Skip to content
skopnix
Every edition · newest first

The archive.

1,110 dispatchespage 16 / 19№ 210 – 151

  1. Tue 04 Aug 2026

    4 dispatches
    CVE-2026-6837: Command Injection in Zyxel export-cgi PKCS#12 Export HandlingVULN
  2. incransom claims Oleoductos del Valle on its leak siteRANS
  3. Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accountsAPT
  4. [KEV] CVE-2026-18556: N-able N-central Authentication Bypass Using an Alternate Path or Channel VulnerKEV

  5. Mon 03 Aug 2026

    13 dispatches
    New DOUBLECUP ClickFix service hides malware in browser cache imagesMALW
  6. INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 FlawsEXPL
  7. AI Runs the Hack: Chinese Actor Automates Cyberattacks With DeepSeekAPT
  8. Chinese Actor Weaponizes Deepseek AI Agent to Attack Security FirmAPT
  9. Russian spies turn public Wi-Fi into malware delivery systemsAPT
  10. CVE-2026-69088: Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified static methodVULN
  11. Water system cyberattacks spread to Georgia, Michigan amid US-Iran conflictBRCH
  12. Recent SonicWall Vulnerabilities Exploited in Ransomware AttacksEXPL
  13. Russian State APT Linked to Recent Public Wi-Fi Gateway HackingAPT
  14. US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other StatesAPT
  15. CVE-2026-17583: The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable becauseVULN
  16. CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the WildKEV
  17. Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary CodeVULN

  18. Sun 02 Aug 2026

    2 dispatches
    COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theftVULN
  19. US Water Systems Hit by Suspected Iranian Cyber AttacksAPT

  20. Sat 01 Aug 2026

    3 dispatches
    Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 MinutesEXPL
  21. Rails patches critical Active Storage flaw with RCE potentialVULN
  22. Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User InteractionVULN

  23. Fri 31 Jul 2026

    8 dispatches
    CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theftAPT
  24. Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian HackersAPT
  25. Anthropic says its AI hacked real-world companies in three incidentsBRCH
  26. Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous AttacksAPT
  27. The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET VersionMALW
  28. AWS Blames North Korean Group for Axios and Other npm Supply Chain AttacksSUPL
  29. Critical Flaw Allowed to Azure Cosmos DB PwnageVULN
  30. Anthropic's Claude breached 3 orgs, uploaded PyPI malware during testsEXPL

  31. Thu 30 Jul 2026

    16 dispatches
    CISA Urges Water Sector to Protect OT After Coordinated Attacks on PLCsAPT
  32. JetBrains warns of critical TeamCity remote code execution flawVULN
  33. Minnesota Water Utility Attacks Expose Sector's Cyber-RisksAPT
  34. What water utilities need to know about cybersecurity compliancePOLI
  35. CVE-2026-18140: Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crateSUPL
  36. DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing MalwareMALW
  37. Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackersSUPL
  38. VMware fixes three critical flaws allowing auth bypass, VM escapesVULN
  39. Microsoft Teams vishing attacks lead to Chaos ransomware attacksEXPL
  40. Laundry Bear's new Microsoft Exchange attack triggers on email open (CVE-2026-42897)KEV
  41. [KEV] CVE-2026-59310: Broadcom VMware vCenter Path Traversal VulnerabilityKEV
  42. Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without PromptsEXPL
  43. Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous CyberattacksAPT
  44. eSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis FindsMALW
  45. Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential RotationVULN
  46. thegentlemen claims Malaysian Nuclear Agency on its leak siteRANS

  47. Wed 29 Jul 2026

    12 dispatches
    Russian hackers exploit Exchange OWA zero-day for long-term mailbox accessEXPL
  48. A little-known npm package was North Korea’s warm-up act for the axios hackSUPL
  49. NCSC-2026-0271 [1.01] [M/H] Kwetsbaarheid verholpen in Cisco Secure Firewall Management CenterKEV
  50. Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)VULN
  51. OpenAI agent used exposed credentials at 4 services in Hugging Face breachBRCH
  52. Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI MemoryVULN
  53. Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)EXPL
  54. Hackers disrupt over 30 Minnesota water utilities in coordinated OT attackEXPL
  55. CVE-2026-47876: VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual networkVULN
  56. Russia accuses Telegram founder of aiding terrorism, seeks international arrestAPT
  57. Researchers Show a Single Malicious Webpage Visit Can Compromise Tor BrowserVULN
  58. GHSA-rcr6-4jqh-j84m: Gitea: Remote Code Execution via diffpatch Git Hook InstallationKEV

  59. Tue 28 Jul 2026

    2 dispatches
    CubePilot drone software dev hit by DNS hijacking to intercept trafficSUPL
  60. Thousands of Data Center Controllers Open to TakeoverVULN