vulnerability 'Certighost' Flaw Haunts Microsoft Active Directory Certificates A critical vulnerability, dubbed ‘Certighost,’ has been patched by Microsoft that allowed a low-privileged domain user to impersonate a domain controller and compromise an Active Directory environment. The flaw stemmed f… Dark Reading · Jul 28, 2026 Critical CVE-2026-54121UNcertificateactive directorypkis
vulnerability Click to pray expose les données de plus de 700 000 fidèles A vulnerability in the Click to Pray application, used by the Vatican’s prayer network, has exposed the personal data of over 719,517 users. Researcher BobDaHacker reported the issue six months prior, but no response was… ZATAZ · Jul 28, 2026 High UNidorphishingdata breach
threat-intel DEF CON bans Meta-style 'pervert glasses' DEF CON banned ‘pervert glasses’ – AI-powered devices designed to subtly record audio and video, raising serious privacy concerns. The ban highlights the growing risks associated with increasingly sophisticated AI-driven… The Register · Jul 28, 2026 Medium CHaimachine learningsurveillance
threat-intel Wi-Fi public : ce que votre fournisseur, pirates et marketing peuvent voir This article highlights the significant data collection practices of Wi-Fi providers, even when users are using HTTPS. While HTTPS protects content, providers can still track domains visited, connection times, data trans… ZATAZ · Jul 28, 2026 Medium wifiprivacydns
threat-intel Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process A new Mirai-derived botnet, Tengu, is leveraging hardware watchdog timers and other persistence mechanisms to re-establish itself on compromised Linux devices, even after defenders attempt to kill its main process. The b… The Hacker News · Jul 28, 2026 High botnetmiraiiot
threat-intel 24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login A significant vulnerability, CVE-2013-4786, has been exposed due to a 20-year-old flaw in the IPMI 2.0 specification, resulting in over 36,000 internet-exposed BMCs revealing password hashes. This allows attackers to con… The Hacker News · Jul 28, 2026 High CVE-2013-4786USGECHbmcipmipassword cracking
threat-intel Réseaux sociaux : ce qui changera en 2026 et 2027 France is set to implement a major digital shift, prohibiting access to social media for children under 15 by September 2026, with a broader enforcement in January 2027. This follows a similar initiative in Australia, bu… ZATAZ · Jul 28, 2026 High FRAUUNsocial mediaage verificationdata privacy
vulnerability Siemens Desigo CC A stack-based buffer overflow vulnerability in Siemens Desigo CC versions V7, V8, and V9 (prior to V9.0.1) has been identified, potentially allowing remote code execution. Siemens has released patches and recommends upda… CISA Advisories · Jul 28, 2026 High CVE-2025-15467DEstack-buffer-overflowcwe-787open ssl
threat-intel Suitable AI : 15 176 comptes exposés via GraphQL A hacker claims to have breached Suitable AI, a recruitment platform utilizing AI, exposing data of 15,176 candidates and potentially compromising administrator accounts. The breach stemmed from vulnerabilities in Suitab… ZATAZ · Jul 28, 2026 Medium INUSgraphqlvulnerabilitydata breach
vulnerability Arista patches actively exploited VeloCloud bug as CISA puts admins on the clock Arista Networks has patched a vulnerability in its VeloCloud software that was being actively exploited. The CISA (Cybersecurity and Infrastructure Security Agency) issued an advisory urging administrators to address the… The Register · Jul 28, 2026 High CVE-2026-16812patchvulnerabilitynetwork
threat-intel AutoIT Payload Injector , (Tue, Jul 28th) A wave of emails containing RAR archives containing AutoIT scripts are delivering a VIPKeylogger malware. The AutoIT scripts use legitimate tools like `charmap.exe` to inject and execute the malware, leveraging AutoIT's… SANS Internet Storm Center · Jul 28, 2026 High autoitshellcodepersistence
vulnerability Unpatched Fastjson Vulnerability Exploited in Attacks A critical remote code execution (RCE) vulnerability in Fastjson, a popular Java JSON processing library, has been actively exploited by threat actors. The vulnerability, tracked as CVE-2026-16723, allows attackers to ex… SecurityWeek · Jul 28, 2026 Critical CVE-2026-16723USSGCArcejsonspring boot
threat-intel Agentic Browsers Rewind Web Security by 20 years Researchers at Zenity have discovered a significant vulnerability class – "PleaseFix" – that allows attackers to socially engineer AI agentic browsers to perform malicious actions, including account takeover and remote c… Dark Reading · Jul 27, 2026 High agentic browserssocial engineeringzero-click
vulnerability 'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure Two significant ‘confused deputy’ vulnerabilities persist in Google Cloud Platform (GCP) and Microsoft Azure, allowing attackers to escalate privileges and bypass security controls. Despite reporting these flaws to both… Dark Reading · Jul 27, 2026 High cloud securityidentity managementaccess control
vulnerability Microsoft's solution to AI security: more AI and more acronyms Microsoft is facing a zero-day vulnerability in its on-prem SharePoint system, allowing attackers to exploit the flaw. This follows a broader trend of security challenges related to Microsoft products and a wider increas… The Register · Jul 27, 2026 High USIRSWvulnerabilitysharepointzero-day
threat-intel Why Resetting Passwords No Longer Stops Attackers Traditional password security measures are becoming less effective as attackers shift to stealing session and token credentials to bypass MFA controls. Instead of focusing on securing logins, organizations must now prior… Dark Reading · Jul 27, 2026 High token theftsession hijackingmfa bypass
threat-intel NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework NVIDIA has formed the Open Secure AI Alliance, a 37-member group focused on developing open technologies and tools for securing AI agents and software. The alliance’s core contribution, NOOA, is a Python framework design… The Hacker News · Jul 27, 2026 High UNaiagentsecurity
threat-intel Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption The Dysphoria IoT botnet has evolved to become significantly harder to disrupt by incorporating blockchain-based name services and utilizing infected devices as relays. This complex architecture, stemming from the JackSk… The Hacker News · Jul 27, 2026 High CVE-2025-9528JPiotbotnetc2
threat-intel Tech giants link hands to praise open AI models after OpenAI - Hugging Face attack Tech giants, including AMD and Cerebras, have jointly urged the US government to prioritize the development and use of open-weight AI models, in response to a recent attack targeting Hugging Face using open-weight AI. Th… The Register · Jul 27, 2026 Medium IRUSaiopen-sourcesecurity
threat-intel Hackers used Telegram phishing campaign to target exiled Belarusian activist Hackers are using highly personalized Telegram phishing campaigns targeting exiled Belarusian activists and users in Russia and Kazakhstan. The campaign leverages private messages and tailored fake login pages to steal T… The Record · Jul 27, 2026 High KZRUBYphishingaccount-hijackingtelegram
