Hackers exploit macOS Screen Sharing bypass to deploy Monero miners
macOS Screen Sharing bypass enables Monero miner deployment; TP-Link flaws, Cloudflare MCP controls, and new CVEs round out this digest.
In this digest
Security Intel Feed
Cyber Hose
Page 62 of 93
Read digest
Clop claims 89GB Shell data theft in wider enterprise software
Clop claims 89GB stolen from Shell across a 50-company campaign tied to PTC Windchill flaws, plus a 296K-device IoT botnet and critical Grav CMS CVEs.
In this digest
ShinyHunters breach may expose data from 1.6 million RingCentral
ShinyHunters may have exposed 1.6M RingCentral accounts, Beacon CRM confirms full database theft, and FTC settles with Illuminate Education over 10.1M students.
In this digest
Attackers Probe Unpatched GeoServer SQL Injection Zero-Day
Active probing of an unpatched GeoServer SQL injection zero-day headlines this digest, plus a CVSS 9.8 WordPress plugin account takeover flaw.
In this digest
Critical PDF::WebKit argument injection flaw (CVE-2026-16770)
CVSS 9.8 PDF::WebKit argument injection headlines this run, alongside an OpenChoreo command injection flaw and a second PDF::WebKit OS command injection bug.
In this digest
Critical CVE-2026-18749 (CVSS 9.8) authorisation flaw disclosed
Today's CVE roundup includes a critical CVSS 9.8 authorisation flaw and a CVSS 6.5 privilege issue.
In this digest
Clop-linked actors target Windchill and FlexPLM for data theft
Clop-linked actors exploit PTC Windchill and FlexPLM RCE to steal engineering data; CSS webmail attacks and AI face-swap arrests also covered.
In this digest
Jewelbug breached government webmail while running crypto fraud
Jewelbug breached a government webmail platform serving 15-plus tenants while running crypto-fraud operations.
In this digest
Underground sellers resell discounted access to Claude and ChatGPT
Criminals are reselling discounted access to Claude, ChatGPT and other frontier AI models.
In this digest
Jewelbug APT Runs Browser Espionage and Cryptocurrency Fraud Campaigns
Jewelbug APT espionage campaign, ShipMonk breach hits 13,689 Trezor customers, Microsoft Exchange updates, and industrial ransomware rises 12%.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check