One-click RovoBlast exploit leaks data from Atlassian workspaces
Two firms found independent ways to turn Atlassian's Rovo assistant into a one-click data leak.
The Latest
AI slop-squatted npm packages hide WEL1DROPPER malware
Nearly 800 npm packages hide a cross-platform RAT and infostealer behind fake README instructions.
Extortion crew UNC6671 leans on personal mobiles in SaaS raids
Google ties a vishing wave against finance and legal firms to UNC6671, which calls staff on personal phones.
WordPress ships emergency fix for pre-auth XSS to RCE chain
WordPress ships an emergency fix for a pre-auth XSS chain that ends in PHP code execution.
Fake error prompts on Mac lead to wallet-draining stealer
Huntress documents a macOS ClickFix stealer that can drain crypto wallets and keychains.
Ohio healthcare tech firm reports 3.8 million record breach
A healthcare billing vendor says 3.8 million people's records were taken from its data center.
Metabase cloud hit first in CVSS 10 zero-day campaign
Attackers used an unknown Metabase flaw to grab admin access and customer data before a patch shipped.
Command injection hole in LoadMaster lands on CISA list
Federal agencies have days to patch an exploited Progress ADC bug that drew hundreds of attack attempts.
Login page quirk lets attackers seize WordPress servers remotely
A pre-auth XSS chain that needs only a crafted username ends in PHP code execution on stock installs.
Prompt injection funnels Jira tickets out of Atlassian Rovo chats
Two research teams found ways to make Atlassian's AI assistant ship Jira and Confluence data to attacker servers.
AI-assisted audit turns up a dozen Cisco router flaws
Cisco's internal review with frontier AI models found 12 SD-WAN and IOS XE bugs, three rated 9.9.
Malware pages show blank screens to scanners, traps to Mac users
Microsoft tracked a macOS ClickFix network that fingerprints visitors before serving its stealer lures.
Typosquat flood drops Sliver implants across three operating systems
A campaign of nearly 800 npm packages uses README lures and DNS tricks to deliver RATs on every platform.
Water Watch Center rallies MDR providers to defend rural utilities from state hacks
DEF CON Franklin and NRWA launch Water Watch Center to bring managed detection and response to small water utilities.
Spotlight
Same-network attacker can hijack TCP sessions via NAT flaw
NatJack attacks break the NAT trust model, letting same-network attackers hijack TCP sessions and poison DNS.
Zapscape KVM bug lets nested guests run code on the host
Zapscape, tracked as CVE-2026-64561, lets a nested KVM guest with kernel privileges escape to the host.
Container escape achieved through 18-year-old Linux SCTP bug
Tencent researchers escaped a container and reached host root through an 18-year-old SCTP use-after-free.
Swiss federal office resets 200 accounts after SharePoint intrusion
Swiss federal IT office BIT resets roughly 200 accounts after a Microsoft SharePoint credential theft.
Features
New Mexico judge brands Meta a public nuisance in $567M ruling
A New Mexico judge brands Meta a public nuisance and orders $567M paid for child harm on its platforms.
Malware borrows Windows Hello keys for persistent cloud access
Malware can borrow Windows Hello for Business keys to open a 90-day persistence channel into Entra ID.
Voicemail lures fuel AitM wave aimed at payroll inboxes
A voicemail-themed AitM phishing wave is taking over Microsoft 365 accounts to harvest payroll and finance email.
CISA adds exploited TeamCity bug to KEV with August 8 deadline
CISA flags actively exploited TeamCity flaw CVE-2026-63077, giving federal agencies until August 8 to patch.
Public exploit out for Cisco IMC flaw granting root access
A public exploit now exists for the Cisco IMC flaw that lets low-privilege users run commands as root.
Router vendor pulls firmware after ENDLESSDOORS backdoor claims
VulnCheck found a phone-home implant in Zbtlink router firmware while the vendor called it a maintenance feature.
