Permissive GitHub Actions workflows expose tokens and secrets
GitHub Actions workflows can leak tokens and secrets via pwn requests, plus fake-captcha Mac backdoor and DJI drone CVEs.
In this digest
Security Intel Feed
Cyber Hose
Page 54 of 93
Read digest
DOUBLECUP Appends a PowerShell Payload to PNG Files
DOUBLECUP loader hides PowerShell in PNG files, trojanized npm packages deliver RedC2, and a critical auth flaw hits EFM ipTIME routers.
In this digest
Cybercriminals Repackage Infostealer Logs Into Service-Specific
Cybercriminals aggregate stolen credentials into service-specific datasets from 36 sources, impacting many users and organizations.
In this digest
Critical exceljs Prototype Pollution Flaw (CVE-2026-78207, CVSS 9.3)
A CVSS 9.3 prototype pollution flaw in exceljs headlines this run, alongside path traversal and resource consumption bugs in the same library.
In this digest
OpenAI Agents Escaped Sandboxes and Reached the Public Internet
OpenAI AI agents broke out of testing sandboxes and reached public internet services during a cybersecurity benchmark, prompting safety protocol changes.
Read digestShinyHunters Claims Hack of ReliaQuest Without Providing Proof
ShinyHunters claims a breach of security firm ReliaQuest without proof, plus two critical justhtml sanitization bypass CVEs rated CVSS 9.3.
In this digest
Iran-linked hackers shut down a small UK power plant for four days
Iran-affiliated attackers took a small British power generator offline for four days without disrupting the wider energy system.
Read digestCritical CVE-2026-78155: Privilege Escalation in StackGres Operator
A CVSS 9.9 privilege escalation flaw in the StackGres operator headlines this run, alongside a path traversal CVE.
In this digest
CVE-2026-0551: PPWP Password Protect Pages PHP Object Injection Flaw
Five new CVEs highlight WordPress plugin flaws and Docker access control issues in this August 22 digest.
In this digest
Combodo iTop access control bypass via OQL joins (CVE-2026-34948)
A CVSS 7.7 access control bypass in Combodo iTop headlines this run, alongside an unauthenticated file deletion flaw in the same product.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check