vulnerability Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable Thermo Fisher Scientific has patched a critical vulnerability in its Applied Biosystems human identification software that could allow attackers to tamper with DNA analysis files without detection. The flaw, tracked as C… The Hacker News · Aug 3, 2026 Critical CVE-2026-17583dnaforensicsdata integrity
vulnerability ISC Stormcast For Monday, August 3rd, 2026 https://isc.sans.edu/podcastdetail/10034, (Mon, Aug 3rd) The ISC Stormcast highlighted a significant vulnerability in the latest version of Apache Log4j, potentially allowing attackers to execute arbitrary code through a specially crafted log message. This vulnerability, along… SANS Internet Storm Center · Aug 3, 2026 Critical log4jrcejndi
vulnerability Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes A flaw in Coldcard hardware wallets, manufactured by Coinkite, was exploited to steal $70 million in Bitcoin within 41 minutes. The vulnerability stems from a deterministic PRNG used during seed generation, allowing an a… The Hacker News · Aug 1, 2026 Critical hardware walletseed generationbitcoin
vulnerability Ruby on Rails Patches Critical Vulnerability A critical vulnerability in Ruby on Rails, specifically related to image processing using the libvips library, has been patched. Attackers could potentially read arbitrary files and expose secrets, leading to remote code… SecurityWeek · Aug 1, 2026 Critical CVE-2026-66066rubyrailslibvips
vulnerability Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction Adobe has released critical security updates for Campaign Classic and Adobe Bridge to address vulnerabilities that could allow attackers to execute arbitrary code without user interaction, potentially leading to a comple… The Hacker News · Aug 1, 2026 Critical CVE-2026-48449CVE-2026-48448CVE-2026-48395vulnerabilityarbitrary code executioncampaign classic
vulnerability Critical Flaw Led to Azure Cosmos DB Pwnage A critical vulnerability, dubbed CosmosEscape, in Azure Cosmos DB allowed attackers to obtain a platform-wide key, enabling them to compromise all databases on the service. Wiz researchers exploited this flaw by bypassin… SecurityWeek · Jul 31, 2026 Critical vulnerabilitycode executiondatabase
vulnerability Critical Code Execution Vulnerability Patched in TeamCity JetBrains has released patches to address a critical vulnerability (CVE-2026-63077) in TeamCity On-Premises, allowing unauthenticated attackers to execute code on the server. This flaw can lead to data breaches, configur… SecurityWeek · Jul 31, 2026 Critical CVE-2026-63077rcevulnerabilitypatch
vulnerability ISC Stormcast For Friday, July 31st, 2026 https://isc.sans.edu/podcastdetail/10032, (Fri, Jul 31st) The ISC Stormcast highlighted a significant increase in malicious email campaigns targeting financial institutions, leveraging a newly discovered vulnerability in a popular PDF reader. Attackers are using this vulnerabil… SANS Internet Storm Center · Jul 31, 2026 Critical pdfphishingvulnerability
vulnerability Vulnérabilité dans Microsoft Azure (31 juillet 2026) A critical vulnerability has been identified in Microsoft Azure's Cosmos DB, allowing attackers to execute arbitrary code remotely. This could lead to significant data compromise and system control for malicious actors. CERT-FR · Jul 31, 2026 Critical CVE-2026-66803azureremote code executiondatabase
threat-intel Mitsubishi Electric CC-Link IE TSN Communication Protocol A critical vulnerability (CVE-2026-13584) exists in the CC-Link IE TSN communication protocol used by Mitsubishi Electric industrial controllers. Attackers with network access can manipulate communication data by sending… CISA Advisories · Jul 30, 2026 Critical CVE-2026-13584cc-linkindustrial control systemsvulnerability
vulnerability Watchfire Controller Software A critical vulnerability (CVE-2026-5846) exists in Watchfire Controller Software, allowing a malicious user to deliver malicious firmware and gain full control of the device. Multiple versions of the software are affecte… CISA Advisories · Jul 30, 2026 Critical CVE-2026-5846UNDOCAcve-2026-5846industrial control systemsfirmware
vulnerability MikroTik RouterOS A critical vulnerability (CVE-2026-14227) exists in MikroTik RouterOS, allowing an attacker with low-privilege API access to extract the router's WireGuard private key and decrypt VPN traffic. This could enable full VPN… CISA Advisories · Jul 30, 2026 Critical CVE-2026-14227LVvulnerabilitywireguardcve-2026-14227
threat-intel o6 Automation open62541 Multiple vulnerabilities have been identified in o6 Automation open62541, a control system software, potentially allowing for denial of service, arbitrary code execution, and information disclosure. These vulnerabilities… CISA Advisories · Jul 30, 2026 Critical CVE-2026-63362CVE-2026-65423CVE-2026-63035vulnerabilitycontrol-systemcisa
vulnerability Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms A critical vulnerability (CVE-2026-59726, CVSS 10/10) in Ruflo, an AI agent orchestration platform, allows unauthenticated attackers to execute commands within the container, potentially leading to remote code execution,… SecurityWeek · Jul 30, 2026 Critical CVE-2026-59726vulnerabilityremote code executionapi key theft
threat-intel SE Asian Cybercriminal Syndicates Become a Global Power Southeast Asian cybercriminal syndicates have evolved into a global organized crime crisis, fueled by technological advancements and corruption. These groups, originating largely from China and operating across Southeast… Dark Reading · Jul 30, 2026 Critical CHMYCAcybercrimecryptocurrencytrafficking
vulnerability Vulnérabilité dans Ruby on Rails activestorage (30 juillet 2026) A critical vulnerability has been identified in Ruby on Rails’ activestorage library, allowing attackers to execute arbitrary code remotely and potentially compromise data confidentiality. This affects older versions of… CERT-FR · Jul 30, 2026 Critical CVE-2026-66066ruby on railscvevulnerability
vulnerability Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads A critical vulnerability (CVE-2026-66066, CVSS 9.5) in Ruby on Rails' Active Storage component, using libvips for image processing, allows unauthenticated attackers to read arbitrary files from application servers. This… The Hacker News · Jul 29, 2026 Critical CVE-2026-66066rubyrailslibvips
vulnerability Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory A critical vulnerability (CVE-2026-59726) in Ruflo, an AI agent orchestration platform, allows unauthenticated remote code execution. Attackers can steal LLM API keys, harvest user conversations, and poison AI memory, le… The Hacker News · Jul 29, 2026 Critical CVE-2026-59726airemote code executionapi key theft
vulnerability Patch-Resistant 'RufRoot' Flaw Can Unleash Malicious AI Agent Swarms A critical vulnerability (CVE-2026-59726) in the Ruflo AI agent platform allows unauthenticated attackers to gain full remote code execution, access provider API keys, and even tamper with the AI's memory, potentially un… Dark Reading · Jul 29, 2026 Critical CVE-2026-59726aimemory corruptionremote code execution
vulnerability Critical VM Escape Vulnerability Patched in VMware ESXi VMware has released patches to address several critical vulnerabilities in its ESXi, vCenter, Workstation, and Fusion products. These flaws could allow attackers to execute code on the host, bypass authentication, or cau… SecurityWeek · Jul 29, 2026 Critical CVE-2026-47876CVE-2026-59309CVE-2026-59310vulnerabilitypatchsecurity
