CISA adds two Joomla extension flaws to known exploited vulnerabilities catalog
CISA added iCagenda and Balbooa Forms Joomla extension flaws to its KEV catalog, citing active exploitation and remote code execution risks.
The Latest
CISA contractor accidentally leaks AWS credentials on personal GitHub account
A CISA contractor accidentally exposed AWS access keys and admin credentials on a personal GitHub account, sparking a major security…
Okta warns of vishing attacks targeting Microsoft 365 user credentials
Okta warns of a rise in voice phishing attacks where callers impersonate IT support to steal Microsoft 365 credentials and…
Jscrambler npm package compromised in Rust infostealer attack
Malicious jscrambler npm version 8.14.0 dropped a Rust infostealer that stole credentials and crypto wallet data during installation.
New Linux kernel bug gives attackers root on servers and Android devices
The CVE-2026-46242 kernel flaw dubbed 'Bad Epoll' grants unprivileged users root access via a use-after-free in the epoll subsystem, affecting…
Hackers hijack Microsoft passkey enrollment in voice phishing blitz
The Muddled Libra threat actor uses voice phishing and fake Microsoft Entra passkey enrollment portals to gain persistent access to…
One missing header is all it takes to own a Gitea Docker instance
Attackers are actively exploiting CVE-2026-20896, a critical Gitea Docker authentication bypass that grants full repository access with a single HTTP…
AI coding assistants let researchers walk right past safety filters
Researchers achieve 100 percent jailbreak success against AI coding assistants including GitHub Copilot by decomposing harmful requests into ordinary coding…
Microsoft races to contain RoguePlanet zero-day threat across enterprise systems
Microsoft contains a zero-day vulnerability tracked as RoguePlanet that was actively exploited in enterprise environments, with CISA adding it to…
Healthcare sector becomes prime target as cybercriminals shift tactics
Healthcare organizations face a wave of ransomware and data breach attacks as cybercriminals target medical data and legacy hospital systems,…
Authentication Bypass Vulnerabilities Patched in BeyondTrust Remote Access Products
BeyondTrust released fixes for two critical pre-authentication bypass vulnerabilities in Remote Support and Privileged Remote Access products.
Microsoft Teams for macOS Bug Disrupts Screen Sharing in Government Clouds
Microsoft confirms a macOS Teams bug causing blank screens during screen sharing, with a delayed fix now expected in late…
Helix Extortion Group Targets SharePoint with Vishing and Device Code Tactics
The Helix group uses vishing and device code phishing to break into SharePoint, then exfiltrates data for extortion or sale.
GigaWiper Backdoor Blends Remote Access with Irreversible Data Destruction
GigaWiper is a modular Golang backdoor that merges remote access tools with disk wiping and fake ransomware capabilities.
Spotlight
Free Android VPN Apps Fail Basic Security Tests in Major Academic Study
A new automated testing framework reveals widespread traffic leaks, plaintext data transmission, and tracking behavior across 281 popular free Android VPN apps.
Researcher Finds Google Dialogflow CX Flaw Opened Door to Agent Hijacking
Google patched a flaw in Dialogflow CX that allowed an attacker with edit permissions on one chatbot to hijack others in the same cloud project.
Insider Negotiator Helped BlackCat Ransomware Gang Maximize Payouts
A former cybersecurity incident response employee received a 70-month prison sentence for feeding confidential victim data to the BlackCat ransomware gang to drive up extortion payments.
Dutch Police Trace Odido Telecom Hack to Local Suspects Through Phone Call
Investigators traced the Odido breach to local hackers after a Dutch-speaking caller impersonated an IT employee to gain access.
Features
Microsoft Plans to Pull Legacy OWA Light from Exchange Server
Microsoft is removing the legacy OWA Light email client from Exchange Server in August 2026, citing modern browser capabilities and…
AI Coding Assistant Bypasses Safety Filters Through Multi Step Code Tasks
Researchers discovered GitHub Copilot produces harmful content in 816 out of 816 workflow runs when dangerous requests are broken into…
Friendly Fire Attack Hijacks AI Security Agents to Run Malicious Code
Researchers demonstrated that autonomous AI coding agents from Anthropic and OpenAI will execute hidden malicious binaries when asked to review…
Recovery of Dell BIOS Passwords Enabled by Broken Encryption Scheme
Dell BIOS passwords stored with a flawed XOR cipher allow full recovery from flash dumps in milliseconds, posing risks to…
Leaked Server Exposes Mass WordPress Backdoor Operation
Researchers found an attacker's unsecured server containing 800 MB of data, revealing how a webshell brokerage compromised thousands of WordPress…
Zimbra Classic Web Client Vulnerability Allows Code Execution via Malicious Emails
A stored XSS vulnerability in Zimbra's Classic Web Client lets attackers execute malicious code when a user opens a specially…
