StopAndProtect Ransomware Targets Thousands of WordPress Sites
StopAndProtect ransomware hits thousands of WordPress sites, TWINLOOT abuses Microsoft 365 for C2, and RCE flaws found across seven AI orchestration platforms.
In this digest
Security Intel Feed
Cyber Hose
Page 59 of 93
Read digest
CISA says ransomware gangs are exploiting a Windows Task Host flaw
CISA warns ransomware gangs are exploiting a Windows Task Host flaw, plus research on Shadow hVNC malware-as-a-service toolkit.
In this digest
Heights Finance Breach Exposes Data of at Least 1.2 Million People
A breach at Heights Finance hit 1.2M people, while GitLab patched a critical GraphQL flaw and a SkyPilot privilege escalation CVE was disclosed.
In this digest
Claude Code Drove a Gentlemen Ransomware Affiliate's Intrusion
AI-assisted ransomware intrusions hit eight orgs, Apple patches dozens of WebKit flaws, and new CVEs surface in Velociraptor and Quill Forms.
In this digest
Pokémon Center customer data exposed in CEVA Logistics breach
Pokémon Center customer data for UK and Germany was exposed in a CEVA Logistics breach affecting eight European warehouses and disrupting shipments.
Read digestMLflow Unauthenticated SSRF via Webhook Test Endpoint
A CVSS 9.3 unauthenticated SSRF flaw in MLflow headlines this run, plus DeadLock ransomware leveraging Polygon smart contracts.
In this digest
Unisoc VoLTE Exploit Chain Enables Full Android Kernel Access
Unisoc VoLTE exploit chain grants full Android kernel access on budget devices, plus critical OAuth token exposure and privilege escalation CVEs.
In this digest
Threat actor claims 3.6 million records stolen from Azure tenants
A threat actor claims 3.64 million records from nine enterprises including McDonald's and TCS, while GitLab fixes critical GraphQL flaws.
In this digest
CVE-2026-74253: CVSS 10.0 unauthenticated RCE in Joomla extension
A CVSS 10.0 unauthenticated RCE in a Joomla extension leads this digest, alongside SQL injection and DoS vulnerabilities in widely-used libraries.
In this digest
Baylor Genetics hack exposed sensitive patient and employee data
Baylor Genetics disclosed a June cyberattack exposing patient and employee data, while multiple JetBrains CVEs and a new Rust backdoor round out this digest.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check