Dated vulnerability advisories and disclosure bulletins — severity, affected products, and remediation guidance.https://samithota.com/https://samithota.com/security-advisories/clicklock-macos-stealer/https://samithota.com/security-advisories/clicklock-macos-stealer/A new macOS malware, "ClickLock," actively terminates applications every 210 milliseconds to force users into re-typing passwords, which it then steals.Sat, 18 Jul 2026 09:06:07 GMTHighOpennewsclicklockSamit Hotahttps://samithota.com/security-advisories/vite-npm-packages-rat/https://samithota.com/security-advisories/vite-npm-packages-rat/A new campaign, "ViteVenom," injects seven malicious npm packages into the Vite ecosystem, utilizing a four-tier blockchain C2 to deploy a RAT.Sat, 18 Jul 2026 09:06:07 GMTHighOpennewsviteSamit Hotahttps://samithota.com/security-advisories/openssl-hollowbyte-dos/https://samithota.com/security-advisories/openssl-hollowbyte-dos/Okta's Red Team disclosed "HollowByte," an OpenSSL denial-of-service vulnerability that can freeze server memory with minimal traffic.Sat, 18 Jul 2026 09:06:07 GMTHighResolvednewsopensslSamit Hotahttps://samithota.com/security-advisories/sonicwall-sma1000-zero-days/https://samithota.com/security-advisories/sonicwall-sma1000-zero-days/Two critical remote access vulnerabilities (CVE-2026-15409, CVE-2026-15410) in SonicWall SMA1000 appliances are being actively exploited.Sat, 18 Jul 2026 09:06:06 GMTCriticalOpennewssonicwallSamit Hotahttps://samithota.com/security-advisories/morris-communications-data-breach/https://samithota.com/security-advisories/morris-communications-data-breach/Questo, parent company of Morris Communications, announced a data breach affecting personal and financial data, with notifications sent July 17, 2026.Sat, 18 Jul 2026 09:06:06 GMTHighOpennewsmorrisSamit Hotahttps://samithota.com/security-advisories/inter-con-security-data-breach-shinyhunters/https://samithota.com/security-advisories/inter-con-security-data-breach-shinyhunters/Inter-Con Security Systems Inc., a multinational private security company, disclosed a June 2026 data breach resulting from a ransomware attack, with…Sat, 18 Jul 2026 05:08:58 GMTHighOpennewsinterSamit Hotahttps://samithota.com/security-advisories/hmc-fresh-foods-data-breach/https://samithota.com/security-advisories/hmc-fresh-foods-data-breach/HMC Fresh Foods LLC, a grape processing company, has disclosed a data breach that occurred on June 5, 2026, potentially exposing personal information of…Sat, 18 Jul 2026 05:08:58 GMTHighOpennewshmcSamit Hotahttps://samithota.com/security-advisories/goddamn-ransomware-poisonx-byovd/https://samithota.com/security-advisories/goddamn-ransomware-poisonx-byovd/A new ransomware campaign, "GodDamn Ransomware," is utilizing a Bring-Your-Own-Vulnerable-Driver (BYOVD) technique with a Microsoft-signed kernel driver to…Sat, 18 Jul 2026 05:08:58 GMTCriticalOpennewsgoddamnSamit Hotahttps://samithota.com/security-advisories/ingram-content-group-data-breach-shinyhunters/https://samithota.com/security-advisories/ingram-content-group-data-breach-shinyhunters/Book distribution giant Ingram Content Group has been hit by a data breach, with the ShinyHunters extortion group claiming to have exfiltrated highly…Sat, 18 Jul 2026 05:08:58 GMTHighOpennewsingramSamit Hotahttps://samithota.com/security-advisories/ey-third-party-data-breach/https://samithota.com/security-advisories/ey-third-party-data-breach/Professional services firm Ernst & Young has disclosed a data breach originating from unauthorized access to a third-party platform, potentially exposing…Sat, 18 Jul 2026 05:08:58 GMTHighOpennewseySamit Hotahttps://samithota.com/security-advisories/abbott-laboratories-dual-cyber-incidents/https://samithota.com/security-advisories/abbott-laboratories-dual-cyber-incidents/Healthcare giant Abbott Laboratories is investigating two distinct cyber incidents affecting its legacy Exact Sciences systems and its LabCentral customer…Sat, 18 Jul 2026 05:08:58 GMTHighOpennewsabbottSamit Hotahttps://samithota.com/security-advisories/wordpress-core-rce-cve-2026-63030-cve-2026-60137/https://samithota.com/security-advisories/wordpress-core-rce-cve-2026-63030-cve-2026-60137/Two critical vulnerabilities, an unauthenticated SQL injection and an unauthenticated remote code execution flaw, have been patched in WordPress Core versions…Sat, 18 Jul 2026 05:08:58 GMTCriticalResolvednewswordpressSamit Hotahttps://samithota.com/security-advisories/golddigger-android-banking-trojan-threat/https://samithota.com/security-advisories/golddigger-android-banking-trojan-threat/The GoldDigger Android Banking Trojan is highlighted as an evolving threat, capable of credential compromise and data exposure through mobile ecosystems.Fri, 17 Jul 2026 18:32:52 GMTHighOpennewsgolddiggerSamit Hotahttps://samithota.com/security-advisories/aura-identity-protection-data-breach/https://samithota.com/security-advisories/aura-identity-protection-data-breach/An employee account at Aura, an identity protection company, was compromised via voice phishing, exposing 900,000 marketing records.Fri, 17 Jul 2026 18:32:52 GMTHighOpennewsauraSamit Hotahttps://samithota.com/security-advisories/microsoft-sharepoint-adfs-zero-days-exploited/https://samithota.com/security-advisories/microsoft-sharepoint-adfs-zero-days-exploited/Microsoft has addressed two actively exploited zero-day vulnerabilities in SharePoint Server and Active Directory Federation Services.Fri, 17 Jul 2026 18:32:52 GMTCriticalMitigatednewsmicrosoftSamit Hotahttps://samithota.com/security-advisories/new-bl4ck-sp1d3r-ransomware/https://samithota.com/security-advisories/new-bl4ck-sp1d3r-ransomware/A newly identified ransomware, BL4CK SP1D3R, has been found using encryption and double-extortion tactics, targeting Windows systems.Fri, 17 Jul 2026 14:11:52 GMTHighOpennewsnewSamit Hotahttps://samithota.com/security-advisories/oracle-ebs-auth-bypass-cve-2026-46817/https://samithota.com/security-advisories/oracle-ebs-auth-bypass-cve-2026-46817/CISA added a critical Oracle E-Business Suite vulnerability (CVE-2026-46817) allowing unauthenticated remote takeover to its KEV catalog due to active…Fri, 17 Jul 2026 14:11:52 GMTCriticalMitigatednewsoracleSamit Hotahttps://samithota.com/security-advisories/nichirei-cyberattack/https://samithota.com/security-advisories/nichirei-cyberattack/Japanese food and logistics giant Nichirei Corp. confirmed a cyberattack causing system failures and operational disruptions across its group.Fri, 17 Jul 2026 14:11:52 GMTHighOpennewsnichireiSamit Hotahttps://samithota.com/security-advisories/locus-technologies-data-breach/https://samithota.com/security-advisories/locus-technologies-data-breach/Environmental software company Locus Technologies has disclosed a data breach resulting in the exposure of Social Security Numbers for an undisclosed number…Fri, 17 Jul 2026 09:26:34 GMTHighOpennewslocusSamit Hotahttps://samithota.com/security-advisories/fairlife-production-halt-cyberattack/https://samithota.com/security-advisories/fairlife-production-halt-cyberattack/Dairy company Fairlife, owned by Coca-Cola, has temporarily suspended U.S. production operations after unauthorized access to its production-related systems.Fri, 17 Jul 2026 09:26:34 GMTHighOpennewsfairlifeSamit Hotahttps://samithota.com/security-advisories/romania-ancpi-cyberattack/https://samithota.com/security-advisories/romania-ancpi-cyberattack/A cyberattack has severely disrupted Romania's National Agency for Cadastre and Land Registration (ANCPI), with threat actors claiming data exfiltration and…Fri, 17 Jul 2026 09:26:34 GMTHighOpennewsromaniaSamit Hotahttps://samithota.com/security-advisories/asyncapi-npm-supply-chain-attack/https://samithota.com/security-advisories/asyncapi-npm-supply-chain-attack/Attackers leveraged a GitHub Actions workflow to inject credential-stealing malware into AsyncAPI npm packages with millions of weekly downloads.Fri, 17 Jul 2026 09:26:34 GMTCriticalMitigatednewsasyncapiSamit Hotahttps://samithota.com/security-advisories/kudankulam-nuclear-plant-data-breach/https://samithota.com/security-advisories/kudankulam-nuclear-plant-data-breach/Ransomware group World Leaks has published a significant cache of files linked to India's Kudankulam Nuclear Power Plant, originating from Reliance Group.Fri, 17 Jul 2026 09:26:34 GMTCriticalOpennewskudankulamSamit Hotahttps://samithota.com/security-advisories/cve-2026-39808-fortisandbox/https://samithota.com/security-advisories/cve-2026-39808-fortisandbox/An unauthenticated OS command injection vulnerability in Fortinet FortiSandbox (CVE-2026-39808) poses critical risk, allowing unauthorized code execution via…Fri, 17 Jul 2026 09:25:18 GMTCriticalOpenkevfortinetSamit Hotahttps://samithota.com/security-advisories/cve-2026-25089-fortisandbox/https://samithota.com/security-advisories/cve-2026-25089-fortisandbox/A critical unauthenticated OS command injection vulnerability (CVE-2026-25089) in Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS allows…Fri, 17 Jul 2026 09:24:48 GMTCriticalOpenkevfortinetSamit Hotahttps://samithota.com/security-advisories/cve-2026-58644-sharepoint/https://samithota.com/security-advisories/cve-2026-58644-sharepoint/A critical deserialization vulnerability (CVE-2026-58644) in Microsoft SharePoint Server is under active exploitation, enabling unauthenticated remote code…Thu, 16 Jul 2026 18:38:08 GMTCriticalOpenkevmicrosoftSamit Hotahttps://samithota.com/security-advisories/hijacked-brazilian-gov-websites-phantom-enigma/https://samithota.com/security-advisories/hijacked-brazilian-gov-websites-phantom-enigma/A new campaign, "PhantomEnigma," has compromised over 20 Brazilian government websites, turning them into malware delivery channels.Thu, 16 Jul 2026 14:32:36 GMTHighOpennewshijackedSamit Hotahttps://samithota.com/security-advisories/spirals-ransomware-rapid-encryption/https://samithota.com/security-advisories/spirals-ransomware-rapid-encryption/A new ransomware variant, "Spirals," is capable of encrypting victim networks rapidly, often within 24 hours of infiltration.Thu, 16 Jul 2026 14:32:36 GMTHighOpennewsspiralsSamit Hotahttps://samithota.com/security-advisories/microsoft-hyper-v-netvsc-lpe-cve-2026-54129/https://samithota.com/security-advisories/microsoft-hyper-v-netvsc-lpe-cve-2026-54129/A local privilege escalation vulnerability (CVE-2026-54129) in Microsoft Hyper-V's netvsc.sys driver allows guest VM compromise.Thu, 16 Jul 2026 14:32:36 GMTHighMitigatednewsmicrosoftSamit Hotahttps://samithota.com/security-advisories/sap-netweaver-abap-cvss-9-9-flaw/https://samithota.com/security-advisories/sap-netweaver-abap-cvss-9-9-flaw/SAP has patched CVE-2026-44747, a critical 9.9 CVSS vulnerability in NetWeaver ABAP allowing data exposure or modification.Thu, 16 Jul 2026 14:32:36 GMTCriticalMitigatednewssapSamit Hotahttps://samithota.com/security-advisories/partnered-health-australia-data-breach/https://samithota.com/security-advisories/partnered-health-australia-data-breach/Partnered Health, an Australian healthcare provider, experienced a data breach exposing medical records of patients.Thu, 16 Jul 2026 14:32:36 GMTHighOpennewspartneredSamit Hotahttps://samithota.com/security-advisories/zoom-windows-account-takeover-cve-2026-53412/https://samithota.com/security-advisories/zoom-windows-account-takeover-cve-2026-53412/A critical vulnerability in Zoom Workplace for Windows (CVE-2026-53412) enables unauthenticated attackers to hijack accounts.Thu, 16 Jul 2026 14:32:36 GMTCriticalMitigatednewszoomSamit Hotahttps://samithota.com/security-advisories/vmware-avi-critical-auth-bypass/https://samithota.com/security-advisories/vmware-avi-critical-auth-bypass/A critical authentication bypass vulnerability (CVE-2026-47865) affecting VMware Avi Load Balancer allows unauthenticated network access to the control plane.Thu, 16 Jul 2026 09:34:03 GMTCriticalResolvednewsvmwareSamit Hotahttps://samithota.com/security-advisories/easypak-data-breach/https://samithota.com/security-advisories/easypak-data-breach/Packaging manufacturer Easypak confirmed a data breach, with the Akira ransomware group claiming responsibility for stealing 67GB of corporate and personal…Thu, 16 Jul 2026 09:34:03 GMTHighOpennewseasypakSamit Hotahttps://samithota.com/security-advisories/legacyhive-windows-privilege-escalation/https://samithota.com/security-advisories/legacyhive-windows-privilege-escalation/A new Windows zero-day vulnerability, dubbed 'LegacyHive,' has been publicly disclosed, enabling local privilege escalation on patched systems.Thu, 16 Jul 2026 09:34:03 GMTHighOpennewslegacyhiveSamit Hotahttps://samithota.com/security-advisories/cisa-kev-knx-oracle-ebs/https://samithota.com/security-advisories/cisa-kev-knx-oracle-ebs/CISA has added CVE-2023-4346 affecting KNX Association and CVE-2026-46817 affecting Oracle E-Business Suite to its Known Exploited Vulnerabilities Catalog.Thu, 16 Jul 2026 05:24:49 GMTHighOpennewscisaSamit Hotahttps://samithota.com/security-advisories/google-chrome-multiple-vulnerabilities-update/https://samithota.com/security-advisories/google-chrome-multiple-vulnerabilities-update/Google has released an urgent update for Chrome, version 150.0.7871.124/.125, patching numerous vulnerabilities including remote code execution and…Thu, 16 Jul 2026 05:24:49 GMTHighResolvednewsgoogleSamit Hotahttps://samithota.com/security-advisories/servicenow-ai-rce-vulnerability/https://samithota.com/security-advisories/servicenow-ai-rce-vulnerability/A critical remote code execution flaw in the ServiceNow AI platform, CVE-2026-6875, has been patched, allowing unauthenticated attackers to execute arbitrary…Thu, 16 Jul 2026 05:24:49 GMTCriticalMitigatednewsservicenowSamit Hotahttps://samithota.com/security-advisories/cve-2023-4346-knx-protocol-connection-authorization-option-1/https://samithota.com/security-advisories/cve-2023-4346-knx-protocol-connection-authorization-option-1/An overly restrictive account lockout mechanism in KNX Protocol Connection Authorization Option 1 allows attackers to purge devices and lock them.Wed, 15 Jul 2026 18:36:25 GMTHighOpenkevknx-associationSamit Hotahttps://samithota.com/security-advisories/beyondtrust-critical-patches/https://samithota.com/security-advisories/beyondtrust-critical-patches/BeyondTrust has released patches for two critical authentication bypass vulnerabilities found in its Remote Support and Privileged Remote Access products,…Wed, 15 Jul 2026 14:19:34 GMTCriticalResolvednewsbeyondtrustSamit Hotahttps://samithota.com/security-advisories/zimbra-email-service-vulnerability/https://samithota.com/security-advisories/zimbra-email-service-vulnerability/A critical security flaw in Zimbra's Classic Web Client allows specially crafted emails to execute malicious code within a user's session, potentially…Wed, 15 Jul 2026 14:19:34 GMTCriticalOpennewszimbraSamit Hotahttps://samithota.com/security-advisories/deutsche-bank-third-party-incident/https://samithota.com/security-advisories/deutsche-bank-third-party-incident/Deutsche Bank confirmed a cybersecurity incident involving a third-party service provider after the Unsafe ransomware group claimed to have breached the…Wed, 15 Jul 2026 14:19:34 GMTHighOpennewsdeutscheSamit Hotahttps://samithota.com/security-advisories/cisa-four-kev-sonicwall-microsoft/https://samithota.com/security-advisories/cisa-four-kev-sonicwall-microsoft/CISA has added four new vulnerabilities, two affecting SonicWall SMA1000 appliances and two impacting Microsoft Active Directory Federation Services and…Wed, 15 Jul 2026 14:19:34 GMTCriticalOpennewscisaSamit Hotahttps://samithota.com/security-advisories/global-it-outage-zero-day-attack/https://samithota.com/security-advisories/global-it-outage-zero-day-attack/A coordinated global IT outage, suspected to be a zero-day cyberattack, has paralyzed critical infrastructure worldwide, affecting major financial…Wed, 15 Jul 2026 14:19:34 GMTCriticalOpennewsglobalSamit Hotahttps://samithota.com/security-advisories/china-roundcube-espionage/https://samithota.com/security-advisories/china-roundcube-espionage/Proofpoint warns of UNK_MassTraction, a China-linked threat actor, actively exploiting multiple vulnerabilities in Roundcube email servers for cyberespionage…Wed, 15 Jul 2026 09:27:21 GMTHighOpennewschinaSamit Hotahttps://samithota.com/security-advisories/microsoft-july-2026-patch-tuesday/https://samithota.com/security-advisories/microsoft-july-2026-patch-tuesday/Microsoft's latest Patch Tuesday delivers crucial security updates, including fixes for the actively exploited "RoguePlanet" flaw and a Windows Cryptographic…Wed, 15 Jul 2026 09:27:21 GMTCriticalMitigatednewsmicrosoftSamit Hotahttps://samithota.com/security-advisories/cve-2026-15410-sma1000-appliances/https://samithota.com/security-advisories/cve-2026-15410-sma1000-appliances/A code injection vulnerability (CVE-2026-15410) in SonicWall SMA1000 appliances could allow remote authenticated administrators to execute OS commands.Wed, 15 Jul 2026 09:26:23 GMTHighOpenkevsonicwallSamit Hotahttps://samithota.com/security-advisories/cve-2026-15409-sma1000-appliances/https://samithota.com/security-advisories/cve-2026-15409-sma1000-appliances/A critical server-side request forgery vulnerability (CVE-2026-15409) in SonicWall SMA1000 Appliances requires immediate mitigation to prevent potential…Wed, 15 Jul 2026 09:26:13 GMTCriticalOpenkevsonicwallSamit Hotahttps://samithota.com/security-advisories/cve-2026-56164-sharepoint-server/https://samithota.com/security-advisories/cve-2026-56164-sharepoint-server/An actively exploited missing authentication vulnerability (CVE-2026-56164) in Microsoft SharePoint Server allows unauthenticated privilege elevation,…Wed, 15 Jul 2026 09:26:01 GMTMediumOpenkevmicrosoftSamit Hotahttps://samithota.com/security-advisories/cve-2026-56155-active-directory-federation-services/https://samithota.com/security-advisories/cve-2026-56155-active-directory-federation-services/An actively exploited zero-day privilege elevation vulnerability in Microsoft Active Directory Federation Services (CVE-2026-56155) demands immediate patching…Tue, 14 Jul 2026 18:36:03 GMTHighOpenkevmicrosoftSamit Hotahttps://samithota.com/security-advisories/tenda-router-backdoor/https://samithota.com/security-advisories/tenda-router-backdoor/An undocumented authentication backdoor (CVE-2026-11405) has been discovered in several Tenda router models, granting unauthorized administrative access.Tue, 14 Jul 2026 14:23:35 GMTCriticalOpennewstendaSamit Hotahttps://samithota.com/security-advisories/dhs-hsin-false-positives/https://samithota.com/security-advisories/dhs-hsin-false-positives/The U.S. Department of Homeland Security's Homeland Security Information Network (HSIN) was breached after personnel twice dismissed signs of intruders as…Tue, 14 Jul 2026 14:23:35 GMTHighOpennewsdhsSamit Hotahttps://samithota.com/security-advisories/nihon-kotsu-cyberattack/https://samithota.com/security-advisories/nihon-kotsu-cyberattack/Japan's largest taxi and chauffeur operator, Nihon Kotsu, experienced a significant malware infection, leading to a shutdown of critical IT systems.Tue, 14 Jul 2026 14:23:35 GMTHighOpennewsnihonSamit Hotahttps://samithota.com/security-advisories/jadepuffer-autonomous-ransomware/https://samithota.com/security-advisories/jadepuffer-autonomous-ransomware/Researchers have profiled JadePuffer, an autonomous ransomware operation leveraging Large Language Models to conduct intrusions and exploit CVE-2025-3248 in…Tue, 14 Jul 2026 14:23:35 GMTCriticalOpennewsjadepufferSamit Hotahttps://samithota.com/security-advisories/treasury-sanctions-1vpns-ransomware/https://samithota.com/security-advisories/treasury-sanctions-1vpns-ransomware/The U.S. Treasury Department has sanctioned 1VPNS and two individuals for providing infrastructure and tools that enable ransomware operations against…Tue, 14 Jul 2026 09:21:56 GMTInformationalOpennewstreasurySamit Hotahttps://samithota.com/security-advisories/oauth-client-id-spoofing-microsoft-entra/https://samithota.com/security-advisories/oauth-client-id-spoofing-microsoft-entra/Threat actors are employing a novel OAuth client ID spoofing technique to collect Microsoft Entra user data without triggering typical security alerts.Tue, 14 Jul 2026 09:21:56 GMTHighOpennewsoauthSamit Hotahttps://samithota.com/security-advisories/cisa-kev-cisco-ios-csrf-cve-2008-4128/https://samithota.com/security-advisories/cisa-kev-cisco-ios-csrf-cve-2008-4128/CISA has added an old Cisco IOS Cross-Site Request Forgery vulnerability (CVE-2008-4128) to its KEV catalog due to active exploitation.Tue, 14 Jul 2026 09:21:56 GMTCriticalOpennewscisaSamit Hotahttps://samithota.com/security-advisories/intercon-security-data-breach/https://samithota.com/security-advisories/intercon-security-data-breach/Inter-Con Security Systems, a multinational private security company, is under investigation following claims by ShinyHunters of breaching 2.7 million records.Tue, 14 Jul 2026 09:21:56 GMTHighOpennewsinterconSamit Hotahttps://samithota.com/security-advisories/forg365-microsoft365-phaas/https://samithota.com/security-advisories/forg365-microsoft365-phaas/A new phishing-as-a-service (PhaaS) operation, Forg365, is actively targeting Microsoft 365 tenants with device code phishing and adversary-in-the-middle…Tue, 14 Jul 2026 05:14:12 GMTHighOpennewsforg365Samit Hotahttps://samithota.com/security-advisories/nsa-cisa-russian-router-targeting/https://samithota.com/security-advisories/nsa-cisa-russian-router-targeting/NSA, CISA, and international partners issued a joint advisory detailing ongoing Russian FSB exploitation of poorly configured routers targeting critical…Tue, 14 Jul 2026 05:14:12 GMTHighOpennewsnsaSamit Hotahttps://samithota.com/security-advisories/lidl-online-shop-data-breach/https://samithota.com/security-advisories/lidl-online-shop-data-breach/Lidl has informed online shop customers in Germany, Belgium, and the Netherlands of a data breach at an external IT service provider.Tue, 14 Jul 2026 05:14:12 GMTMediumOpennewslidlSamit Hotahttps://samithota.com/security-advisories/injective-labs-supply-chain-compromise/https://samithota.com/security-advisories/injective-labs-supply-chain-compromise/Blockchain software developer Injective Labs experienced a supply chain compromise involving malicious npm packages that exfiltrated crypto wallet keys.Tue, 14 Jul 2026 05:14:12 GMTCriticalOpennewsinjectiveSamit Hotahttps://samithota.com/security-advisories/moody-bible-institute-data-breach/https://samithota.com/security-advisories/moody-bible-institute-data-breach/Moody Bible Institute has disclosed a data breach affecting over 2.3 million individuals, with the ShinyHunters group publishing stolen data.Tue, 14 Jul 2026 05:14:12 GMTHighOpennewsmoodySamit Hotahttps://samithota.com/security-advisories/cve-2008-4128-ios/https://samithota.com/security-advisories/cve-2008-4128-ios/CISA warns of active exploitation of CVE-2008-4128, a critical Cross-Site Request Forgery vulnerability in Cisco IOS 12.4, by state-sponsored actors.Mon, 13 Jul 2026 18:54:22 GMTMediumOpenkevciscoSamit Hotahttps://samithota.com/security-advisories/eclective-ie-m3rx-ransomware/https://samithota.com/security-advisories/eclective-ie-m3rx-ransomware/Irish organization eclective.ie has fallen victim to a ransomware attack by the m3rx group, underscoring ongoing ransomware threats.Mon, 13 Jul 2026 15:21:11 GMTHighOpennewseclectiveSamit Hotahttps://samithota.com/security-advisories/winfsp-integer-overflow-vulnerability/https://samithota.com/security-advisories/winfsp-integer-overflow-vulnerability/A critical integer overflow vulnerability (CVE-2026-7162) in WinFsp, an open-source Windows file system software, allows attackers to achieve system-level…Mon, 13 Jul 2026 15:21:11 GMTHighMitigatednewswinfspSamit Hotahttps://samithota.com/security-advisories/latvijas-valsts-mezi-ransomware/https://samithota.com/security-advisories/latvijas-valsts-mezi-ransomware/Latvia's state-owned forestry company, Latvijas Valsts Meži, was hit by a ransomware attack that disrupted systems and led to the leakage of 44GB of internal…Mon, 13 Jul 2026 15:21:11 GMTCriticalOpennewslatvijasSamit Hotahttps://samithota.com/security-advisories/centers-laboratory-data-breach/https://samithota.com/security-advisories/centers-laboratory-data-breach/Healthcare diagnostics provider Centers Laboratory disclosed a data breach exposing personal and medical information of over 540,000 individuals.Mon, 13 Jul 2026 15:21:11 GMTHighOpennewscentersSamit Hotahttps://samithota.com/security-advisories/joomla-extension-rce-cisa-kev/https://samithota.com/security-advisories/joomla-extension-rce-cisa-kev/Critical remote code execution vulnerabilities in Joomla's iCagenda and Balbooa Forms extensions are being actively exploited in the wild.Mon, 13 Jul 2026 15:21:11 GMTCriticalOpennewsjoomlaSamit Hotahttps://samithota.com/security-advisories/eu-denounces-russia-cyber-ecosystem/https://samithota.com/security-advisories/eu-denounces-russia-cyber-ecosystem/The European Union and its member states have denounced Russia's malicious cyber ecosystem, identifying the FSB's 16th Centre as controlling groups like TURLA.Mon, 13 Jul 2026 10:38:52 GMTCriticalOpennewseuSamit Hotahttps://samithota.com/security-advisories/aflac-customer-data-breach/https://samithota.com/security-advisories/aflac-customer-data-breach/Insurance giant Aflac disclosed a breach affecting its Japan subsidiary, exposing personal and bank account data for approximately 4.38 million customers.Mon, 13 Jul 2026 10:38:52 GMTHighOpennewsaflacSamit Hotahttps://samithota.com/security-advisories/shinyhunters-oracle-peoplesoft-nissan-breach/https://samithota.com/security-advisories/shinyhunters-oracle-peoplesoft-nissan-breach/The ShinyHunters group exploited an Oracle PeopleSoft vulnerability to breach over 100 organizations, including Nissan, exfiltrating sensitive employee data.Mon, 13 Jul 2026 10:38:52 GMTCriticalOpennewsshinyhuntersSamit Hotahttps://samithota.com/security-advisories/sharepoint-rce-cve-2026-45659-kev/https://samithota.com/security-advisories/sharepoint-rce-cve-2026-45659-kev/CISA has added a high-severity remote code execution vulnerability in Microsoft SharePoint Server to its KEV catalog due to active exploitation.Mon, 13 Jul 2026 10:38:52 GMTHighMitigatednewssharepointSamit Hotahttps://samithota.com/security-advisories/citrix-netscaler-cve-2026-8451/https://samithota.com/security-advisories/citrix-netscaler-cve-2026-8451/A critical memory overread vulnerability in Citrix NetScaler ADC and Gateway appliances, similar to CitrixBleed, is being actively exploited.Mon, 13 Jul 2026 10:38:52 GMTCriticalOpennewscitrixSamit Hotahttps://samithota.com/security-advisories/jinher-oa-sql-injection-cve-2026-15517/https://samithota.com/security-advisories/jinher-oa-sql-injection-cve-2026-15517/Jinher OA version 1.0 contains an unauthenticated SQL injection vulnerability (CVE-2026-15517) allowing remote arbitrary SQL command execution.Mon, 13 Jul 2026 05:52:50 GMTHighOpennewsjinherSamit Hotahttps://samithota.com/security-advisories/accenture-source-code-breach/https://samithota.com/security-advisories/accenture-source-code-breach/A threat actor claims to have breached Accenture, exfiltrating over 35GB of source codes.Mon, 13 Jul 2026 05:52:50 GMTCriticalOpennewsaccentureSamit Hotahttps://samithota.com/security-advisories/eureka-construction-titan-ransomware/https://samithota.com/security-advisories/eureka-construction-titan-ransomware/US-based Eureka Construction INC suffers a ransomware attack by the Titan group, leading to a data breach.Mon, 13 Jul 2026 05:52:50 GMTHighOpennewseurekaSamit Hotahttps://samithota.com/security-advisories/allied-plumbing-heating-qilin-ransomware/https://samithota.com/security-advisories/allied-plumbing-heating-qilin-ransomware/Allied Plumbing & Heating, a New Hampshire-based organization, has fallen victim to a ransomware attack orchestrated by the Qilin group.Sun, 12 Jul 2026 14:03:30 GMTHighOpennewsalliedSamit Hotahttps://samithota.com/security-advisories/cisa-langflow-cve-2026-55255-kev/https://samithota.com/security-advisories/cisa-langflow-cve-2026-55255-kev/CISA has added an actively exploited Langflow Authorization Bypass vulnerability, CVE-2026-55255, to its Known Exploited Vulnerabilities Catalog.Sun, 12 Jul 2026 14:03:30 GMTHighOpennewscisaSamit Hotahttps://samithota.com/security-advisories/adobe-coldfusion-cve-2026-48282-exploited/https://samithota.com/security-advisories/adobe-coldfusion-cve-2026-48282-exploited/A critical vulnerability, CVE-2026-48282, in Adobe ColdFusion is being actively exploited in attacks, allowing remote code execution.Sun, 12 Jul 2026 14:03:30 GMTCriticalOpennewsadobeSamit Hotahttps://samithota.com/security-advisories/jadepuffer-agentic-ransomware/https://samithota.com/security-advisories/jadepuffer-agentic-ransomware/The Sysdig Threat Research Team has uncovered JadePuffer, the first documented instance of agentic ransomware, fully automating attacks using an LLM.Sun, 12 Jul 2026 14:03:30 GMTCriticalOpennewsjadepufferSamit Hotahttps://samithota.com/security-advisories/rockstar-games-data-breach/https://samithota.com/security-advisories/rockstar-games-data-breach/Rockstar Games confirmed a data breach affecting corporate assets, with ShinyHunters claiming responsibility and seeking a ransom.Sun, 12 Jul 2026 14:03:30 GMTHighOpennewsrockstarSamit Hotahttps://samithota.com/security-advisories/darksword-ios-spyware-deployment/https://samithota.com/security-advisories/darksword-ios-spyware-deployment/A sophisticated iOS spyware named DarkSword has been found in active deployment, targeting hundreds of millions of iOS devices globally.Sun, 12 Jul 2026 14:03:30 GMTCriticalMitigatednewsdarkswordSamit Hotahttps://samithota.com/security-advisories/eleveo-improper-authorization-cves/https://samithota.com/security-advisories/eleveo-improper-authorization-cves/Multiple improper authorization vulnerabilities (CVE-2026-15474, CVE-2026-15472) in Eleveo Call Recording Software 9.7.0 allow remote attacks.Sun, 12 Jul 2026 09:23:53 GMTHighOpennewseleveoSamit Hotahttps://samithota.com/security-advisories/zimbra-stored-xss-fix/https://samithota.com/security-advisories/zimbra-stored-xss-fix/Zimbra has released a patch for its Collaboration Suite (ZCS) 10.1.19 to address a stored cross-site scripting (XSS) vulnerability in the Classic Web Client.Sun, 12 Jul 2026 09:23:53 GMTHighResolvednewszimbraSamit Hotahttps://samithota.com/security-advisories/openclaw-whatsapp-rce/https://samithota.com/security-advisories/openclaw-whatsapp-rce/Multiple high-severity flaws in the OpenClaw AI coding assistant allow remote code execution through specially crafted WhatsApp messages.Sun, 12 Jul 2026 09:23:53 GMTCriticalOpennewsopenclawSamit Hotahttps://samithota.com/security-advisories/conduent-health-data-breach/https://samithota.com/security-advisories/conduent-health-data-breach/A significant data breach at Conduent has exposed the personal health information of over 25 million individuals in Texas and Oregon.Sun, 12 Jul 2026 09:23:53 GMTHighOpennewsconduentSamit Hotahttps://samithota.com/security-advisories/dell-bios-cve-2026-40639/https://samithota.com/security-advisories/dell-bios-cve-2026-40639/A critical vulnerability in Dell BIOS allows attackers to recover administrator and user passwords from SPI flash in milliseconds due to a broken encryption…Sun, 12 Jul 2026 09:23:53 GMTCriticalMitigatednewsdellSamit Hotahttps://samithota.com/security-advisories/wpshellstorm-backdooring-wordpress/https://samithota.com/security-advisories/wpshellstorm-backdooring-wordpress/An exposed cybercrime server linked to WP SHELLSTORM has revealed the compromise of thousands of WordPress sites through outdated plugins and injected…Sat, 11 Jul 2026 18:14:17 GMTHighOpennewswpshellstormSamit Hotahttps://samithota.com/security-advisories/jscrambler-npm-infostealer/https://samithota.com/security-advisories/jscrambler-npm-infostealer/Version 8.14.0 of the JScrambler npm package was compromised to silently deploy a native Rust-based infostealer during installation across Windows, macOS, and…Sat, 11 Jul 2026 18:14:17 GMTCriticalMitigatednewsjscramblerSamit Hotahttps://samithota.com/security-advisories/vect-teampcp-ransomware-alliance/https://samithota.com/security-advisories/vect-teampcp-ransomware-alliance/Sophos X-Ops has uncovered a new alliance between the ransomware group Vect and cybercriminal outfit TeamPCP, combining their expertise for efficient…Sat, 11 Jul 2026 18:14:17 GMTHighOpennewsvectSamit Hotahttps://samithota.com/security-advisories/wp-shellstorm-backdoor/https://samithota.com/security-advisories/wp-shellstorm-backdoor/An exposed cybercrime server linked to WP SHELLSTORM has revealed the compromise of thousands of WordPress sites through outdated plugins and injected…Sat, 11 Jul 2026 18:14:17 GMTHighOpennewswpSamit Hotahttps://samithota.com/security-advisories/weedhack-minecraft-malware/https://samithota.com/security-advisories/weedhack-minecraft-malware/A new malware-as-a-service, "WeedHack," is being distributed disguised as Minecraft clients or mods to steal system information, passwords, and other…Sat, 11 Jul 2026 18:14:17 GMTHighOpennewsweedhackSamit Hotahttps://samithota.com/security-advisories/gitea-docker-auth-bypass/https://samithota.com/security-advisories/gitea-docker-auth-bypass/Attackers are leveraging a critical authentication bypass vulnerability within the official Gitea Docker image to hijack instances and impersonate users.Sat, 11 Jul 2026 18:14:17 GMTCriticalOpennewsgiteaSamit Hotahttps://samithota.com/security-advisories/linux-fuse-page-cache-overflow/https://samithota.com/security-advisories/linux-fuse-page-cache-overflow/A critical local privilege escalation (LPE) vulnerability in the Linux kernel's FUSE subsystem allows unprivileged local attackers to gain root privileges.Sat, 11 Jul 2026 14:00:50 GMTCriticalResolvednewslinuxSamit Hotahttps://samithota.com/security-advisories/novo-nordisk-ai-ml-asset-theft/https://samithota.com/security-advisories/novo-nordisk-ai-ml-asset-theft/Novo Nordisk confirmed a breach and data exfiltration, with FulcrumSec claiming theft of proprietary AI models and research assets.Sat, 11 Jul 2026 14:00:50 GMTHighOpennewsnovoSamit Hotahttps://samithota.com/security-advisories/oracle-ebs-unauthenticated-rce/https://samithota.com/security-advisories/oracle-ebs-unauthenticated-rce/A critical unauthenticated Remote Code Execution (RCE) vulnerability in Oracle E-Business Suite Payments module is under active exploitation.Sat, 11 Jul 2026 14:00:50 GMTCriticalOpennewsoracleSamit Hotahttps://samithota.com/security-advisories/dhs-hsin-compromise/https://samithota.com/security-advisories/dhs-hsin-compromise/The U.S. Department of Homeland Security's HSIN, a platform for interagency coordination, was compromised by an unidentified threat actor.Sat, 11 Jul 2026 14:00:50 GMTHighOpennewsdhsSamit Hotahttps://samithota.com/security-advisories/instructure-shinyhunters-data-breach/https://samithota.com/security-advisories/instructure-shinyhunters-data-breach/Edtech giant Instructure, behind the Canvas LMS, experienced a data breach with ShinyHunters accessing user data and defacing pages.Sat, 11 Jul 2026 14:00:49 GMTHighOpennewsinstructureSamit Hotahttps://samithota.com/security-advisories/cisa-kev-icagenda-balbooa-forms/https://samithota.com/security-advisories/cisa-kev-icagenda-balbooa-forms/CISA has added two new unrestricted file upload vulnerabilities in iCagenda and Balbooa Forms to its Known Exploited Vulnerabilities Catalog due to active…Sat, 11 Jul 2026 11:51:16 GMTHighOpennewscisaSamit Hotahttps://samithota.com/security-advisories/sr-bancorp-mercadien-data-breach/https://samithota.com/security-advisories/sr-bancorp-mercadien-data-breach/SR Bancorp's vendor, Mercadien, P.C. CPAs, experienced a data breach exposing sensitive Somerset Regal Bank customer information including SSNs and account…Sat, 11 Jul 2026 11:51:16 GMTHighOpennewssrSamit Hotahttps://samithota.com/security-advisories/argentine-football-association-data-breach/https://samithota.com/security-advisories/argentine-football-association-data-breach/The Argentine Football Association experienced a significant cyberattack leading to database leaks and unauthorized communications, likely due to infostealer…Sat, 11 Jul 2026 11:51:16 GMTHighOpennewsargentineSamit Hotahttps://samithota.com/security-advisories/frontier-airlines-data-breach/https://samithota.com/security-advisories/frontier-airlines-data-breach/Frontier Airlines confirmed a data breach on or about July 9, 2026, affecting customers with potentially exposed Social Security numbers.Sat, 11 Jul 2026 11:51:16 GMTHighOpennewsfrontierSamit Hotahttps://samithota.com/security-advisories/progress-sharefile-shutdown-order/https://samithota.com/security-advisories/progress-sharefile-shutdown-order/Progress Software issued an urgent advisory for ShareFile customers to shut down on-premises Storage Zone Controllers due to a credible security threat.Sat, 11 Jul 2026 11:51:16 GMTCriticalOpennewsprogressSamit Hotahttps://samithota.com/security-advisories/cisa-aws-govcloud-credential-leak/https://samithota.com/security-advisories/cisa-aws-govcloud-credential-leak/CISA revealed a contractor exposed AWS GovCloud credentials on GitHub, highlighting the agency's unpreparedness with its own incident response playbook.Sat, 11 Jul 2026 11:51:16 GMTHighResolvednewscisaSamit Hotahttps://samithota.com/security-advisories/u-boot-signature-verification-flaws/https://samithota.com/security-advisories/u-boot-signature-verification-flaws/Binarly researchers disclosed six vulnerabilities in the U-Boot bootloader, including arbitrary code execution flaws that could enable stealthy firmware…Sat, 11 Jul 2026 05:27:23 GMTCriticalOpennewsuSamit Hotahttps://samithota.com/security-advisories/django-geodjango-sql-injection-exploitation/https://samithota.com/security-advisories/django-geodjango-sql-injection-exploitation/A high-severity SQL injection vulnerability (CVE-2026-1207) in Django's GeoDjango GIS module is now actively exploited, affecting applications with a PostGIS…Sat, 11 Jul 2026 05:27:23 GMTHighOpennewsdjangoSamit Hotahttps://samithota.com/security-advisories/oracle-peoplesoft-zero-day-exploitation-naic/https://samithota.com/security-advisories/oracle-peoplesoft-zero-day-exploitation-naic/A new zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft is under active exploitation, affecting approximately 100 organizations, including NAIC.Sat, 11 Jul 2026 05:27:23 GMTCriticalOpennewsoracleSamit Hotahttps://samithota.com/security-advisories/foxconn-north-america-nitrogen-ransomware/https://samithota.com/security-advisories/foxconn-north-america-nitrogen-ransomware/The Nitrogen ransomware group claims to have stolen 8 terabytes of sensitive engineering documents and client schematics from Foxconn's North America…Sat, 11 Jul 2026 05:27:23 GMTCriticalOpennewsfoxconnSamit Hotahttps://samithota.com/security-advisories/medtronic-data-breach/https://samithota.com/security-advisories/medtronic-data-breach/Medical device giant Medtronic confirms a data breach impacting nearly 4 million individuals, with personal and health information exposed.Sat, 11 Jul 2026 05:27:23 GMTHighOpennewsmedtronicSamit Hotahttps://samithota.com/security-advisories/cve-2026-48939-icagenda/https://samithota.com/security-advisories/cve-2026-48939-icagenda/An unrestricted file upload vulnerability (CVE-2026-48939) in iCagenda for Joomla allows unauthenticated remote code execution and is actively exploited.Sat, 11 Jul 2026 05:26:03 GMTCriticalOpenkevicagendaSamit Hotahttps://samithota.com/security-advisories/cve-2026-56291-forms/https://samithota.com/security-advisories/cve-2026-56291-forms/A critical unrestricted file upload vulnerability in Balbooa Forms (CVE-2026-56291) allows unauthenticated RCE, demanding urgent remediation.Sat, 11 Jul 2026 05:25:41 GMTCriticalOpenkevbalbooaSamit Hotahttps://samithota.com/security-advisories/langflow-rce-ai-agent-ransomware/https://samithota.com/security-advisories/langflow-rce-ai-agent-ransomware/An AI agent has been observed exploiting a Remote Code Execution (RCE) vulnerability in Langflow to automate database ransomware attacks, highlighting…Fri, 10 Jul 2026 15:11:22 GMTCriticalOpennewslangflowSamit Hotahttps://samithota.com/security-advisories/microsoft-defender-rogueplanet-cve-2026-50656/https://samithota.com/security-advisories/microsoft-defender-rogueplanet-cve-2026-50656/Microsoft has released a security update to address CVE-2026-50656, a local privilege escalation vulnerability dubbed 'RoguePlanet' in its Malware Protection…Fri, 10 Jul 2026 15:11:22 GMTHighResolvednewsmicrosoftSamit Hotahttps://samithota.com/security-advisories/goddamn-ransomware-poisonx-driver/https://samithota.com/security-advisories/goddamn-ransomware-poisonx-driver/A new ransomware variant, GodDamn, a rebrand of Beast ransomware, employs the legitimately signed PoisonX kernel driver to bypass and neutralize endpoint…Fri, 10 Jul 2026 15:11:22 GMTCriticalOpennewsgoddamnSamit Hotahttps://samithota.com/security-advisories/xquic-xring-dos-vulnerability/https://samithota.com/security-advisories/xquic-xring-dos-vulnerability/A critical and unpatched vulnerability, named XRING, in Alibaba's XQUIC library enables remote denial-of-service against HTTP/3 servers.Fri, 10 Jul 2026 15:11:22 GMTCriticalOpennewsxquicSamit Hotahttps://samithota.com/security-advisories/ill-bloom-crypto-wallet-vulnerability/https://samithota.com/security-advisories/ill-bloom-crypto-wallet-vulnerability/A newly disclosed vulnerability, dubbed "Ill Bloom," in certain crypto wallet software allows attackers to drain funds due to weak recovery phrase generation.Fri, 10 Jul 2026 15:11:22 GMTCriticalOpennewsillSamit Hotahttps://samithota.com/security-advisories/wolfssl-geovision-vtk-vulnerabilities/https://samithota.com/security-advisories/wolfssl-geovision-vtk-vulnerabilities/Cisco Talos has identified and reported numerous vulnerabilities in WolfSSL, GeoVision security products, and the VTK-DICOM API.Fri, 10 Jul 2026 10:32:03 GMTHighResolvednewswolfsslSamit Hotahttps://samithota.com/security-advisories/nextcloud-data-exposure/https://samithota.com/security-advisories/nextcloud-data-exposure/A misconfiguration in a Nextcloud hosting environment led to the exposure of sensitive employee emails, client details, contracts, and scripts.Fri, 10 Jul 2026 10:32:03 GMTHighMitigatednewsnextcloudSamit Hotahttps://samithota.com/security-advisories/citrixbleed2-dragonforce-ransomware/https://samithota.com/security-advisories/citrixbleed2-dragonforce-ransomware/Threat actors leverage the CitrixBleed 2 vulnerability (CVE-2025-5777) in NetScaler appliances for initial access, culminating in DragonForce ransomware…Fri, 10 Jul 2026 10:32:03 GMTCriticalOpennewscitrixbleed2Samit Hotahttps://samithota.com/security-advisories/all-about-womens-care-breach/https://samithota.com/security-advisories/all-about-womens-care-breach/Healthcare provider All About Women's Care discloses a data breach affecting approximately 12,000 patients with sensitive medical information.Fri, 10 Jul 2026 10:32:03 GMTHighOpennewsallSamit Hotahttps://samithota.com/security-advisories/aitkin-county-hhs-breach/https://samithota.com/security-advisories/aitkin-county-hhs-breach/Aitkin County Health and Human Services reports a data breach affecting 83,114 individuals with exposed PII and PHI from email accounts.Fri, 10 Jul 2026 10:32:03 GMTHighOpennewsaitkinSamit Hotahttps://samithota.com/security-advisories/agentic-ransomware-jadepuffer/https://samithota.com/security-advisories/agentic-ransomware-jadepuffer/Researchers uncover JADEPUFFER, the first fully autonomous LLM-driven ransomware operation exploiting Langflow vulnerability.Fri, 10 Jul 2026 10:32:03 GMTCriticalOpennewsagenticSamit Hotahttps://samithota.com/security-advisories/us-army-websites-defaced/https://samithota.com/security-advisories/us-army-websites-defaced/Two U.S. Army websites were temporarily defaced on error pages with pro-Kurdish messages and criticism of former President Donald Trump.Fri, 10 Jul 2026 06:26:05 GMTLowResolvednewsusSamit Hotahttps://samithota.com/security-advisories/finance-yorkshire-ransomware/https://samithota.com/security-advisories/finance-yorkshire-ransomware/UK-based funding provider Finance Yorkshire suffered a ransomware attack by the Cmdorganization group, potentially impacting SME data.Fri, 10 Jul 2026 06:26:05 GMTHighOpennewsfinanceSamit Hotahttps://samithota.com/security-advisories/deutsche-bank-third-party-breach/https://samithota.com/security-advisories/deutsche-bank-third-party-breach/The "Unsafe" ransomware group claims to have breached Deutsche Bank, though the bank states a third-party service provider was the actual target.Fri, 10 Jul 2026 06:26:05 GMTHighOpennewsdeutscheSamit Hotahttps://samithota.com/security-advisories/mercado-libre-ransomware-attack/https://samithota.com/security-advisories/mercado-libre-ransomware-attack/Latin American e-commerce giant Mercado Libre is reportedly targeted by "The Gentleman" ransomware group, with claims of data exfiltration.Fri, 10 Jul 2026 06:26:05 GMTHighOpennewsmercadoSamit Hotahttps://samithota.com/security-advisories/cisa-kev-multiple-critical-vulnerabilities/https://samithota.com/security-advisories/cisa-kev-multiple-critical-vulnerabilities/CISA added critical vulnerabilities in Adobe ColdFusion, Joomlack Page Builder, and JoomShaper SP Page Builder to its KEV Catalog, citing active exploitation.Fri, 10 Jul 2026 06:26:05 GMTCriticalOpennewscisaSamit Hotahttps://samithota.com/security-advisories/unitedhealthcare-data-breach/https://samithota.com/security-advisories/unitedhealthcare-data-breach/United HealthCare Services Inc. disclosed a data breach affecting 34,574 individuals, with details of the exposed information publicly undisclosed.Thu, 09 Jul 2026 18:08:25 GMTMediumOpennewsunitedhealthcareSamit Hotahttps://samithota.com/security-advisories/ubiquiti-unifi-critical-vulnerabilities/https://samithota.com/security-advisories/ubiquiti-unifi-critical-vulnerabilities/Ubiquiti has released critical security updates addressing seven severe vulnerabilities in its UniFi OS, including a maximum-severity command injection flaw…Thu, 09 Jul 2026 18:08:25 GMTCriticalMitigatednewsubiquitiSamit Hotahttps://samithota.com/security-advisories/assuranceamerica-data-breach/https://samithota.com/security-advisories/assuranceamerica-data-breach/A cyberattack on AssuranceAmerica compromised data for 6.9 million individuals, including driver's license numbers and other sensitive information.Thu, 09 Jul 2026 18:08:25 GMTHighOpennewsassuranceamericaSamit Hotahttps://samithota.com/security-advisories/langflow-idor-credential-harvesting/https://samithota.com/security-advisories/langflow-idor-credential-harvesting/CISA has added an Insecure Direct Object Reference (IDOR) vulnerability in Langflow (CVE-2026-55255) to its KEV catalog due to active exploitation.Thu, 09 Jul 2026 18:08:25 GMTHighOpennewslangflowSamit Hotahttps://samithota.com/security-advisories/china-apt-exploits-roundcube/https://samithota.com/security-advisories/china-apt-exploits-roundcube/A suspected China-aligned APT group is actively exploiting patched Roundcube flaws (e.g., CVE-2024-42009) targeting U.S. and Canadian universities.Thu, 09 Jul 2026 18:08:25 GMTHighOpennewschinaSamit Hotahttps://samithota.com/security-advisories/gitea-auth-bypass-exploited/https://samithota.com/security-advisories/gitea-auth-bypass-exploited/A critical vulnerability in Gitea (CVE-2026-20896) allows authentication bypass and is being actively exploited in the wild.Thu, 09 Jul 2026 18:08:25 GMTCriticalOpennewsgiteaSamit Hotahttps://samithota.com/security-advisories/kddi-email-platform-breach/https://samithota.com/security-advisories/kddi-email-platform-breach/A zero-day vulnerability in a third-party email platform led to the exposure of 12 million email addresses and passwords from Japanese ISPs, including KDDI.Thu, 09 Jul 2026 16:08:57 GMTHighOpennewskddiSamit Hotahttps://samithota.com/security-advisories/beyondtrust-multiple-vulnerabilities/https://samithota.com/security-advisories/beyondtrust-multiple-vulnerabilities/BeyondTrust has released security updates addressing critical vulnerabilities in its Remote Support and Privileged Remote Access products.Thu, 09 Jul 2026 16:08:57 GMTCriticalResolvednewsbeyondtrustSamit Hotahttps://samithota.com/security-advisories/microsoft-defender-rogueplanet-lpe/https://samithota.com/security-advisories/microsoft-defender-rogueplanet-lpe/Microsoft has released a patch for CVE-2026-50656, a privilege escalation vulnerability in Microsoft Defender's Malware Protection Engine.Thu, 09 Jul 2026 16:08:57 GMTHighResolvednewsmicrosoftSamit Hotahttps://samithota.com/security-advisories/ghostlock-linux-privesc/https://samithota.com/security-advisories/ghostlock-linux-privesc/A newly disclosed 15-year-old Linux kernel flaw (CVE-2026-43499) allows local users to achieve root privileges and escape containers.Thu, 09 Jul 2026 16:08:57 GMTCriticalOpennewsghostlockSamit Hotahttps://samithota.com/security-advisories/accenture-data-breach/https://samithota.com/security-advisories/accenture-data-breach/A hacker claims to have stolen 35GB of sensitive data, including source code and access keys, from consulting giant Accenture.Thu, 09 Jul 2026 16:08:57 GMTHighMitigatednewsaccentureSamit Hotahttps://samithota.com/security-advisories/cve-2026-48282-coldfusion/https://samithota.com/security-advisories/cve-2026-48282-coldfusion/A critical path traversal vulnerability in Adobe ColdFusion (CVE-2026-48282) is under active exploitation, enabling unauthenticated remote code execution.Thu, 09 Jul 2026 16:08:01 GMTCriticalOpenkevadobeSamit Hotahttps://samithota.com/security-advisories/cve-2026-56290-page-builder/https://samithota.com/security-advisories/cve-2026-56290-page-builder/A critical improper access control vulnerability in Joomlack Page Builder (CVE-2026-56290) allows for unauthenticated remote code execution via arbitrary file…Thu, 09 Jul 2026 16:07:30 GMTCriticalOpenkevjoomlackSamit Hotahttps://samithota.com/security-advisories/cve-2026-48908-sp-page-builder/https://samithota.com/security-advisories/cve-2026-48908-sp-page-builder/Critical CVE-2026-48908 in JoomShaper SP Page Builder allows unauthenticated RCE via unrestricted file upload, actively exploited in the wild.Thu, 09 Jul 2026 00:00:00 GMTCriticalOpenkevjoomshaperSamit Hotahttps://samithota.com/security-advisories/cve-2026-55255-langflow/https://samithota.com/security-advisories/cve-2026-55255-langflow/A critical authorization bypass vulnerability in Langflow (CVE-2026-55255) allows authenticated attackers to execute arbitrary flows belonging to other users.Thu, 09 Jul 2026 00:00:00 GMTHighOpenkevlangflowSamit Hotahttps://samithota.com/security-advisories/jwt-alg-none-auth-bypass/https://samithota.com/security-advisories/jwt-alg-none-auth-bypass/Solandra Commerce API versions up to 3.4.2 accept unsigned JWTs by honoring an attacker-controlled alg header, allowing full authentication bypass.Thu, 18 Jun 2026 00:00:00 GMTCriticalMitigatedauthenticationjwtapi-securitySamit Hotahttps://samithota.com/security-advisories/parcelhive-idor-file-sharing/https://samithota.com/security-advisories/parcelhive-idor-file-sharing/A predictable share-link identifier in Parcelhive's file-sharing API allowed enumeration of other tenants' private documents.Tue, 04 Nov 2025 00:00:00 GMTHighResolvedidoraccess-controlsaasSamit Hotahttps://samithota.com/security-advisories/metadata-proxy-ssrf/https://samithota.com/security-advisories/metadata-proxy-ssrf/An unvalidated URL-fetch feature could be redirected at the cloud instance metadata service, exposing temporary IAM credentials.Fri, 22 Aug 2025 00:00:00 GMTMediumMitigatedssrfcloud-securityiamSamit Hota