Do Son
TL;DR Researchers disclosed four flaws in the Ninja Forms WordPress plugin, which runs on more than 600,000...
News
TL;DR Qualys disclosed RefluXFS on July 22, 2026. Tracked as CVE-2026-64600, it is a Linux kernel XFS...
TL;DR Check Point disclosed a SmartConsole authentication bypass on July 22, 2026. The flaw, CVE-2026-16232, is already...
TL;DR The Exim team published advisory EXIM-Security-2026-06-22.1 on July 22, 2026. It describes an Exim vulnerability that...
FreeRDP developers recently patched a critical flaw affecting numerous workstations worldwide. Security researchers publicly disclosed the details...
At a glance Malware family Spirals (new Rust-based ransomware, named by its operators) Threat actor Unknown. No...
At a glance Actor / group UAT-11795 (suspected Russian-speaking, financially motivated) Activity type Credential and cryptocurrency theft...
TL;DR Researcher Kirill Firsov disclosed a fastjson RCE on July 19, 2026. It affects fastjson 1.2.68 through...
TL;DR Two new FreePBX vulnerabilities each carry a CVSS score of 9.3. One gives unauthenticated remote code...
A global phishing campaign hides a low-detection Lua loader inside fake .ttf font files to drop Remcos,...
TL;DR Oracle patched 11 flaws in the WebLogic Server Core component this July. Most allow a full...
Iran’s Islamic Revolutionary Guard Corps has issued a statement of striking military significance. According to the IRGC,...
At a Glance Actor or group Unnamed China-linked espionage group (per Symantec’s 2022 attribution) Activity type Suspected...
Mozilla has published Firefox 153.0 as a stable release, and the update finally delivers containers as a...
At a Glance Malware family Gafgyt / BASHLITE variant (DDoS bot) Threat actor Unattributed; banner references handle...
At a Glance Malware family OkoBot framework (TookPS lineage; 20+ payloads and implants) Threat actor Unattributed; suspected...
The Genesis of the Literary Litigation In 2024, a prominent coalition of American authors and publishers initiated...
An Unprecedented Autonomous Intrusion The prominent open-source model and dataset repository Hugging Face disclosed a sophisticated cyberattack...
Enterprise WSUS update servers began faltering around 13 July 2026. The disruption spread widely across corporate networks....
TL;DR Google shipped a Chrome security update on July 21, 2026. It fixes 12 vulnerabilities, and Google...
TL;DR Vitest patched a critical vulnerability rated CVSS 9.4. Browser Mode commands could read, write, or delete...
TL;DR SolarWinds fixed 15 critical SolarWinds Serv-U vulnerabilities on July 21, 2026. They allow privilege escalation, account...