Your Daily Dose of Cybersecurity News

ESLint's paid contributor program ending after AI-generated code overwhelmed volunteer review capacity

Technology

ESLint's Payout Program Ended Over AI-Generated Code

ESLint ended its paid contributor program after AI-generated pull requests overwhelmed volunteer review capacity — a supply-chain integrity signal with downstream consequences.

Nov 15, 2026 · SecurityXP

Apache HTTP Server security bulletin for CVE-2026-119618 heap corruption in mod_http2

Technology

Apache HTTP Server: Critical RCE Vulnerability (CVE-2026-119618)

Apache released HTTP Server 2.4.71 to fix CVE-2026-119618, a heap corruption flaw in mod_http2 that can lead to remote code execution. Affects Apache HTTP Server 2.4.55 through 2.4.70 with HTTP/2 enabled.

Nov 14, 2026 · SecurityXP

CERT-EU advisory 2026-020 addressing 28 memory flaws in Citrix NetScaler ADC and Gateway

Technology

Citrix NetScaler ADC and Gateway: 28 Flaws, 2 Critical

CERT-EU advisory 2026-020: the Cloud Software Group published bulletins for 28 memory-safety flaws in Citrix NetScaler ADC and Gateway. CVE-2026-120868 (CVSS 9.3) affects all deployments including the default configuration.

Nov 14, 2026 · SecurityXP

Latest News

Technology Jul 11, 2026 · 2 min read

Dell BIOS Flaw Lets Attackers Recover Admin Passwords From SPI Flash in Milliseconds

Tracked as CVE-2026-40639 and addressed in Dell Security Advisory DSA-2026-197, the issue affects certain Dell client platforms that use the proprietary DVAR...

Technology Jul 11, 2026 · 3 min read

Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit

Flowise CSV Agent Prompt Injection RCE Authors: Takahiro Yokoyama and zdi-disclosures Type: Exploit Pull request: 21407 contributed by Takahiro-Yoko Path...

Technology Jul 11, 2026 · 3 min read

Critical vulnerability in Red Hat OpenShift AI (RHOAI) Cybersecurity (CVE-2026-15378)

Skip to navigation Skip to main content Utilities Subscriptions Downloads Red Hat Console Get Support Subscriptions Downloads Red Hat Console Get Support...

Technology Jul 11, 2026 · 3 min read

WP-SHELLSTORM Exposed: Hackers Backdoored Thousands of WordPress Websites

Treat the Joomla JCE flaw (CVE-2026-48907, fixed in 2.9.99.5) as urgent too, since it is a maximum-severity and on CISA's actively-exploited list, even...

Technology Jul 11, 2026 · 3 min read

Progress Urges ShareFile Admins to Shut Down Servers Over Credible Security Threat

In April 2026, watchTowr Labs disclosed two chainable vulnerabilities in Storage Zone Controller: CVE-2026-2699, an authentication bypass with a CVSS score...

Vulnerabilities & Exploits Jul 7, 2026 · 3 min read

Hitachi Energy e-mesh EMS Vulnerability (CVE-2026-42945)

The following versions of Hitachi Energy e-mesh EMS are affected: - Hitachi Energy e-mesh EMS 4.1.6, 4.4.2, 4.7.0 Background - Critical Infrastructure...

Vulnerabilities & Exploits Jul 7, 2026 · 2 min read

Critical Gitea Flaw Under Active Exploitation, Researchers Warn Vulnerability (CVE-2026-20896)

Specific to Gitea’s official Docker images, the critical-severity security defect is tracked as CVE-2026-20896 (CVSS score of 9.8) and can be exploited with...

Cybercrime Jul 7, 2026 · 3 min read

Cloudflare proudly joins the UK government's Cyber Resilience Pledge

This trend is consistent with broader data from the UK Cyber Security Breaches Survey, which revealed that 43% of surveyed British businesses and 28% of...

Threat Intelligence Jul 7, 2026 · 2 min read

SOCRadar links FortiBleed campaign targeting manufacturers to Lynx and INC ransomware attacks

The hacker likely already found and exploited a zero-day vulnerability in Nextcloud, an open-source content collaboration platform. They also built ‘PENTEST...

IoT Security Jul 7, 2026 · 2 min read

ABB launches FIM 3.5 with vendor-neutral automated firmware updates for industrial field devices

ABB announced launch of ABB Ability Field Information Manager (FIM) 3.5, a vendor-neutral platform for automated field device firmware updates. FIM 3.5...

ICS/OT Security Jul 7, 2026 · 2 min read

Cydome reports FortiBleed credential leak poses elevated risks to maritime and energy critical infrastructure

On a vessel without clean IT and OT separation, that same path can reach bridge systems, cargo management, and VSAT links.” Fortinet officially characterizes...

Compliance & Privacy Jul 7, 2026 · 2 min read

Beyond safety and security: Why automotive open source demands dependability

Bridging the gap between the upstream velocity of Linux and the downstream rigor of automotive standards requires more than just a repository: it requires a...

Vulnerabilities & Exploits Jul 7, 2026 · 2 min read

Critical Adobe ColdFusion Vulnerability Exploited in Attacks (CVE-2026-48282)

However, according to the vulnerability intelligence platform KEVIntel, hackers began exploiting CVE-2026-48282 within two hours of its public disclosure...

AI/ML Security Jul 7, 2026 · 2 min read

OpenAI Codex Desktop App for macOS Vulnerability Allows Attackers to Inject Indirect Prompt

As AI-assisted development tools continue to gain adoption, vulnerabilities like CVE-2026-14898 underscore the need for secure design practices that account...

AI/ML Security Jul 6, 2026 · 1 min read

Threat Modeling Generative AI: What 11,658 Incidents Reveal About Real-World Risk

Instead, improper output handling (42%) and misinformation/misuse (35%) represent the vast majority of actual incidents.

Vulnerabilities & Exploits Jul 4, 2026 · 4 min read

bingo-ai 3.6.3 Vulnerability

Blind Signing / EIP-7730 (Bybit $1.5B Attack Vector) The Bybit $1.5B hack (Feb 2025) exploited a Safe multisig blind signing flaw: - Attackers changed...

Technology Jul 2, 2026 · 2 min read

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures

This malware employs sophisticated techniques to evade detection and steal banking credentials, The Hacker News reports.The Ousaban campaign begins with a phishing PDF disguised as a corrupted file, p...

Technology NO IMAGE

Technology Jul 2, 2026 · 3 min read

Secure Amazon container workloads using container attribute-based rules in AWS Network Firewall

If you run AI and machine learning (ML) workloads on Amazon EKS, such as model inference, RAG pipelines, or JupyterHub, your containerized workloads require the same firewall protections you enforce f...

Technology NO IMAGE

Vulnerabilities & Exploits Jul 1, 2026 · 4 min read

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer Vulnerability

"Credentials accessible from a developer or administrator workstation may provide entry into production infrastructure, build pipelines, source code...

Vulnerabilities & Exploits Jun 24, 2026 · 2 min read

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild Vulnerability

Cisco Unified Communications Manager has a serious vulnerability, tracked as CVE-2026-20230 (CVSS score of 8.6), that attackers are already exploiting. The...

Security Digest

Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.

SecurityXP — Cybersecurity News, Threat Intelligence & Infosec Utilities

ESLint's Payout Program Ended Over AI-Generated Code

Apache HTTP Server: Critical RCE Vulnerability (CVE-2026-119618)

Citrix NetScaler ADC and Gateway: 28 Flaws, 2 Critical

Latest News

Dell BIOS Flaw Lets Attackers Recover Admin Passwords From SPI Flash in Milliseconds

Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit

Critical vulnerability in Red Hat OpenShift AI (RHOAI) Cybersecurity (CVE-2026-15378)

WP-SHELLSTORM Exposed: Hackers Backdoored Thousands of WordPress Websites

Progress Urges ShareFile Admins to Shut Down Servers Over Credible Security Threat

Hitachi Energy e-mesh EMS Vulnerability (CVE-2026-42945)

Critical Gitea Flaw Under Active Exploitation, Researchers Warn Vulnerability (CVE-2026-20896)

Cloudflare proudly joins the UK government's Cyber Resilience Pledge

SOCRadar links FortiBleed campaign targeting manufacturers to Lynx and INC ransomware attacks

ABB launches FIM 3.5 with vendor-neutral automated firmware updates for industrial field devices

Cydome reports FortiBleed credential leak poses elevated risks to maritime and energy critical infrastructure

Beyond safety and security: Why automotive open source demands dependability

Critical Adobe ColdFusion Vulnerability Exploited in Attacks (CVE-2026-48282)

OpenAI Codex Desktop App for macOS Vulnerability Allows Attackers to Inject Indirect Prompt

Threat Modeling Generative AI: What 11,658 Incidents Reveal About Real-World Risk

bingo-ai 3.6.3 Vulnerability

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures

Secure Amazon container workloads using container attribute-based rules in AWS Network Firewall

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer Vulnerability

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild Vulnerability

Security Digest