Cyber Hose

In this digest

• Poland's MyDr breach exposes medical data of nearly 19 million people
• Internet-Exposed BMCs Expose Data Centers to Hardware-Level Takeover
• Fortinet Patches FortiWeb and FortiManager Authentication Flaws

In this digest

• Akira affiliate rebooted Windows host into Safe Mode to evade EDR
• Phantom Stealer Hides Encrypted Payloads in PNGs to Steal Windows Data
• White House Authorizes Vetted Firms to Conduct Cyber Operations Against Foreign Gangs

In this digest

• UpSnap Unauthenticated Superuser Takeover Chains to Root RCE
• UpSnap Remote Code Execution via IP Field Template Injection
• Troy Hunt Weekly Update 516 Covers ShinyHunters and New Breaches

In this digest

• Exposed Credentials at Major U.S. Tech Company Still Worked Months Later

In this digest

• Attackers exploit Adobe Commerce flaw to hijack customer accounts
• City-Forum Campaign Steals Exposed Salesforce and ServiceNow Data

In this digest

• SonicWall Patches Critical RCE Flaws in Discontinued GMS Platform
• CVE-2026-73300 — Budibase SQL Injection via multipleStatements

In this digest

• Plug & Pwn chains Windows PnP installs into SYSTEM access
• Palo Alto Networks patches 11 flaws in PAN-OS and security products
• CVE-2026-73294 — Semaphore UI OS Command Injection

In this digest

• Actively exploited Cisco ASA and FTD flaw can crash firewalls
• Attackers Weaponize Rapid7 SharePoint Authentication-Bypass PoC
• Nightmare Eclipse releases ShieldBreak Windows Defender zero-day PoC

In this digest

• Suspected China-linked AI agents breach Taiwan government and energy networks
• City-Forum Campaign Targets Salesforce and ServiceNow Guest Access
• 737 Fake Chrome VPN Extensions Redirected Browser Traffic Through SOCKS5 Proxies

In this digest

• Attackers Exploit VMware vCenter CVE-2026-59310 for Persistent Access
• Intel and AMD Patch More Than 80 Vulnerabilities Combined
• SP Page Builder 6.7.1 exposed Joomla sites to pre-auth RCE