Cryptocurrency Wallets Vulnerable to Ill Bloom Flaw as Over $5 Million Stolen
PremiumIll Bloom wallet flaw in weak entropy for recovery phrases was exploited to drain over $5M from wallets.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesMonday, July 13
Friday, July 10
Chrome 150 Update Bolsters Security with 27 Patches
PremiumGoogle's Chrome 150 fixes 27 vulnerabilities, including 13 use-after-free bugs and two critical flaws.
AI Coding Agents Vulnerable to Exploitation by Malicious Code
PremiumAI Now Institute's 'Friendly Fire' shows autonomous AI coding agents can be tricked into executing attacker code during self-approved scans.
GhostApproval Flaw in AI Coding Assistants Poses Security Risks
PremiumWiz-discovered GhostApproval symlink flaw lets six AI coding assistants run attacker-controlled code by tricking file approvals.
Critical Roundcube Update Fixes Zero-Click Security Flaws
PremiumRoundcube 1.7 patches zero-click stored XSS via crafted MIME attachments enabling remote compromise without user interaction.
Global CMS Vulnerability Exploitation Campaign Uncovered by ACSC
PremiumACSC warns a global campaign is exploiting CMS vulnerabilities to deploy webshells and persist on small to mid-size websites.
Massive Security Flaw Exposes Baby Monitors to Unauthorized Access
PremiumVulnerabilities in cloud-connected baby monitors and cameras exposed nearly one million devices and private video data.
Massive KDDI Data Breach Exposes 12 Million Email Accounts
PremiumKDDI data breach exploited a third-party zero-day, affecting roughly 12 million users' email accounts for ISPs.
Microsoft Addresses Critical Zero-Day in Malware Protection Engine
PremiumMicrosoft released fixes for the RoguePlanet Defender zero-day (CVE-2026-50656), addressing privilege escalation in the Malware Protection Engine.
Wednesday, July 8
Critical Vulnerabilities Found in BeyondTrust Software
BeyondTrust disclosed two critical vulnerabilities in Remote Support and Privileged Remote Access that could bypass authentication.
Critical Flaw in Writer AI Allows Cross-Tenant Account Takeovers
WriteOut session isolation bug in Writer AI could leak session tokens across tenants enabling full account takeover.
Chinese Espionage Group Targets Universities via Roundcube Exploits
China-linked actors used a Roundcube exploit chain to compromise university physics and engineering departments and harvest credentials.
Teen Exploits Streaming Service Flaw, Cancels Thousands of Anime Subscriptions
Japanese teen arrested for exploiting a streaming platform flaw to fraudulently cancel over 46,000 subscriptions.
Critical Adobe ColdFusion Vulnerability Under Active Exploitation
Attackers are exploiting Adobe ColdFusion CVE-2026-48282 (CVSS 10.0) to achieve remote code execution on web servers.
Critical Gitea Vulnerability Exploited to Bypass Authentication
Gitea flaw allows auth bypass via HTTP header, exposing repositories and secrets to attackers.
Critical Linux Vulnerability Allows VM Escape and Host Takeover
Januscape KVM vulnerability enables VM escape to execute code on hosts across Intel and AMD platforms.
Exploiting Adobe ColdFusion: A Race Against Time for Cybersecurity Teams
Active exploitation of Adobe ColdFusion CVE-2026-48282 (CVSS 10.0) enables remote code execution on web servers.
Monday, July 6
Friday, July 3
Get these articles delivered to your inbox.
Subscribe free