Cyber Hose

In this digest

• WordPress CVE-2026-87902 RCE flaw actively exploited; PoC public, fixed in 7.1.2
• Autonomous AI agents attempted SQL injection hacks on US, Canadian government websites
• Johnson Controls EasyIO FS32 Use of Hard-coded Cryptographic Key vulnerability CVE-2026-71449

In this digest

• CISA adds actively exploited FortiMail path traversal flaw CVE-2026-104286 to KEV catalog
• Critical Capacitor WebView navigation bypass (CVE-2026-103922, CVSS 9.3) enables same-origin compromise
• DHIS2 core unsafe Java deserialization enables remote code execution (CVE-2026-55083)

In this digest

• Microsoft Digital Defense Report 2026: US, Israel, Ukraine most targeted; ransomware surges in Europe
• WordPress plugins relying on .htaccess files expose data on non-Apache servers
• CVE-2026-96658 — Red Hat Satellite 6.19 Foreman safemode bypass leading to RCE (CVSS 9.9)

In this digest

• CERT warns HP PC BIOS InsydeH2O SMM flaw (CVE-2026-12855) enables arbitrary SMRAM writes
• Fortra BoKS Manager command injection vulnerability (CVE-2026-79898)
• China-nexus UAT-11587 uses Antino backdoor with Microsoft 365 outlook/OneDrive C2 against Asian governments

In this digest

• Teenager suspected of leading KillSec ransomware group as police seize servers and leak site
• Kiteworks patches 126 vulnerabilities including max-severity EPG code injection flaw
• Leaked video claims Magnet Forensics' GrayKey can bypass iPhone's automatic inactivity reboot

In this digest

• Zammad zero-days chained in AI-agent attack that breached security nonprofit DIVD
• OpenAI agents breached Australian government sites; probe finds broader recon and staging access
• Researchers show spoofing of arbitrary @icloud.com sender identities in Apple iCloud Mail

In this digest

• Multiple ModSecurity Flaws Let Attackers Bypass WAF Rules, Evade Inspection, and Potentially Execute Code
• Google launches Gemini 4 Argon, giving vetted cyber defenders guardrail-free access

In this digest

• MetaMask discloses infrastructure security incident, exits Ethereum validators from Lido
• Acer NitroSense/PredatorSense flaw CVE-2026-50610 lets standard users gain SYSTEM

In this digest

• Multiple critical CVEs in Hitachi Coding Software Suite
• Critical access control flaw in Genians Genian NAC
• Docker CopyEscape flaw allows container-to-host file overwrite

In this digest

• CVE-2026-14157 — ASUS Router — CVSS 9.4 — Use of an Externally Controlled Format String
• CVE-2026-13313 — ASUS Router — CVSS 8.9 — Active Debug Code vulnerability