, risking data center takeover.
Critical Vulnerabilities in TP-Link Omada Systems Expose Networks to Full Takeover
Forescout found 15 Omada ZTP vulnerabilities that can be chained to achieve full network takeover of TP-Link Omada ecosystems.
INC Ransomware Exploits SonicWall Vulnerabilities for Data Extortion
INC ransomware group aggressively exploits SonicWall SMA 1000 zero-days to steal and encrypt data for extortion.
AI-Powered Email Scams: How Microsoft Copilot Can Be Exploited for High-Stakes Fraud
Proof-of-concept shows Microsoft Copilot can be abused to escalate access, hijack executive accounts, and redirect wire transfers.
Critical Vulnerability in N-able N-central Exploited, Immediate Action Required
Active exploitation of N-able N-central CVE-2026-18577 allows attackers admin access to RMM servers; urgent patching recommended.
Monday, August 3
JetBrains Addresses Critical Vulnerability in TeamCity
PremiumTeamCity patched CVE-2026-63077, an unauthenticated code execution flaw exploitable via the agent polling protocol.
Cyberattacks Target Minnesota Water Utilities and Exploit Vulnerabilities
PremiumSANS NewsBites highlights Minnesota water utilities attacks, IPMI BMC hash leaks, and Cisco FMC hardcoded credential exploitation.
Ruby on Rails Secures Critical Vulnerability with Urgent Patch
PremiumRuby on Rails patched a critical unauthenticated flaw allowing arbitrary file reads and potential RCE via Active Storage.
Researchers Uncover 84 Vulnerabilities in 4G and 5G Core Networks
PremiumAcademic researchers disclosed 84 vulnerabilities in 4G/5G core networks, enabling DoS and session hijacking against mobile subscribers.
Flaw in Coldcard Wallets Enables Major Bitcoin Theft
PremiumCOLDCARD RNG/firmware flaw enabled rapid sweeping of Bitcoin wallets, linked to tens of millions in stolen funds.
Azure Cosmos DB Vulnerability Puts Data at Risk: What You Need to Know
PremiumCosmosEscape exposed primary keys for Azure Cosmos DB, granting attackers full read/write access to affected databases.
Friday, July 31
Google Fortifies Chrome with Patches for 370 Security Flaws
PremiumChrome 151 fixes 370 vulnerabilities, including seven critical flaws in core browser components and rendering engines.
Urgent Security Alert: Critical Flaw in JetBrains TeamCity Exposes Systems to Remote Attacks
PremiumJetBrains warns of a critical authentication bypass in TeamCity on-premises that could lead to remote code execution if exploited.
Ruflo Vulnerability Allows Unchecked AI Agent Manipulation
PremiumCritical Ruflo vulnerability allows unauthenticated attackers to spawn persistent malicious AI agent swarms and corrupt memory post-patch.
State-Sponsored Hackers Exploit Vulnerability in AnySign4PC via Korean Websites
PremiumAttackers exploited compromised Korean websites to silently exploit AnySign4PC, installing SIGNBT and COPPERHEDGE backdoors on victims' machines.
Sophisticated Exploit Targets Microsoft OWA to Maintain Persistent Access
PremiumRussian actors exploited a Microsoft Outlook Web Access vulnerability to retain mailbox access despite credential rotation across public sector targets.
Azure Cosmos DB Vulnerability Exposed Potential Cross-Tenant Database Access
PremiumCritical CosmosEscape Gremlin API vulnerability could allow cross-tenant full read/write access to Azure Cosmos DB.
Critical Vulnerability in Cisco Firewall Management Exploited
PremiumCISA warns CVE-2026-20316 in Cisco FMC is actively exploited, enabling unauthorized access to firewall management centers.
Autonomous AI Cyberattack Exploits Zero-Day Vulnerabilities to Breach Hugging Face
PremiumAutonomous OpenAI agent chained zero-days, escaped a test harness, and infiltrated Hugging Face and other services.
Get these articles delivered to your inbox.
Subscribe free