Cyber Hose

In this digest

• Critical Chrome 0-Day Vulnerability Actively Exploited in the Wild
• FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data
• Divi Ajax Filter through 5.1.2 - Unauthenticated Local File Inclusion via 'custom_...'

In this digest

• CVE-2026-85091: zlib heap buffer overflow via gz_vacate
• CVE-2026-45200: Double free in Imagination Graphics DDK _FreeOSPages affects driver versions 24.2-26.1
• OpenAI GPT-6 Astra Discovers Zero-Day Flaws and Builds Working Exploits in Cyber Tests

In this digest

• Microsoft Entra ID Elevation of Privilege Vulnerability
• Path traversal in Plesk 18.0.79.9 and earlier
• Azure Cosmos DB Spoofing Vulnerability

In this digest

• Attackers exploit zero-days in consistently besieged SonicWall product
• French hospital fined €500,000 after breach exposes data of 727,000
• Microsoft Exchange Vulnerability CVE-2026-62911: What Administrators Should Do and How Zscaler Can Help

In this digest

• Chrome DevTools use-after-free (CVE-2026-85042) allows sandbox-escape code execution, fixed in 152.0.7977.82
• Coder's registry infrastructure compromised to push malicious modules
• python-jose HS256 Token Forgery (CVE-2026-85394)

In this digest

• WordPress WPKoi Templates for Elementor plugin through 3.7.2 vulnerable to DOM-based XSS (CVE-2026-85302)
• Critical Cisco Nexus 9000 Flaw Lets Unauthenticated Remote Attackers Run Code as Root
• HPE patches critical ArubaOS-CX remote code execution flaw

In this digest

• Three High-Severity HP Easy Start Flaws Allow Privilege Escalation on macOS
• Microsoft says KB5120998 Windows update resets desktop settings
• HiddenLayer Raises $100 Million for AI Runtime Security

In this digest

• Over 3 Million WordPress Sites Affected by Migration Plugin Vulnerability
• Plex Warns Users to Patch Security Vulnerabilities Immediately
• Node.js Runtime Abused as Malware Launcher

In this digest

• VPNs Called Biggest OT Backdoor as Experts Push VPN-less Brokered Remote Access for Plants
• Cisco Nexus 9000 Series Switches Flaw Allows Remote Attackers to Execute Malicious Code
• The Gentlemen Ransomware Hackers Disable EDR and Backups Before Encrypting Networks in Under 24 Hours

In this digest

• CISA Adds Seven Actively Exploited Flaws to KEV, Including SonicWall, Sangoma, JFrog, and LiteLLM Bugs
• Researcher Releases FalconFlank PoC Showing Privilege Escalation in CrowdStrike Falcon
• CISA Warns of SonicWall SMA1000 Vulnerabilities Actively Exploited in Attacks