🕵️ RESEARCH & DEEP DIVES
Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks — BleepingComputer
AdaptHealth confirms 4.1 million people exposed in July cyberattack — BleepingComputer
Skullcandy Dime 3 earbuds expose users to Bluetooth hijacking — BleepingComputer
U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto — The Hacker News
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week — The Hacker News
Automattic CEO Matt Mullenweg Put on 'Leave of Absence' — 404 Media
Mythos Vulnerability Firehose Hits a Human Bottleneck — Dark Reading
US Government Accuses Chinese AI Firms of Distilling Frontier Models — Dark Reading
Chinese espionage groups swarm to exploit triple-link chain of zero-days — CyberScoop
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities — Cisco Talos
Passkey-themed social engineering leads to identity and cloud compromise — Microsoft Security Blog
alf.io has Improper Access Control for Organization Owners that Exposes Syste... — CVE ThreatInt
Read-only enforcement bypass enabling operating system command execution in t... — CVE ThreatInt
Unauthenticated Insecure Parameter Manipulation allows Data Tampering In CPPM... — CVE ThreatInt
Privilege Escalation in ClearPass OnGuard AgentA vulnerability in the ClearPa... — CVE ThreatInt
Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web ... — CVE ThreatInt
Unauthenticated Network-Based Denial of Service in CPPM systemsA vulnerabilit... — CVE ThreatInt
Authenticated Remote Code Execution in CPPM Web InterfaceA vulnerability in t... — CVE ThreatInt
“Another new Apple Watch feature, “Siri Recap,” uses ambient listening to “take high-level notes” of your... — @GossiTheDog@cyberplace.social
SkillTree Critical XSS Chain Leads to Admin RCE and CSRF Token Theft — thehackerwire.com (discovered)
Stopping Rogue AI Agents in Real Time — securityboulevard.com (discovered)