Do Son A Network UPS Tools RCE (CVE-2026-54161) lets a malicious upsd trigger upsmon command injection as root. No patch exists yet, so mitigate now.
New pretix vulnerabilities include a critical session takeover chain (CVE-2026-13602) and an SSRF API key leak. Update to 2026.5.3 now.
cybernewswire
Melbourne, Florida, United States, 8th July 2026, CyberNewswire
APISIX authentication bypass CVE-2026-39999 lets attackers forge JWTs via algorithm confusion. APISIX 3.16.0 is affected; upgrade to 3.16.1.
Anthropic extends the Claude Fable 5 complimentary window until July 12. Discover the 50% quota limit and upcoming transition to the Usage Credits system.
Google Voice introduced premium personal paid plans starting at $10 monthly. Discover new features like number retention and AI call transcription today.
Nebula reveals a severe Android remote root exploit chain combining a Firefox vulnerability and a 15-year-old Linux kernel flaw.
SpaceXAI Grok 4.5 launch brings Claude Opus-tier intelligence with superior speed and efficiency to the global public.
The US government has approved the broad OpenAI GPT-5.6 rollout. Discover pricing, features, and release details for Sol, Terra, and Luna.
Unit 42 warns phantom squatting attacks weaponize AI hallucinated domains, with 13,229 malicious URLs and 250,000 fake domains open to registration.
A Native Messaging backdoor pairs a malicious Chrome extension with a local host to run PowerShell, escaping the browser sandbox, says D3Lab.
Ubuntu 25.10 end of life is July 9, 2026. Upgrade your system to Ubuntu 26.04 LTS today to maintain crucial security updates and system stability.
The FCC plans to roll back Broadband Consumer Labels, allowing ISPs to hide junk fees and reducing transparency for everyday internet users.
Veil#Drop malware abuses Blogspot to run PowerShell loaders and deploy PureLog Stealer in memory, dodging antivirus and file-based detection.
Censys research finds 70% of WordPress sites run end-of-life PHP. Outdated plugins and defaults leave millions of sites wide open to attack.
Researchers disclosed GhostLock (CVE-2026-43499) with public PoC code. The 15-year Linux kernel bug enables privilege escalation and container escape.
CISA added four actively exploited flaws to its KEV Catalog, including critical Joomla, Langflow, and ColdFusion bugs. Agencies must patch by July 10.
BMC patches Control-M command injection flaw CVE-2026-10539, an unauthenticated remote command injection bug rated CVSS 9.5.
A SharePoint remote code execution flaw (CVE-2026-33112) is now public with full details and PoC. A low-privilege user can run code. Patch now.
Ubiquiti's UniFi security advisory 066 patches 25 flaws, including a critical command injection (CVE-2026-50746) scoring 10.0. Update your devices now.
Discover how Google's new Android backup storage policy impacts your free cloud capacity. Learn to manage your data and avoid unexpected subscription costs.
Five months after merging his AI and space ventures, Elon Musk reveals SpaceXAI. Discover how the $2.1 trillion giant plans to build orbital data centers.