Ubuntu Snap sandbox race condition lets local attackers gain root privileges
A race condition in Ubuntu's Snap sandbox initialization, tracked as CVE-2026-8933, lets local attackers escalate privileges to root on default installations.
The Latest
Adobe Acrobat browser extension flaw exposed WhatsApp chats on 329 million devices
A vulnerability chain in the Adobe Acrobat Chrome extension let any webpage silently steal WhatsApp Web chats from 329 million…
Google restricts powerful new Gemini Cyber AI to government partners only
Google DeepMind released Gemini 3.5 Flash Cyber, a specialized AI for vulnerability hunting, restricted to governments and trusted partners due…
Check Point rushes fix for actively exploited SmartConsole bypass
Check Point patched a critical SmartConsole authentication bypass under active exploitation that gives attackers full admin access to security management…
NuGet package NewJson.Net delivers game cheats inside working library fork
A trojanized Newtonsoft.Json fork on NuGet smuggles game-rigging malware inside a fully functional serialization library to evade detection.
UK AI Security Institute finds every frontier model cheats on cyber evaluations
OpenAI and Anthropic models broke rules in cybersecurity tests and failed to admit it, with cheating rates between 7.8% and…
Suno data breach exposes over 55 million user accounts and payment data
Have I Been Pwned confirms the massive breach of the AI music platform, including email addresses and partial credit card…
GlideRecord query feature turns ServiceNow sandbox escape into pre-auth RCE
CVE-2026-6875 lets attackers bypass the ServiceNow script sandbox through a JavaScript override technique, with exploitation already in the wild.
Three-country police action dismantles Kratos phishing-as-a-service empire
German and US law enforcement seized 200 servers and arrested the alleged developer of the Kratos phishing platform in Indonesia.
SharePoint flaw CVE-2026-50522 under attack after public PoC goes live
Attackers are exploiting a critical SharePoint RCE vulnerability to steal machine keys, and patching alone won't lock them out.
FakeGit campaign floods GitHub with 7,600 malicious repositories
A large-scale supply chain attack dubbed FakeGit uses thousands of deceptive GitHub repositories to distribute SmartLoader malware.
Mass scanning intensifies as WordPress wp2shell exploit goes public
Publicly released exploit code for the WordPress core wp2shell vulnerability is fueling widespread mass scanning and site takeover attempts.
Two SonicWall SMA zero-days exploited a month before disclosure
Attackers used CVE-2026-15409 and CVE-2026-15410 to compromise SonicWall SMA 1000 appliances via SSRF and code injection starting June 22.
ServiceNow sandbox escape bug now under active exploitation
Attackers are exploiting CVE-2026-6875, a critical pre-authentication RCE in the ServiceNow AI Platform, just days after disclosure.
Spotlight
Estee Lauder data breach linked to Oracle E-Business Suite flaw
Cosmetics giant Estee Lauder notifies customers of a data breach tied to a Clop-exploited Oracle E-Business Suite vulnerability.
Iran-linked actors use AI to accelerate malware and phishing operations
Iran-nexus threat groups are using generative AI for malware development, industrial control system mapping, and multilingual phishing campaigns.
Critical 7-zip vulnerability allows code execution via XZ archives
A heap buffer overflow in 7-Zip's XZ decompression lets attackers execute code when victims open crafted archive files.
Hugging face says autonomous AI agent breached its infrastructure
Hugging Face confirmed an autonomous AI agent breached its infrastructure through a malicious dataset in the company's data processing pipeline.
Features
Critical Nginx bug CVE-2026-42533 allows remote code execution via HTTP
F5 patched a critical Nginx heap buffer overflow that lets unauthenticated attackers crash workers or achieve remote code execution.
Russian intelligence hacked IP cameras to spy on NATO military logistics
Russian intelligence operatives compromised IP cameras across NATO states and Ukraine to monitor military supply movements in real time.
Post-quantum security startup pQCee raises $3.9M seed round
Singapore-based quantum-safe cybersecurity startup pQCee raises $3.9M seed round co-led by SGInnovate and Lotus One Investment.
North Korea hides OtterCookie malware inside SVG flag images in fake coding tests
North Korean threat actors embed malware payload fragments inside SVG country flag images distributed through fake developer job interviews and…
GoSerpent malware targets Southeast Asian governments and diplomats for espionage
Kaspersky uncovers GoSerpent, a Go-based backdoor targeting government and diplomatic entities in Southeast Asia since late 2025 for long-term intelligence…
SAP patches critical NetWeaver ABAP flaw with CVSS 9.9 severity rating
SAP releases July 2026 security updates for a critical memory corruption flaw in NetWeaver ABAP and two additional CVSS 9.1…
