SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE

🕵️ RESEARCH & DEEP DIVES

• Cloud admin with 4 years' Azure/GCP experience weighs a move into cybersecurity
  A cloud administrator is asking r/cybersecurity whether transitioning into a cybersecurity career makes sense.

  • A Reddit user with about 4 years as a Cloud Administrator, focused on Microsoft Azure and GCP with some side DevOps experience, is seeking feedback on a potential career change
  • They are weighing two entry paths: starting in a SOC and building up, or moving into cloud security on top of their existing cloud skills
  • They currently report good work-life balance and manageable stress, and are unsure whether the move is a good idea
    📎 Coverage: reddit.com · 👁 via r/cybersecurity

• OpenLeash Adds a Human Check to Risky AI Agent Actions — SecurityWeek

• SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE — Dark Reading

• AI Gives Cybercriminals a Dangerous Time Advantage — Dark Reading

• Google, Anthropic, and OpenAI Unveil Cyber AI Models, Safeguards, and Access Programs — The Hacker News

• WordPress backup plugin flaw exposes millions of sites to takeover attacks — BleepingComputer

• Jail time for Maine child in 764 marks turning point in federal law enforcement — CyberScoop

• simular-ai Agent-S OCR HTTP API ocr_server.py ImageData resource consumptionA... — CVE ThreatInt

• simular-ai Agent-S CodeAgent code_agent.py denial of serviceA vulnerability h... — CVE ThreatInt

• fast-uri vulnerable to host confusion via an unclosed bracket in the URI auth... — CVE ThreatInt

• Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6An uncon... — CVE ThreatInt

• fast-uri vulnerable to authority injection via an unvalidated port in seriali... — CVE ThreatInt

• sigoden aichat API Endpoint serve.rs memory allocationA flaw has been found i... — CVE ThreatInt

• A heap overflow in SMM module may allow an attacker with access to a second v... — CVE ThreatInt

• rowboatlabs rowboat Composio Webhook Endpoint route.ts req.json denial of ser... — CVE ThreatInt

• Insufficient Verification of Data Authenticity in AGESATM may allow an attacke... — CVE ThreatInt

• Prevent DoS on deadlocked established channel in golang.org/x/crypto/sshPrevi... — CVE ThreatInt

• Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/sshPreviou... — CVE ThreatInt

• UnoPim File Upload RCE via TinyMCE Image Upload EndpointUnoPim before 2.1.5 c... — CVE ThreatInt

• Windows ML CLI: CORS misconfig enables localhost RCEWindows ML CLI is a comma... — CVE ThreatInt

• SEOWriting WordPress Plugin 1.12.5 Stored XSS via iframe onloadSEOWriting plu... — CVE ThreatInt

• UpSignOn before 7.19.0 Sensitive Data Exposure in Process Memory after LockUpSignO... — CVE ThreatInt

• UpSignOn before 7.19.0 Biometric Key Exposure via Windows PasswordVaultUpSignOn fo... — CVE ThreatInt

• UpSignOn before 7.19.0 Sensitive Key Retention in MemoryUpSignOn for Windows befor... — CVE ThreatInt

• Reader Tools PDF Reader App File ActSplashNew.handleDeeplink path traversalA ... — CVE ThreatInt

• tsi-coop tsi-dpdp-cms client-side enforcement of server-side securityA securi... — CVE ThreatInt

• tsi-coop tsi-dpdp-cms Bootstrap Setup Endpoint InterceptingFilter.java missin... — CVE ThreatInt

• Managing identity source transition for AWS IAM Identity Center — AWS Security Blog

• Summer 2024 weather report: Cloudflare with a chance of Intern-ets — Cloudflare Blog

• I'm scanning the interwebs for .js files and reporting accidentally embedded secrets to orgs but it isn't scaling... — @GossiTheDog@cyberplace.social

• Sality P2P Botnet’s Remarkable 23-Year Run Has Come to an End — securityboulevard.com (discovered)

• Why security questionnaires can’t measure vendor risk — securityboulevard.com (discovered)

• Podcast: North Korea’s $1.46 Billion Heist: Lazarus, Kimsuky, and Andariel Explained — securityboulevard.com (discovered)

• How to Evaluate AI SOC Agent Claims: Ask for the Failure Log — securityboulevard.com (discovered)

• Rooted in Trust: Three privilege-escalation vulnerabilities in HP Easy Start for macOS (CVE-2026-12554, CVE-2026-12555, CVE-2026-12556) — r/netsec

• How can you tell in system logs when an AI agent is trying to break rules, rather than a human hacker? — r/cybersecurity

• Surge AI, Mercor Reportedly Sell Training Data to Chinese Labs — r/cybersecurity

• Could cybersecurity jobs be targeted by malicious actors? — r/cybersecurity

• Hackers exploit critical JFrog Artifactory flaw to forge admin tokens — r/cybersecurity

• Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers — r/cybersecurity

• Three high-severity vulnerabilities in HP Easy Start for macOS - CVE-2026-12554, CVE-2026-12555 and CVE-2026-12556 — r/cybersecurity

• How are you actually monitoring and securing your MCP Servers? Any experience with Microsoft Purview? — r/cybersecurity