Your Daily Dose of Cybersecurity News

Technology

Dell BIOS Flaw Lets Attackers Recover Admin Passwords From SPI Flash in Milliseconds Cybersecurity

Tracked as CVE-2026-40639 and addressed in Dell Security Advisory DSA-2026-197, the issue affects certain Dell client platforms that use the proprietary DVAR...

Jul 11, 2026 · SecurityXP

Technology

Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit Cybersecurity

Flowise CSV Agent Prompt Injection RCE Authors: Takahiro Yokoyama and zdi-disclosures Type: Exploit Pull request: 21407 contributed by Takahiro-Yoko Path...

Jul 11, 2026 · SecurityXP

Technology

Critical vulnerability in Red Hat OpenShift AI (RHOAI) Cybersecurity (CVE-2026-15378)

Skip to navigation Skip to main content Utilities Subscriptions Downloads Red Hat Console Get Support Subscriptions Downloads Red Hat Console Get Support...

Jul 11, 2026 · SecurityXP

Latest News

TechnologyJul 10, 2026·4 min read

WP-SHELLSTORM Exposed: Hackers Backdoored Thousands of WordPress Websites Cybersecurity

Treat the Joomla JCE flaw (CVE-2026-48907, fixed in 2.9.99.5) as urgent too, since it is a maximum-severity and on CISA's actively-exploited list, even...

TechnologyJul 10, 2026·3 min read

Progress Urges ShareFile Admins to Shut Down Servers Over Credible Security Threat Cybersecurity

In April 2026, watchTowr Labs disclosed two chainable vulnerabilities in Storage Zone Controller: CVE-2026-2699, an authentication bypass with a CVSS score...

Vulnerabilities & ExploitsJul 7, 2026·3 min read

Hitachi Energy e-mesh EMS Vulnerability (CVE-2026-42945)

The following versions of Hitachi Energy e-mesh EMS are affected: - Hitachi Energy e-mesh EMS 4.1.6, 4.4.2, 4.7.0 Background - Critical Infrastructure...

Vulnerabilities & ExploitsJul 7, 2026·2 min read

Critical Gitea Flaw Under Active Exploitation, Researchers Warn Vulnerability (CVE-2026-20896)

Specific to Gitea’s official Docker images, the critical-severity security defect is tracked as CVE-2026-20896 (CVSS score of 9.8) and can be exploited with...

CybercrimeJul 7, 2026·3 min read

Cloudflare proudly joins the UK government's Cyber Resilience Pledge Cybercrime

This trend is consistent with broader data from the UK Cyber Security Breaches Survey, which revealed that 43% of surveyed British businesses and 28% of...

Threat IntelligenceJul 7, 2026·2 min read

SOCRadar links FortiBleed campaign targeting manufacturers to Lynx and INC ransomware attacks

The hacker likely already found and exploited a zero-day vulnerability in Nextcloud, an open-source content collaboration platform. They also built ‘PENTEST...

IoT SecurityJul 7, 2026·3 min read

ABB launches FIM 3.5 with vendor-neutral automated firmware updates for industrial field devices

ABB announced launch of ABB Ability Field Information Manager (FIM) 3.5, a vendor-neutral platform for automated field device firmware updates. FIM 3.5...

ICS/OT SecurityJul 7, 2026·3 min read

Cydome reports FortiBleed credential leak poses elevated risks to maritime and energy critical infrastructure

On a vessel without clean IT and OT separation, that same path can reach bridge systems, cargo management, and VSAT links.” Fortinet officially characterizes...

Compliance & PrivacyJul 7, 2026·2 min read

Beyond safety and security: Why automotive open source demands dependability Compliance

Bridging the gap between the upstream velocity of Linux and the downstream rigor of automotive standards requires more than just a repository: it requires a...

Vulnerabilities & ExploitsJul 7, 2026·3 min read

Critical Adobe ColdFusion Vulnerability Exploited in Attacks (CVE-2026-48282)

However, according to the vulnerability intelligence platform KEVIntel, hackers began exploiting CVE-2026-48282 within two hours of its public disclosure...

AI/ML SecurityJul 7, 2026·3 min read

OpenAI Codex Desktop App for macOS Vulnerability Allows Attackers to Inject Indirect Prompt

As AI-assisted development tools continue to gain adoption, vulnerabilities like CVE-2026-14898 underscore the need for secure design practices that account...

AI/ML SecurityJul 5, 2026·1 min read

Threat Modeling Generative AI: What 11,658 Incidents Reveal About Real-World Risk

Instead, improper output handling (42%) and misinformation/misuse (35%) represent the vast majority of actual incidents.

Vulnerabilities & ExploitsJul 4, 2026·4 min read

bingo-ai 3.6.3 Vulnerability

Blind Signing / EIP-7730 (Bybit $1.5B Attack Vector) The Bybit $1.5B hack (Feb 2025) exploited a Safe multisig blind signing flaw: - Attackers changed...

TechnologyJul 2, 2026·3 min read

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures Malware

This malware employs sophisticated techniques to evade detection and steal banking credentials, The Hacker News reports.The Ousaban campaign begins with a phishing PDF disguised as a corrupted file, p...

TechnologyNO IMAGE

TechnologyJul 2, 2026·3 min read

Secure Amazon container workloads using container attribute-based rules in AWS Network Firewall

If you run AI and machine learning (ML) workloads on Amazon EKS, such as model inference, RAG pipelines, or JupyterHub, your containerized workloads require the same firewall protections you enforce f...

TechnologyNO IMAGE

Vulnerabilities & ExploitsJul 1, 2026·4 min read

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer Vulnerability

"Credentials accessible from a developer or administrator workstation may provide entry into production infrastructure, build pipelines, source code...

Vulnerabilities & ExploitsJun 24, 2026·3 min read

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild Vulnerability

Cisco Unified Communications Manager has a serious vulnerability, tracked as CVE-2026-20230 (CVSS score of 8.6), that attackers are already exploiting. The...

Cloud SecurityJun 24, 2026·3 min read

From Platform to Program: How to Ensure Your Cloud Security Solution Delivers

Orca’s 2026 State of Application Security Report found that 77% of organizations retain high or critical container vulnerabilities for more than 90 days, a...

CybercrimeJun 23, 2026·3 min read

Scattered Spider Hackers Plead Guilty on Day 1 of Trial Cybercrime

According to the NCA, the cyberattack at TfL forced all 28,000 employees to visit their local offices to reset their passwords and caused £29 million...

Cloud SecurityJun 23, 2026·3 min read

AWS Warns Outbound Traffic Blind Spots Can Enable Cloud Data Exfiltration Cloud Security

The AWS report shared with Cyber Security News (CSN) points to cases where unpatched vulnerabilities, such as CVE-2025-55182 (React2Shell), allowed attackers...

Security Digest

Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.

SecurityXP — Cybersecurity News, Threat Intelligence & Infosec Utilities

Dell BIOS Flaw Lets Attackers Recover Admin Passwords From SPI Flash in Milliseconds Cybersecurity

Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit Cybersecurity

Critical vulnerability in Red Hat OpenShift AI (RHOAI) Cybersecurity (CVE-2026-15378)

Latest News

WP-SHELLSTORM Exposed: Hackers Backdoored Thousands of WordPress Websites Cybersecurity

Progress Urges ShareFile Admins to Shut Down Servers Over Credible Security Threat Cybersecurity

Hitachi Energy e-mesh EMS Vulnerability (CVE-2026-42945)

Critical Gitea Flaw Under Active Exploitation, Researchers Warn Vulnerability (CVE-2026-20896)

Cloudflare proudly joins the UK government's Cyber Resilience Pledge Cybercrime

SOCRadar links FortiBleed campaign targeting manufacturers to Lynx and INC ransomware attacks

ABB launches FIM 3.5 with vendor-neutral automated firmware updates for industrial field devices

Cydome reports FortiBleed credential leak poses elevated risks to maritime and energy critical infrastructure

Beyond safety and security: Why automotive open source demands dependability Compliance

Critical Adobe ColdFusion Vulnerability Exploited in Attacks (CVE-2026-48282)

OpenAI Codex Desktop App for macOS Vulnerability Allows Attackers to Inject Indirect Prompt

Threat Modeling Generative AI: What 11,658 Incidents Reveal About Real-World Risk

bingo-ai 3.6.3 Vulnerability

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures Malware

Secure Amazon container workloads using container attribute-based rules in AWS Network Firewall

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer Vulnerability

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild Vulnerability

From Platform to Program: How to Ensure Your Cloud Security Solution Delivers

Scattered Spider Hackers Plead Guilty on Day 1 of Trial Cybercrime

AWS Warns Outbound Traffic Blind Spots Can Enable Cloud Data Exfiltration Cloud Security

Security Digest