1. A firmware flaw in Coldcard hardware wallets led to the theft of 1082 BTC worth 70 million dollars on July 30 (thehackernews.com). 2. Rails patched a critical Active Storage vulnerability that allows unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (bleepingcomputer.com). 3. Adobe released a fix for a maximum severity CVSS 10.0 vulnerability in Campaign Classic that enables arbitrary code…
Posts tagged as “APT”
1. Region: Ukraine. Russian forces launched approximately 1,900 drones, 1,600 guided bombs, and 144 missiles at Ukraine over the past week, damaging over 1,500 sites. Source: Euromaidan Press. 2. Region: Ukraine. Russian guided bombs struck residential areas in Zaporizhzhia, killing at least two people and injuring 31 others. Source: UkraineNow. 3. Region: Ukraine. Ukrainian drone units successfully intercepted a Russian ZALA Z-20 reconnaissance drone at…
1. Cisco Secure Firewall Management Center is under active exploitation via a zero day vulnerability tracked as CVE 2026 20316 which allows unauthenticated remote access (The Hacker News). 2. Russian state sponsored threat actors are exploiting a zero day vulnerability in Microsoft Outlook Web Access to maintain long term mailbox access via a backdoor named OWAReaper (The Hacker News, BleepingComputer). 3. A coordinated cyberattack targeted…
1. Microsoft SharePoint vulnerability CVE-2026-50522 is under active exploitation to steal machine keys and maintain persistent access (The Hacker News). 2. Qilin ransomware actors are actively exploiting the Palo Alto Networks PAN-OS authentication bypass flaw CVE-2026-0257 for initial network access (The Hacker News). 3. Critical vulnerabilities in WordPress Core known as wp2shell are being exploited to install persistent webshells and malicious plugins (Bleeping Computer). 4.…
1. A critical remote code execution vulnerability in the ServiceNow AI Platform identified as CVE-2026-6875 is currently being exploited in the wild (BleepingComputer). 2. The Hugging Face AI model repository suffered a data breach after an autonomous AI agent gained unauthorized access to internal datasets and credentials (The Hacker News). 3. WordPress core vulnerabilities collectively known as wp2shell are being actively exploited to achieve remote…
1. Region: Middle East. The United States launched a second wave of airstrikes against Iranian military targets, including facilities in Ahvaz and Bandar Abbas, to degrade capabilities threatening commercial shipping. Source: CENTCOM. 2. Region: Ukraine. Defense Minister Mykhailo Fedorov officially announced his resignation amid reports of internal pressure from military officials and concerns over procurement reforms. Source: Hromadske. 3. Region: Middle East. An Iranian Shahed-136…
Geopolitical Overview: July 15, 2026 Today’s open-source intelligence landscape is dominated by a severe military escalation in the Middle East and significant strategic shifts on the Eastern Front. The collapse of the US-Iran ceasefire memorandum has triggered direct military confrontations, reshaping maritime security in the Strait of Hormuz. Simultaneously, Ukraine’s systematic degradation of Russian naval and energy infrastructure demonstrates a highly effective asymmetric warfare strategy.…
1. CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog including a critical path traversal flaw in Adobe ColdFusion. (thehackernews.com) 2. Federal agencies were ordered by CISA to prioritize patching an actively exploited authentication bypass vulnerability in the Langflow AI framework. (bleepingcomputer.com) 3. Researchers disclosed GhostLock CVE-2026-43499 a 15-year-old Linux kernel flaw that allows unprivileged users to gain root access and escape…
1. A critical vulnerability in Progress Kemp LoadMaster tracked as CVE-2026-8037 allows unauthenticated attackers to execute arbitrary commands as root (thehackernews.com). 2. The Oracle E-Business Suite vulnerability CVE-2026-46817 is currently being exploited in the wild to take over susceptible instances (thehackernews.com). 3. Ransomware gangs are actively exploiting the Windows BlueHammer privilege escalation flaw in Microsoft Defender (bleepingcomputer.com). 4. The Blackfield ransomware group has demanded a…
1. Region: Europe. Record-breaking heatwaves hit Europe on June 27, with temperatures reaching 41.5 degrees Celsius in Germany and 40.6 degrees Celsius in the Czech Republic. Source: Osint613. 2. Region: Ukraine. Ukrainian forces struck the Titan-Barrikady defense plant in Volgograd, Russia, on June 27 using Flamingo missiles, causing significant damage to production facilities. Source: Euromaidan Press. 3. Region: Ukraine. Ukraine hit a record 13 Russian…
1. Ukraine: Ukrainian forces launched a long-range cruise missile strike using FP-5 Flamingo missiles against the Titan-Barrikady defense plant in Volgograd, Russia, damaging multiple workshops. The facility is a critical site for the production of Iskander, Yars, and Topol-M missile launchers. Source: Al Jazeera. 2. Middle East: The United States and Iran exchanged military strikes in the Strait of Hormuz, with the US targeting Iranian…
1. Region: Ukraine. Russian forces are conducting a significant troop build-up near a city considered vital for the control of the Donbas region. Source: BBC. 2. Region: Ukraine. Ukrainian drone strikes targeted Russian railway infrastructure in Bryansk and ignited a fuel terminal in Feodosia, Crimea. Source: TheDeadDistrict. 3. Region: Ukraine. President Zelenskyy issued an ultimatum to Belarus, demanding the removal of drone relay stations within…
1. Region: Russia. Ukrainian drones conducted a major strike on the Moscow Oil Refinery in Kapotnya for the second time this week, causing multiple fires and explosions. Source: The Guardian. 2. Region: Middle East. US President Donald Trump and Iranian President Masoud Pezeshkian signed a memorandum of understanding to end the conflict, with Iran planning to charge fees for vessels entering the Strait of Hormuz.…
1. Ukraine: Russia launched a massive overnight aerial attack on June 15, 2026, involving 611 drones and 70 missiles, causing significant damage to the Kyiv-Pechersk Lavra monastery and the Dovzhenko Film Studio. Source: UkraineNow. 2. Ukraine: At least 5 people were killed and 35 injured in Kyiv following Russian strikes that hit residential buildings, infrastructure, and cultural monuments. Source: UkrReview. 3. Ukraine: Ukrainian forces successfully…
1. CISA added the high severity SolarWinds Serv-U denial of service vulnerability CVE-2026-28318 to its Known Exploited Vulnerabilities catalog following reports of active exploitation (The Hacker News). 2. Cisco warned that the high severity vulnerability CVE-2026-20245 in Catalyst SD-WAN Manager is currently being exploited in the wild with no patch yet available (The Hacker News). 3. The Miasma self-replicating supply chain attack has compromised 73…
1. Region: Ukraine. Ukrainian forces conducted a massive drone strike on Russian strategic targets in the Leningrad Region, including the 1060th Logistics Center in Bolshaya Izhora and oil terminals in Lomonosov. Source: Maks NAFO FELLA. 2. Region: Middle East. The Pentagon has raised the counterintelligence threat level regarding Israeli spying on U.S. officials to critical, citing surveillance of top personnel involved in Iran and Lebanon…
1. Ukraine: President Zelensky sent an open letter to Vladimir Putin proposing a direct meeting in a neutral country to end the war, stating the conflict is Putin’s personal choice. Kremlin spokesperson Peskov confirmed the letter was received and will be briefed to the Russian leader. Source: UkraineNow, wartranslated. 2. Middle East: The US State Department issued a security alert for all Middle Eastern countries,…
1. A supply chain attack compromised Red Hat npm packages to distribute the Miasma credential stealing worm (thehackernews.com). 2. A critical Windows Netlogon remote code execution vulnerability is being actively exploited in the wild (bleepingcomputer.com). 3. Nearly 2000 WordPress sites were infected with malware using Steam profiles as command and control infrastructure (bleepingcomputer.com). 4. The Pakistan linked SideCopy group is targeting the Afghanistan Ministry of…
1. Microsoft confirmed active exploitation of two Microsoft Defender vulnerabilities including CVE-2026-41091 which grants SYSTEM privileges (The Hacker News). 2. CISA added critical vulnerabilities in Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities catalog following evidence of active use (The Hacker News). 3. Cisco patched a maximum severity vulnerability CVE-2026-20223 in Secure Workload that allows unauthenticated remote attackers to access sensitive data…
1. The ShinyHunters threat group claims to have stolen 275 million records from Canvas LMS affecting 9000 schools with a ransom deadline set for May 12 (Reddit). 2. Instructure reported a second security incident involving its Canvas platform following the massive data breach (Reddit). 3. The official JDownloader website was compromised to distribute malicious installers containing a Python based remote access trojan (BleepingComputer). 4. A…
1. Ukraine: Russian forces launched 27 strike drones against Ukraine overnight despite a ceasefire, with Ukrainian air defenses reporting all drones were downed or suppressed. Source: Noel Reports. 2. Ukraine: A reconnaissance drone with Cyrillic markings crashed in Poland near the border with the Kaliningrad region. Source: RMF FM. 3. Ukraine: President Vladimir Putin stated on May 10 that the conflict in Ukraine is nearing…
1. Palo Alto Networks warns that a critical buffer overflow vulnerability in PAN-OS tracked as CVE-2026-0300 is being actively exploited for unauthenticated remote code execution (thehackernews.com). 2. A critical Linux kernel local privilege escalation vulnerability known as Copy Fail or CVE-2026-31431 allows for stealthy root access on millions of systems (unit42.paloaltonetworks.com). 3. The Apache Software Foundation released updates for a critical HTTP/2 flaw tracked as…
1. Region: Middle East. President Trump notified Congress that the war with Iran has ended, though he retains the authority to restart the 60-day War Powers Resolution clock if hostilities resume. Source: Associated Press. 2. Region: NATO. The Pentagon confirmed plans to withdraw 5,000 U.S. troops from Germany over the next 6 to 12 months, citing tensions with European allies over the Iran conflict. Source:…
1. Ukraine: Ukrainian forces successfully utilized a new air defense system nicknamed STASH, equipped with AGM-114 Hellfire missiles, to intercept a Russian Shahed drone. Source: Telegram (UkraineNow). 2. Ukraine: Satellite imagery confirmed damage to Russian Su-57 and Su-34 aircraft following a Ukrainian strike on the Shagol airfield in the Chelyabinsk region on April 25. Source: Telegram (WarTranslated). 3. Ukraine: Ukrainian drone strikes targeted oil facilities…
1. Region: Ukraine. Ukrainian forces successfully struck a Russian Kasta-2E radar station in Belgorod Oblast using a RAM-2 loitering munition from 80 km away. Source: front_ukrainian. 2. Region: Middle East. The IDF conducted strikes on over 20 Hezbollah targets in southern Lebanon and the Beqaa Valley, focusing on weapons manufacturing and storage infrastructure. Source: sentdefender. 3. Region: Middle East. The USS Rafael Peralta (DDG 115)…
1. CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog affecting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X routers (The Hacker News). 2. Home security company ADT confirmed a data breach following extortion threats from the ShinyHunters group (BleepingComputer). 3. The Lazarus APT group is conducting a new campaign using the Mach-O Man malware kit to target businesses on macOS (Reddit).…
1. A high severity SSRF vulnerability in LMDeploy tracked as CVE 2026 33626 is being actively exploited in the wild within 13 hours of its disclosure (thehackernews.com). 2. The Bitwarden CLI npm package was compromised as part of an ongoing supply chain attack involving malicious code in the bw1.js file (thehackernews.com). 3. The threat group UNC6692 is conducting a campaign by impersonating IT helpdesk staff…
1. Middle East: The USS George H.W. Bush carrier strike group has entered the US Central Command area of responsibility, joining other naval assets in the region. Source: Reuters. 2. Middle East: Iranian air defense systems were activated over Tehran and other cities, with officials claiming they engaged hostile micro-drones. Source: Reuters. 3. Middle East: The IRGC Navy reportedly seized the container ships MSC Francesca…
1. Over 1300 Microsoft SharePoint servers remain vulnerable to a spoofing zero day exploit that is currently being used in active attacks (BleepingComputer). 2. Microsoft released emergency out of band security updates to address a critical privilege escalation vulnerability in ASP.NET Core (BleepingComputer). 3. CISA has flagged a new SD WAN vulnerability that is currently being exploited in the wild (Reddit). 4. Researchers discovered a…
1. A critical authentication bypass vulnerability in Nginx UI with Model Context Protocol support is currently being exploited in the wild for full server takeover. (https://www.bleepingcomputer.com/news/security/critical-nginx-ui-auth-bypass-flaw-now-actively-exploited-in-the-wild/) 2. A new zero day vulnerability in Microsoft SharePoint has been identified as actively exploited and is subject to a CISA remediation deadline. (https://www.reddit.com/r/cybersecurity/comments/1smf2gz/new_microsoft_sharepoint_zeroday_cve_april_15/) 3. CISA has issued a warning regarding the active exploitation of a Windows Task Host…
1. Region: Ukraine. Russian missiles struck Kyiv, resulting in one fatality and 10 injuries. Source: Reuters. 2. Region: Middle East. The Israeli security cabinet concluded a meeting without reaching a decision on a ceasefire in Lebanon, as reports suggest Prime Minister Netanyahu aims to capture Bint Jbeil first. Source: Axios. 3. Region: Middle East. Iran’s Parliament Speaker Mohammad Ghalibaf stated that any ceasefire in Lebanon…
1. Middle East: President Donald Trump announced a U.S. naval blockade of the Strait of Hormuz following the collapse of nuclear negotiations with Iran in Islamabad. The U.S. Navy is directed to interdict any vessels that have paid transit tolls to Iran. Source: Reuters. 2. Middle East: The Israel Defense Forces have fully encircled the southern Lebanese town of Bint Jbeil, conducting ground operations and…
1. Ukraine: A prisoner exchange took place on April 11, 2026, resulting in the return of 175 Ukrainian servicemen and 7 civilians from Russian captivity. Source: Reuters. 2. Ukraine: A 36-hour Easter ceasefire between Ukraine and Russia commenced at 16:00 on April 11, with the Ukrainian General Staff ordering forces to respond only in kind. Source: Reuters. 3. Middle East: Direct negotiations between U.S. and…
1. A remote unauthenticated RCE to root chain vulnerability has been identified in CUPS (https://www.reddit.com/r/netsec/comments/1sflk3t/spooler_alert_remote_unauthd_rcetoroot_chain_in/). 2. A path traversal vulnerability in an MCP server allows AI agents to access sensitive SSH keys (https://www.reddit.com/r/netsec/comments/1sfhmaa/we_found_a_path_traversal_in_an_mcp_server_with/). 3. A self propagating credential worm has compromised npm packages under the fairwords scope to steal tokens and infect PyPI packages (https://www.reddit.com/r/Malware/comments/1sfjg9f/fairwords_npm_packages_compromised_by_a/). 4. Authorities have disrupted a campaign involving router DNS hijacks…
1. Region: Ukraine. President Volodymyr Zelenskyy arrived in Damascus for an official visit to meet Syrian President Ahmed al-Sharaa to discuss security and energy cooperation. Source: Reuters. 2. Region: Middle East. Iranian ballistic missiles struck a residential building in Haifa, Israel, causing significant damage and injuries. Source: Reuters. 3. Region: Middle East. US President Donald Trump threatened to target Iranian energy infrastructure and bridges on…
1. Region: Middle East. US Special Operations forces successfully rescued a downed F-15E Weapons System Officer in Iran following a complex 36-hour mission involving hundreds of troops and dozens of aircraft. Two US transport planes were destroyed by US forces at a remote Iranian airstrip after becoming stuck in soft ground to prevent capture. Source: Reuters, The New York Times. 2. Region: Ukraine. Ukrainian forces…
1. Region: Middle East. President Donald Trump confirmed the successful rescue of two U.S. F-15E crew members from deep inside Iranian territory following a high-risk combat search and rescue operation. Source: Reuters. 2. Region: Middle East. During the rescue operation in Iran, two U.S. transport aircraft were disabled and subsequently destroyed by U.S. forces to prevent their capture. Source: The New York Times. 3. Region:…
1. Region: Middle East. US forces are conducting a high-risk search and rescue mission in Kohgiluyeh and Boyer-Ahmad province, Iran, for a missing F-15E crew member, involving helicopter deployments and airstrikes against IRGC forces. Source: AP News. 2. Region: Middle East. Iranian drone strikes hit Kuwait Petroleum Corporation facilities and desalination plants, causing significant damage and fires. Source: Al Jazeera. 3. Region: Middle East. Iran…
1. Middle East: Iran launched a cluster missile attack on central Israel early April 3, 2026, causing debris to fall in nine locations across the Tel Aviv area. No casualties were reported, though damage to buildings and vehicles occurred in Petah Tikva and Givat Shmuel. Source: Mid East OSINT. 2. Middle East: President Donald Trump stated on April 3, 2026, that the U.S. military has…
1. Region: Middle East. The United States military has drawn up a plan to seize nearly 1,000 pounds of highly enriched uranium from Iran, involving the construction of a runway inside Iranian territory for extraction. Source: Washington Post. 2. Region: Middle East. President Donald Trump is expected to deliver a primetime address declaring the war in Iran is winding down and that U.S. military objectives…
1. Middle East: The United Arab Emirates has imposed an immediate ban on all Iranian nationals, prohibiting them from entering or transiting through the country. Source: Reuters. 2. Middle East: The United States is deploying a third aircraft carrier, the USS George H.W. Bush, to the region to join the USS Abraham Lincoln and USS Gerald R. Ford strike groups. Source: Wall Street Journal. 3.…
1. Region: Russia. Ukrainian drone strikes have halted at least 40 percent of Russia’s oil export capacity, including major facilities at Ust-Luga and Primorsk. Source: Reuters. 2. Region: Iran. Tehran officially rejected a 15-point U.S. peace proposal, demanding reparations and international recognition of its control over the Strait of Hormuz. Source: Press TV. 3. Region: Middle East. Prime Minister Benjamin Netanyahu ordered the Israeli military…
Global security dynamics reached a critical threshold on March 23, 2026, driven by unprecedented military escalations in the Middle East and strategic deep strikes by Ukrainian forces. The ongoing Operation Epic Fury has fundamentally altered the security architecture of the Persian Gulf, threatening global energy supplies. Meanwhile, the technological arms race in Eastern Europe continues to accelerate, with both Ukraine and Russia deploying novel asymmetric…
1. Region: Middle East. Iranian IRGC threatened to strike critical infrastructure in Saudi Arabia, Qatar, UAE, Bahrain, Kuwait, and Jordan if the U.S. attacks Iranian energy facilities. Source: Pak_Osint. 2. Region: Middle East. President Trump issued an ultimatum to Iran regarding the Strait of Hormuz, warning of total destruction of Iranian power plants if the waterway is not reopened. Source: Osint613. 3. Region: Middle East.…
1. Region: Ukraine. Ukrainian forces continue clearing operations in the Dnipropetrovsk region, with only a few pockets of Russian elements remaining. Source: NSTRIKE1231. 2. Region: Ukraine. The Ukrainian Armed Forces have liquidated at least 8000 Russian officers since the start of the invasion, averaging 5 per day. Source: KilledInUkraine. 3. Region: Ukraine. Ukrainian long-range drones struck Russian targets in Saratov, Engels, and Tolyatti, causing a…