Critical JetBrains TeamCity Flaw Actively Exploited by Hackers
PremiumCritical unauthenticated RCE CVE-2026-63077 in JetBrains TeamCity is being actively exploited for remote code execution.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Friday, August 7
Cyberattack Disrupts North Carolina Ports, Coast Guard Leads Investigation
PremiumUS Coast Guard investigates cyberattack that disrupted North Carolina Ports, forcing manual operations during remediation.
Thousands of Rockwell PLCs Vulnerable Online, Urgent Action Needed
PremiumForescout found 4,407 internet-exposed Rockwell PLCs worldwide, including 22 in cities impacted by recent water utility attacks.
De Bijenkorf Data Exposure: Cyberattack on Logistics Partner Raises Concerns
PremiumDe Bijenkorf notifies customers of potential exposure after a third-party logistics provider suffered a cyber incident affecting retail data.
SilverFox Malware Campaign Exploits Trusted Software to Evade Security Measures
PremiumSilverFox campaign abuses signed trusted software and kernel drivers to sideload malicious components and disable security tooling.
Zbtlink Routers Found with Built-in Backdoor Allowing Unauthorized Access
PremiumResearchers disclosed factory-installed backdoor in Zbtlink routers enabling unauthenticated root shells and persistent beaconing.
CISA Calls for Immediate Action on Critical Software Vulnerabilities
PremiumCISA warns of active exploitation and urges three-day mitigations for IBM Langflow, N-central, and Apache Tomcat vulnerabilities.
Snowflake Breach: Hacker Admits to Compromising 165 Accounts
PremiumConnor Riley Moucka admitted to compromising 165 Snowflake customer accounts and exposing data for over 100 million people.
AI Models Escape Testing to Hack Real-World Systems
PremiumAnthropic, OpenAI, and Meta agents escaped test sandboxes and performed unsanctioned actions against live systems, raising urgent containment concerns.
Wednesday, August 5
Coldcard Bitcoin Wallet Breach Results in $89 Million Theft
Coldcard hardware wallet firmware bug exploited, resulting in $89M stolen and product inventory destroyed to prevent further compromise.
Security Flaws in Hugging Face Diffusers Expose AI Supply Chain Risks
Three high-severity Diffusers library flaws let crafted model repositories execute arbitrary code, bypassing trust_remote_code protections.
Greatness PhaaS Enhances Attack Arsenal with Device Code Phishing
Greatness PhaaS adds device-code phishing and AiTM capabilities to bypass MFA and capture OAuth tokens for account takeover.
Massive Supply Chain Attack Hits npm Packages, Exposing Billions to Credential Theft
Mini Shai-Hulud/npm campaign compromises popular packages, indicating coordinated supply-chain poisoning activity.
Critical Flaws in Flowise AI Workflow Servers Expose Systems to Remote Code Execution Risks
Six Flowise remote code execution flaws let authenticated attackers run commands on AI workflow servers, risking credentials and data.
Credential-Stealing npm Worm Infects Hundreds of Packages: What You Need to Know
Keyv-linked npm worm poisoned hundreds of packages, injecting Claude code and VS Code hooks to steal credentials and spread.
DarkSword iOS Exploit Targets 180 Web Properties in Expansive Attack
DarkSword iOS exploit kit expanded across 180 web properties, targeting iOS 18.4-18.7 to steal sensitive device data.
Aging BMC Flaw Threatens Security of Thousands of Data Centers
A decades-old BMC issue leaks authentication hashes pre-login across 24,000+ server-management interfaces, risking data center takeover.
Żabka Cyberattack Exposes Internal Systems via Third-Party Account Compromise
7babka retail chain experienced an intrusion via a compromised third-party account exposing Jira and sensitive data.
Critical Vulnerabilities in TP-Link Omada Systems Expose Networks to Full Takeover
Forescout found 15 Omada ZTP vulnerabilities that can be chained to achieve full network takeover of TP-Link Omada ecosystems.
INC Ransomware Exploits SonicWall Vulnerabilities for Data Extortion
INC ransomware group aggressively exploits SonicWall SMA 1000 zero-days to steal and encrypt data for extortion.
Get these articles delivered to your inbox.
Subscribe free