Coordinated Cyberattacks Target U.S. Water Systems
Beginning July 26th, coordinated cyberattacks targeting U.S. water systems—attributed to Iranian hackers and other nation-state actors—have disrupted service in multiple states, exploiting weak.
CISA Flags Langflow RCE, Tomcat Encryption Bypass, and N-central Flaw as Actively Exploited
CISA has added three vulnerabilities – Langflow RCE, Apache Tomcat encryption bypass, and N-able N-central authentication bypass – to its KEV catalog due to active exploitation. Federal agencies must.
Cyberattacks Target U.S. Water Systems, Suspected Iran Involvement Prompts Federal Response
Coordinated cyberattacks targeting municipal water systems in at least seven U.S. states have prompted federal warnings and boil-water notices, with suspected Iranian involvement highlighting the.
Public Exploit Released for Patched vBulletin RCE Vulnerability (CVE-2026-61511)
A public exploit has been released for a pre-authentication remote code execution (RCE) vulnerability in vBulletin. Unauthenticated attackers can now execute arbitrary PHP code on vulnerable forums,.
Unpatched Fastjson Vulnerability Actively Exploited with No Fix Available
Attackers are actively exploiting a critical remote code execution (RCE) vulnerability in Alibaba’s Fastjson 1.x library, CVE-2026-16723. The unpatched flaw affects versions 1.2.68 through 1.2.83 and.
Malware Campaign Hijacks Chrome via Enterprise Policy Keys and DLL Side-Loading
A sophisticated malware campaign has been discovered abusing legitimate Google Chrome enterprise policy keys to hijack user browsers, bypassing security measures with DLL side-loading techniques.
Klue Hack Impacts Salesforce, Gong Integrations via Icarus Threat Actor
A supply chain attack targeting Klue has exposed sensitive customer data and disrupted integrations with Salesforce and other platforms. The ‘Icarus’ threat actor exploited a compromised legacy.
Cisco Unified CM Flaw (CVE-2026-20230) Actively Exploited for Webshell Deployment and Root Access
A critical server-side request forgery (SSRF) vulnerability (CVE-2026-20230) in Cisco Unified Communications Manager is being actively exploited to deploy webshells and achieve root access. Patches.
One Medical Faces Data Breach Claim: ShinyHunters Alleges Theft of 8.8TB of Healthcare Data
ShinyHunters claims to have stolen a massive 8.8TB of data from One Medical, Amazon’s healthcare provider, threatening release unless negotiations begin by June 22nd. The breach reportedly involves.
WhatsApp Malware Campaign Delivers VBS Files, Enabling Remote Access on Windows Systems
A sophisticated malware campaign is using WhatsApp to distribute malicious Visual Basic Script (VBS) files targeting Windows users across multiple countries. The attack, which began in late February.