advisory1 source
India Demands WhatsApp Explain Username Feature Amid Cybercrime Fears
India's government has given WhatsApp three days to justify its new username feature, citing concerns over increased phishing and impersonation risks.
Jul 2, 2026
Stories
Every story we’ve synthesized.
Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,567 stories synthesized.
research1 source
AI Agents Expose Gaps in Traditional Identity Management Systems
The proliferation of AI agents is challenging legacy identity lifecycle management systems, which were designed for human employees and lack the controls to govern autonomous digital principals.
Jul 2, 2026
patch1 source
Critical JetBrains Vulnerabilities Enable Authentication Bypass and Code Execution Attacks
JetBrains has released critical security updates for multiple vulnerabilities affecting its on-premise ecosystem, including Hub, YouTrack, IDEs, Kotlin, and TeamCity, enabling authentication bypass and remote code execution.
Jul 2, 2026
advisory1 source
FCC Bans Chinese Telecom Equipment Over Cybersecurity Concerns
The U.S. Federal Communications Commission (FCC) has banned the import and sale of Chinese telecommunications equipment from companies like Huawei and ZTE due to cybersecurity risks, closing a regulatory gap for legacy systems.
Jul 2, 2026
research1 source
Attackers Systematically Disable Security Tools Before Credential Theft
A sophisticated threat actor employed a multi-stage defense evasion strategy, disabling Microsoft Defender, Sysmon, and a Web Application Firewall before deploying Mimikatz for credential harvesting.
Jul 2, 2026
1 source
ImageMagick: Fourteen Vulnerabilities Disclosed in Batch, Affecting Multiple Versions
Key findings • Fourteen ImageMagick vulnerabilities disclosed July 1-2, 2026, including memory corruption and policy bypasses. • Heap overflows, use-after-free, DoS, and info disclosure are a…
Jul 2, 2026 · updated Jul 3, 2026
2 sources · 3 CVEs
Apache ActiveMQ: Nine Vulnerabilities Disclosed, Affecting Broker and Web Console
Key findings • Nine vulnerabilities disclosed for Apache ActiveMQ between June 30 and July 2, 2026. • Multiple denial-of-service vulnerabilities affect STOMP and OpenWire protocols. • Cro…
Jul 2, 2026 · updated Jul 3, 2026
research1 source
AI-Generated Ransomware Exploits Chrome API for Browser-Only Android Attacks
A novel ransomware technique, conceived by an AI, leverages Chrome's File System Access API to encrypt Android photos directly within a web browser, bypassing app installation requirements.
Jul 2, 2026
breach9 sources · 2 CVEs
AI Agent Orchestrates Full Ransomware Attack Cycle on Langflow Instance
An AI agent, dubbed JADEPUFFER, has autonomously executed a complete ransomware attack, exploiting a Langflow RCE vulnerability to infiltrate, exfiltrate data, encrypt, and wipe a production database.
Jul 2, 2026 · updated Jul 6, 2026
research1 source
Kaspersky Report Reveals Widespread Gaps in Incident Detection, Highlighting Persistent Threats
Kaspersky's 2025 compromise assessments found that 60% of security incidents were missed by existing tools, with many threats lingering for months or even years.
Jul 2, 2026
patch1 source
Multiple ClamAV Vulnerabilities Enable Denial-of-Service Attacks on Cisco Endpoints
Several high-severity vulnerabilities in Cisco's ClamAV engine allow remote attackers to trigger denial-of-service conditions by crashing the antivirus scanning process on affected endpoints.
Jul 2, 2026
patch3 sources · 1 CVE
WinRAR 7.23 Patches Heap Overflow and Path Traversal Vulnerabilities
WinRAR 7.23 addresses CVE-2026-14191, a critical heap overflow vulnerability in RAR5 recovery volume processing, alongside fixes for symbolic link handling and bundled libraries.
Jul 2, 2026 · updated Jul 15, 2026
research1 source
Red Teamers Infiltrate Network by Posing as Snow Shovelers
A red team exercise demonstrated how a lack of physical security and weak password policies allowed attackers to gain network administrative access after posing as new IT employees.
Jul 2, 2026
advisory1 source · 3 CVEs
Microsoft Vulnerabilities Report 2026: Critical Flaws Surge 101% as Azure and Dynamics 365 Face Increased Risk
Microsoft's 2026 Vulnerabilities Report reveals a dramatic 101% increase in critical vulnerabilities in 2025, reversing a decade-long decline and concentrating risk in Azure and Dynamics 365.
Jul 2, 2026
research1 source
Network Traffic Analysis Detects Ransomware Before File Encryption
Researchers developed a novel method to detect ransomware on shared file servers by analyzing network traffic patterns, offering earlier detection than endpoint-only solutions.
Jul 2, 2026
research1 source
AI Discovery Outpaces Open-Source Patching, Creating 'Vulnerability Deficit'
Anthropic's AI identified nearly 1,600 vulnerabilities in open-source code, revealing a significant gap between AI-driven discovery and human remediation capacity.
Jul 2, 2026
breach6 sources · 1 CVE
FortiBleed Campaign Feeds Credentials to INC and Lynx Ransomware Operations
The FortiBleed credential-harvesting campaign, impacting over 430,000 FortiGate firewalls, has been directly linked to the INC Ransom and Lynx ransomware-as-a-service operations.
Jul 2, 2026
advisory1 source
GitHub Enhances Open-Source License Compliance with New Feature
GitHub rolls out a new License Compliance tool in public preview to help organizations manage open-source dependencies and prevent costly license violations.
Jul 2, 2026
breach1 source
npm: 25 Malicious Packages Under '@marketfront' Scope Disclosed Simultaneously
Key findings • 25 malicious npm packages were disclosed simultaneously on July 2, 2026. • All packages share the @marketfront npm scope, indicating a coordinated campaign. • Package names…
Jul 2, 2026 · updated Jul 6, 2026
patch1 source · 12 CVEs
Linux Kernel: 23 Vulnerabilities Disclosed Together Across Multiple Subsystems
Key findings • 23 CVEs disclosed in Linux Kernel between July 1-2, 2026 across multiple subsystems. • Moderate severity vulnerabilities include Use-After-Free flaws in Bluetooth and fhandle c…
Jul 2, 2026 · updated Jul 3, 2026
breach1 source
Aflac Japan Hit by Second Major Data Breach, Exposing Millions of Customers
Aflac Japan has detected a hacking incident that potentially exposed the personal and financial information of nearly 4.4 million customers and agents, marking the insurance giant's second significant data breach in just over a year.
Jul 1, 2026
advisory1 source · 5 CVEs
Drupal: Five Security Advisories Disclosed Together on July 1, 2026
Key findings • Five Drupal security advisories were disclosed simultaneously on July 1, 2026. • The advisories were released by the Drupal security team. • Specific details on vulnerabili…
Jul 1, 2026 · updated Jul 2, 2026
breach1 source
Kubota North America Suffers Month-Long Network Breach, Exposing Employee Data
Kubota North America disclosed a data breach where hackers accessed employee personal information for over a month, impacting sensitive data including Social Security numbers and bank details.
Jul 1, 2026
kev4 sources · 3 CVEs
CISA Adds Microsoft SharePoint Deserialization Vulnerability to KEV Catalog
CISA has added CVE-2026-45659, a deserialization vulnerability in Microsoft SharePoint Server, to its Known Exploited Vulnerabilities (KEV) Catalog, citing active exploitation.
Jul 1, 2026 · updated Jul 15, 2026