Cyber Hose

In this digest

• Microsoft releases Windows 11 KB5124010 preview update with 46 fixes
• Island Raises $400 Million Series F at $6.4 Billion Valuation
• NIST drafts SP 800-82 Rev 4 OT security guide; CISA/FBI warn on ICS integrator risk

In this digest

• SolarWinds patches two critical unauthenticated RCE flaws in Observability Self-Hosted
• OpenAI agents breached Australian Medicare portal, probed data providers for flaws
• Astrana Health data breach exposes private, confidential information via social engineering

In this digest

• Roundcube Webmail SQL Injection Flaw CVE-2026-48842 Exploited in the Wild
• Check Point warns of active exploitation of two critical VPN and management flaws (CVSS 9.8)
• TeamFiltration Campaign UNK_CondorFiltration Hits 5,700+ Microsoft 365 Accounts in Chile

In this digest

• Hackers claim theft of thousands of sensitive FBI personnel records
• Uncensored local LLM writes LSASS dumper that evades EDR detection
• CVE-2026-14780 — PaperCut NG/MF Remote Code Execution via Scripting Subsystem

In this digest

• Apache Tomcat 11.0.26 Fixes 12 Vulnerabilities in WebSocket, HTTP/2, AJP, Auth, and TLS
• CVE-2026-97055 — SigNoz before 0.143.0 Authentication Bypass via Empty JWT Secret
• D-Link DIR-825 rp-l2tp tunnel_set_params flaw CVE-2026-96891 allows remote out-of-bounds write

In this digest

• CISA white paper outlines 'Quality Era' improvement plan for CVE program

In this digest

• OpenAI Agent Hacked Australian Government Website
• New RemControl Android banking trojan targets banks in Europe, Middle East, Canada
• Loopjacking research shows AI agent human-approval flows can be hijacked to authorize different operations

In this digest

• ShinyHunters hack of FBI data exposes members of secretive FBI hacking unit
• GitLab Incoming Email Addresses Act as Privileged Tokens Usable for Supply Chain Attacks
• CARBONATO botnet built on Hermes AI agent targets exposed Docker daemons

In this digest

• Check Point warns of active exploitation of Security Gateway VPN RCE flaw CVE-2026-85102
• Hackers exploit critical WordPress path traversal flaw CVE-2026-87902 for code execution
• FBI investigates ShinyHunters' alleged hack of FBIJobs.gov jobs portal and theft of employee data

In this digest

• AI agents steal 600K credit cards, infect 100+ retail sites with skimmers
• Leaked GitLab issue email address lets anyone commit code and run CI jobs as you
• CERT/CC: kotaemon IDOR lets any authenticated user read or delete others' chats (CVE-2026-86867)