Security & Risk
170 analyses
Sysdig detected the first exploitation attempt 13 days after the patch, affecting 6,200 exposed instances. The bug originates from a line in app.ini that trusts any IP.
Path traversal vulnerability received a maximum rating and became the target of active exploitation two hours after the technical bulletin. CISA set a deadline of July 10 for the Federal Civil Executive.
Preliminary report co-chaired by Yoshua Bengio and Maria Ressa dismantles the safety-by-design narrative of major developers and shifts the responsibility to regulators and corporate buyers.
CVE-2026-46242, 'Bad Epoll', allows any local unprivileged account to gain root access on Linux and Android servers with kernel 6.4 or higher. The fix has been available since April; most distributions have yet to publish the backport.
The Singapore Land Authority confirmed unauthorized access to a cloud environment managed by IBM, exposing names, NRIC numbers, and addresses of approximately 70,000 individuals stored since 1998 in a non-anonymized test dataset.
Researcher from the National University of Seoul has published a functional exploit for CVE-2026-46242: any local process without privileges can gain root access in Linux kernels 6.4 to 6.12 and on Android devices.
Remote code execution vulnerability patched by Microsoft on May 26 lingered for months without a fix on exposed servers. CISA added it to the KEV catalog on July 1, and The Hacker News detailed the attack on July 2.
Cato AI Labs released the DuneSlide on Wednesday, a pair of zero-click vulnerabilities in Cursor 3.0 that break the sandbox through instructions planted in MCP or web pages loaded by the agent.
Bulletin APSB26-68 fixes 11 CVEs, seven with a maximum rating, in ColdFusion 2025, ColdFusion 2023, and Campaign Classic 7.4.3. Adobe has given it a Priority Rating 1, a category in which the company estimates imminent exploitation.
CVE-2026-48558 allows for forged technician sessions and MFA bypass; the final payload, Djinn Stealer, targets MCP files with credentials from the code assistants Claude, Gemini, Codex, Cline, and Kilo.
JFrog identifies two hijacked npm packages and a cluster of 16 Go packages with a payload that triggers via VS Code's tasks.json and seeks instructions in Tron, Aptos, and BSC transactions.
Vulnerability in the libssh2 packet parser gained a functional exploit on GitHub. Curl, Git, PHP, and dozens of appliances are under threat up to version 1.11.1 inclusive.