Your Daily Dose of Cybersecurity News

Technology

WP-SHELLSTORM Exposed: Hackers Backdoored Thousands of WordPress Websites Cybersecurity

Treat the Joomla JCE flaw (CVE-2026-48907, fixed in 2.9.99.5) as urgent too, since it is a maximum-severity and on CISA's actively-exploited list, even...

Jul 10, 2026 · SecurityXP

Technology

Progress Urges ShareFile Admins to Shut Down Servers Over Credible Security Threat Cybersecurity

In April 2026, watchTowr Labs disclosed two chainable vulnerabilities in Storage Zone Controller: CVE-2026-2699, an authentication bypass with a CVSS score...

Jul 10, 2026 · SecurityXP

Vulnerabilities & Exploits

Hitachi Energy e-mesh EMS Vulnerability (CVE-2026-42945)

The following versions of Hitachi Energy e-mesh EMS are affected: - Hitachi Energy e-mesh EMS 4.1.6, 4.4.2, 4.7.0 Background - Critical Infrastructure...

Jul 7, 2026 · SecurityXP

Latest News

Vulnerabilities & ExploitsJul 7, 2026·2 min read

Critical Gitea Flaw Under Active Exploitation, Researchers Warn Vulnerability (CVE-2026-20896)

Specific to Gitea’s official Docker images, the critical-severity security defect is tracked as CVE-2026-20896 (CVSS score of 9.8) and can be exploited with...

CybercrimeJul 7, 2026·3 min read

Cloudflare proudly joins the UK government's Cyber Resilience Pledge Cybercrime

This trend is consistent with broader data from the UK Cyber Security Breaches Survey, which revealed that 43% of surveyed British businesses and 28% of...

Threat IntelligenceJul 7, 2026·2 min read

SOCRadar links FortiBleed campaign targeting manufacturers to Lynx and INC ransomware attacks

The hacker likely already found and exploited a zero-day vulnerability in Nextcloud, an open-source content collaboration platform. They also built ‘PENTEST...

IoT SecurityJul 7, 2026·3 min read

ABB launches FIM 3.5 with vendor-neutral automated firmware updates for industrial field devices

ABB announced launch of ABB Ability Field Information Manager (FIM) 3.5, a vendor-neutral platform for automated field device firmware updates. FIM 3.5...

ICS/OT SecurityJul 7, 2026·3 min read

Cydome reports FortiBleed credential leak poses elevated risks to maritime and energy critical infrastructure

On a vessel without clean IT and OT separation, that same path can reach bridge systems, cargo management, and VSAT links.” Fortinet officially characterizes...

Compliance & PrivacyJul 7, 2026·2 min read

Beyond safety and security: Why automotive open source demands dependability Compliance

Bridging the gap between the upstream velocity of Linux and the downstream rigor of automotive standards requires more than just a repository: it requires a...

Vulnerabilities & ExploitsJul 7, 2026·3 min read

Critical Adobe ColdFusion Vulnerability Exploited in Attacks (CVE-2026-48282)

However, according to the vulnerability intelligence platform KEVIntel, hackers began exploiting CVE-2026-48282 within two hours of its public disclosure...

AI/ML SecurityJul 7, 2026·3 min read

OpenAI Codex Desktop App for macOS Vulnerability Allows Attackers to Inject Indirect Prompt

As AI-assisted development tools continue to gain adoption, vulnerabilities like CVE-2026-14898 underscore the need for secure design practices that account...

AI/ML SecurityJul 5, 2026·1 min read

Threat Modeling Generative AI: What 11,658 Incidents Reveal About Real-World Risk

Instead, improper output handling (42%) and misinformation/misuse (35%) represent the vast majority of actual incidents.

Vulnerabilities & ExploitsJul 4, 2026·4 min read

bingo-ai 3.6.3 Vulnerability

Blind Signing / EIP-7730 (Bybit $1.5B Attack Vector) The Bybit $1.5B hack (Feb 2025) exploited a Safe multisig blind signing flaw: - Attackers changed...

TechnologyJul 2, 2026·3 min read

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures Malware

This malware employs sophisticated techniques to evade detection and steal banking credentials, The Hacker News reports.The Ousaban campaign begins with a phishing PDF disguised as a corrupted file, p...

TechnologyNO IMAGE

TechnologyJul 2, 2026·3 min read

Secure Amazon container workloads using container attribute-based rules in AWS Network Firewall

If you run AI and machine learning (ML) workloads on Amazon EKS, such as model inference, RAG pipelines, or JupyterHub, your containerized workloads require the same firewall protections you enforce f...

TechnologyNO IMAGE

Vulnerabilities & ExploitsJul 1, 2026·4 min read

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer Vulnerability

"Credentials accessible from a developer or administrator workstation may provide entry into production infrastructure, build pipelines, source code...

Vulnerabilities & ExploitsJun 24, 2026·3 min read

Cisco Unified CM Flaw CVE-2026-20230 Actively Exploited in the Wild Vulnerability

Cisco Unified Communications Manager has a serious vulnerability, tracked as CVE-2026-20230 (CVSS score of 8.6), that attackers are already exploiting. The...

Cloud SecurityJun 24, 2026·3 min read

From Platform to Program: How to Ensure Your Cloud Security Solution Delivers

Orca’s 2026 State of Application Security Report found that 77% of organizations retain high or critical container vulnerabilities for more than 90 days, a...

CybercrimeJun 23, 2026·3 min read

Scattered Spider Hackers Plead Guilty on Day 1 of Trial Cybercrime

According to the NCA, the cyberattack at TfL forced all 28,000 employees to visit their local offices to reset their passwords and caused £29 million...

Cloud SecurityJun 23, 2026·3 min read

AWS Warns Outbound Traffic Blind Spots Can Enable Cloud Data Exfiltration Cloud Security

The AWS report shared with Cyber Security News (CSN) points to cases where unpatched vulnerabilities, such as CVE-2025-55182 (React2Shell), allowed attackers...

Data BreachesJun 22, 2026·3 min read

Texas Parks & Wildlife Data Breach Affects 3 Million Individuals

Related: Data Breaches at Healthcare Organizations in Illinois and Texas Affect 600,000 Related: 377,000 Impacted by Data Breach at Texas Gas Station Firm...

Application SecurityJun 22, 2026·2 min read

On-Premises API Security on Kubernetes: What It Actually Looks Like in Practice App Security

PCI DSS 4.0.1 now requires continuous API security testing and maintained API inventories. (These PCI DSS 4.0.1 requirements became mandatory on March 31...

Cybersecurity Careers / WorkforceJun 22, 2026·1 min read

Sunil Varkey Joins Hexaware Technologies as EVP & CISO Cybersecurity Careers

His responsibilities align with Hexaware Technologies’ broader technology and growth objectives as the company continues to support large-scale digital...

Security Digest

Get the latest cybersecurity news, vulnerability alerts, and threat intelligence delivered to your inbox.

SecurityXP — Cybersecurity News, Threat Intelligence & Infosec Utilities