1. CISA added CVE-2026-111497 for Adobe Commerce and Magento and a critical Brotli decoder flaw known as Node2Shell to its Known Exploited Vulnerabilities catalog, citing active exploitation that has breached hundreds of stores. (thehackernews.com)
2. The critical Oracle PeopleSoft bug exploited by ShinyHunters since May is actually three chained flaws, including an SSRF, all patched under CVE-2026-35273. (thehackernews.com)
3. Japan’s GMO Internet Group is offering a $1 million bounty for tips leading to arrests of hackers behind the Onamae.com Desktop Cloud breach, after refusing an extortion demand and urging customers to shut down PCs amid a ransomware threat. (thehackernews.com, bleepingcomputer.com)
4. A Ukrainian national was sentenced to 70 months in prison for his role as a Nefilim and Hive ransomware affiliate targeting hospitals and government entities between 2018 and 2021. (bleepingcomputer.com, therecord.media)
5. The University of New Mexico Health Sciences Center disclosed a ransomware attack that disrupted patient care, surgeries, and diverted ambulances for about two hours. (bleepingcomputer.com, therecord.media)
6. Apple backported a fix for CVE-2026-86950, a high-severity CoreGraphics out-of-bounds write exploited in real-world attacks, to older iPhones and iPads. (thehackernews.com)
7. Microsoft fixed CVE-2026-80097 in Authenticator for Android, a flaw that let permissionless malicious apps steal work account sign-in tokens by posing as trusted Microsoft apps. (thehackernews.com)
8. Tailscale released version 1.104.4 to patch SSH flaws that could allow an attacker to reach services and files on other servers with root privileges. (thehackernews.com, bleepingcomputer.com)
9. The Lazarus Group was attributed to Operation FlashHole, a campaign abusing South Korean security software to deploy malware using post-quantum encryption against construction, software, and wire-communication firms. (thehackernews.com)
10. Keystone will destroy 18,835 hardware wallets after hackers stole the device verification key from its website, which could allow counterfeit devices to pass online checks. (thehackernews.com)
11. Warp disclosed a breach exposing AI agent decision logs and user telemetry data after an attack on a third-party vendor in its infrastructure. (bleepingcomputer.com)
12. Hackers hijacked the Convertr analytics script used by e-commerce platforms to steal shoppers’ payment card data during checkout. (bleepingcomputer.com)
13. Microsoft released out-of-band Windows updates to distrust certificates tied to compromised eMudhra certificate authority keys. (bleepingcomputer.com)
14. A campaign tracked by Check Point abuses fake GitHub projects posing as ChatGPT and Claude desktop apps to spread a malware chain called Yoba via signed binaries. (research.checkpoint.com)
15. Interpol’s Operation Serengeti led to 1,462 arrests across 20 African countries and the US, recovering $105 million in stolen funds. (darkreading.com)
16. The FBI seized the Virtualine domain over alleged criminal hosting and Bitcoin money laundering, including advertisement of sexually explicit images of minors. (thehackernews.com)
17. Researchers detailed CyberStrikeAI, which uses 44 AI agents to automate hacking operations against Japanese targets. (thehackernews.com)
18. A credit card skimming group compromised a shared analytics script on the Convertr e-commerce platform to steal payment data during checkout. (bleepingcomputer.com)
Be First to Comment