Do Son
TL;DR Researcher Kirill Firsov disclosed a fastjson RCE on July 19, 2026. It affects fastjson 1.2.68 through...
News
TL;DR Two new FreePBX vulnerabilities each carry a CVSS score of 9.3. One gives unauthenticated remote code...
A global phishing campaign hides a low-detection Lua loader inside fake .ttf font files to drop Remcos,...
TL;DR Oracle patched 11 flaws in the WebLogic Server Core component this July. Most allow a full...
Iran’s Islamic Revolutionary Guard Corps has issued a statement of striking military significance. According to the IRGC,...
At a Glance Actor or group Unnamed China-linked espionage group (per Symantec’s 2022 attribution) Activity type Suspected...
Mozilla has published Firefox 153.0 as a stable release, and the update finally delivers containers as a...
At a Glance Malware family Gafgyt / BASHLITE variant (DDoS bot) Threat actor Unattributed; banner references handle...
At a Glance Malware family OkoBot framework (TookPS lineage; 20+ payloads and implants) Threat actor Unattributed; suspected...
The Genesis of the Literary Litigation In 2024, a prominent coalition of American authors and publishers initiated...
An Unprecedented Autonomous Intrusion The prominent open-source model and dataset repository Hugging Face disclosed a sophisticated cyberattack...
Enterprise WSUS update servers began faltering around 13 July 2026. The disruption spread widely across corporate networks....
TL;DR Google shipped a Chrome security update on July 21, 2026. It fixes 12 vulnerabilities, and Google...
TL;DR Vitest patched a critical vulnerability rated CVSS 9.4. Browser Mode commands could read, write, or delete...
TL;DR SolarWinds fixed 15 critical SolarWinds Serv-U vulnerabilities on July 21, 2026. They allow privilege escalation, account...
TL;DR Qualys found a snap-confine privilege escalation flaw, tracked as CVE-2026-8933. It lets any local user reach...
TL;DR CISA added four flaws to its KEV catalog on July 21, 2026. The list covers critical...
At a glance Malware family TELEPUZ Threat actor Unnamed; suspected solo developer or small team running a...
TL;DR ASUS has published five security advisories covering seven vulnerabilities. They span router firmware, MyASUS driver components,...
TL;DR A public proof-of-concept now targets CVE-2026-42980, a Windows privilege escalation flaw in the NT kernel. The...
TL;DR Apache has patched three SQL injection flaws in Fineract, the open-source core banking platform. The Apache...
TL;DR Zimbra released Collaboration Suite 10.1.20 on July 20, 2026. The update fixes several Zimbra vulnerabilities, including...