Do Son CVE-2026-10090 lets an edit-scoped user gain cluster-admin in Red Hat ACM for Kubernetes. Privilege escalation rated CVSS 9.9.
CVE-2026-5423 is a Neo4j GraphQL authentication bypass letting unauthenticated clients forge JWT claims and read subscription data.
PoC exploit code is public for CVE-2026-43074, a Linux kernel eventpoll flaw that gives a root shell on Pixel 10 Pro. CVSS 7.3. Details inside.
Interlock ransomware abused the legitimate Volatility3 tool to dump credentials from memory, Sophos found. Learn the attack chain and defenses.
Researchers expose the Greatness PhaaS platform, an AiTM phishing kit sold on Telegram that steals Microsoft 365 tokens past MFA.
This weekly CVE report covers 1,877 new CVEs and 6 actively exploited vulnerabilities in CISA KEV, including N-able, TeamCity, and Langflow.
A Linux SCTP kernel use-after-free (CVE-2026-64564) enables local privilege escalation and full container-to-host escape.
CVE-2026-63077, an unauthenticated RCE in JetBrains TeamCity, is exploited in the wild. PoC exploit code and full details are now public.
A BdThemes supply chain attack poisoned a plugin API feed to run silent XSS in admin browsers, creating rogue admins across WordPress sites.
Dopamine 3.0 delivers the first iOS 26 jailbreak for A12 and A13 devices, plus new exploits expanding support up to iOS 17.3.1.
Explore the new Google Wallet digital allowance feature. Parents can securely send funds to minors with comprehensive Family Link oversight.
A critical Metabase SQL injection zero-day (CVSS 10) is exploited in the wild. Unauthenticated attackers gain admin access. Patch now.
Cisco disclosed seven ClamAV vulnerabilities that let a remote attacker crash scanning via crafted files. Details are public. Patch now.
cybernewswire
Sophia Antipolis, France, 7th August 2026, CyberNewswire
The CryptoJS randomness vulnerability let attackers drain crypto wallets across 14 chains. Check if your address is exposed with the Ill Bloom checker.
WSO2 patched four critical account takeover flaws, including CVE-2026-5430 at CVSS 10 via JWT auth bypass. Details and fixes inside.
Tails 7.10.1 patches CVE-2026-64560 in the Linux kernel and expat library flaws that could let attackers deanonymize users and gain admin privileges.
Explore the latest Google Ask Maps update. This AI conversational navigation tool now handles food delivery, hotel bookings, and global travel itineraries.
Google Chrome now requires 20GB of free disk space to download Gemini Nano on-device AI models. Learn how to manage or disable this feature completely.
The SMOKE#SCREEN campaign abuses ScreenConnect RMM and Cloudflare tunnels via fake Zoom and Adobe update lures, Securonix reports.
OpenAI filed a motion to dismiss Apple's trade secret lawsuit, calling the allegations baseless and pointing to talent competition in AI hardware.
Microsoft announces the Windows 10 LTSC 2021 end of support for January 2027. Discover the Windows 10 LTSC ESU pricing and essential migration strategies.