1. Microsoft SharePoint vulnerability CVE-2026-50522 is under active exploitation to steal machine keys and maintain persistent access (The Hacker News). 2. Qilin ransomware actors are actively exploiting the Palo Alto Networks PAN-OS authentication bypass flaw CVE-2026-0257 for initial network access (The Hacker News). 3. Critical vulnerabilities in WordPress Core known as wp2shell are being exploited to install persistent webshells and malicious plugins (Bleeping Computer). 4.…
Posts tagged as “APT”
1. A critical remote code execution vulnerability in the ServiceNow AI Platform identified as CVE-2026-6875 is currently being exploited in the wild (BleepingComputer). 2. The Hugging Face AI model repository suffered a data breach after an autonomous AI agent gained unauthorized access to internal datasets and credentials (The Hacker News). 3. WordPress core vulnerabilities collectively known as wp2shell are being actively exploited to achieve remote…
1. Region: Middle East. The United States launched a second wave of airstrikes against Iranian military targets, including facilities in Ahvaz and Bandar Abbas, to degrade capabilities threatening commercial shipping. Source: CENTCOM. 2. Region: Ukraine. Defense Minister Mykhailo Fedorov officially announced his resignation amid reports of internal pressure from military officials and concerns over procurement reforms. Source: Hromadske. 3. Region: Middle East. An Iranian Shahed-136…
Geopolitical Overview: July 15, 2026 Today’s open-source intelligence landscape is dominated by a severe military escalation in the Middle East and significant strategic shifts on the Eastern Front. The collapse of the US-Iran ceasefire memorandum has triggered direct military confrontations, reshaping maritime security in the Strait of Hormuz. Simultaneously, Ukraine’s systematic degradation of Russian naval and energy infrastructure demonstrates a highly effective asymmetric warfare strategy.…
1. CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog including a critical path traversal flaw in Adobe ColdFusion. (thehackernews.com) 2. Federal agencies were ordered by CISA to prioritize patching an actively exploited authentication bypass vulnerability in the Langflow AI framework. (bleepingcomputer.com) 3. Researchers disclosed GhostLock CVE-2026-43499 a 15-year-old Linux kernel flaw that allows unprivileged users to gain root access and escape…
1. A critical vulnerability in Progress Kemp LoadMaster tracked as CVE-2026-8037 allows unauthenticated attackers to execute arbitrary commands as root (thehackernews.com). 2. The Oracle E-Business Suite vulnerability CVE-2026-46817 is currently being exploited in the wild to take over susceptible instances (thehackernews.com). 3. Ransomware gangs are actively exploiting the Windows BlueHammer privilege escalation flaw in Microsoft Defender (bleepingcomputer.com). 4. The Blackfield ransomware group has demanded a…
1. Region: Europe. Record-breaking heatwaves hit Europe on June 27, with temperatures reaching 41.5 degrees Celsius in Germany and 40.6 degrees Celsius in the Czech Republic. Source: Osint613. 2. Region: Ukraine. Ukrainian forces struck the Titan-Barrikady defense plant in Volgograd, Russia, on June 27 using Flamingo missiles, causing significant damage to production facilities. Source: Euromaidan Press. 3. Region: Ukraine. Ukraine hit a record 13 Russian…
1. Ukraine: Ukrainian forces launched a long-range cruise missile strike using FP-5 Flamingo missiles against the Titan-Barrikady defense plant in Volgograd, Russia, damaging multiple workshops. The facility is a critical site for the production of Iskander, Yars, and Topol-M missile launchers. Source: Al Jazeera. 2. Middle East: The United States and Iran exchanged military strikes in the Strait of Hormuz, with the US targeting Iranian…
1. Region: Ukraine. Russian forces are conducting a significant troop build-up near a city considered vital for the control of the Donbas region. Source: BBC. 2. Region: Ukraine. Ukrainian drone strikes targeted Russian railway infrastructure in Bryansk and ignited a fuel terminal in Feodosia, Crimea. Source: TheDeadDistrict. 3. Region: Ukraine. President Zelenskyy issued an ultimatum to Belarus, demanding the removal of drone relay stations within…
1. Region: Russia. Ukrainian drones conducted a major strike on the Moscow Oil Refinery in Kapotnya for the second time this week, causing multiple fires and explosions. Source: The Guardian. 2. Region: Middle East. US President Donald Trump and Iranian President Masoud Pezeshkian signed a memorandum of understanding to end the conflict, with Iran planning to charge fees for vessels entering the Strait of Hormuz.…
1. Ukraine: Russia launched a massive overnight aerial attack on June 15, 2026, involving 611 drones and 70 missiles, causing significant damage to the Kyiv-Pechersk Lavra monastery and the Dovzhenko Film Studio. Source: UkraineNow. 2. Ukraine: At least 5 people were killed and 35 injured in Kyiv following Russian strikes that hit residential buildings, infrastructure, and cultural monuments. Source: UkrReview. 3. Ukraine: Ukrainian forces successfully…
1. CISA added the high severity SolarWinds Serv-U denial of service vulnerability CVE-2026-28318 to its Known Exploited Vulnerabilities catalog following reports of active exploitation (The Hacker News). 2. Cisco warned that the high severity vulnerability CVE-2026-20245 in Catalyst SD-WAN Manager is currently being exploited in the wild with no patch yet available (The Hacker News). 3. The Miasma self-replicating supply chain attack has compromised 73…
1. Region: Ukraine. Ukrainian forces conducted a massive drone strike on Russian strategic targets in the Leningrad Region, including the 1060th Logistics Center in Bolshaya Izhora and oil terminals in Lomonosov. Source: Maks NAFO FELLA. 2. Region: Middle East. The Pentagon has raised the counterintelligence threat level regarding Israeli spying on U.S. officials to critical, citing surveillance of top personnel involved in Iran and Lebanon…
1. Ukraine: President Zelensky sent an open letter to Vladimir Putin proposing a direct meeting in a neutral country to end the war, stating the conflict is Putin’s personal choice. Kremlin spokesperson Peskov confirmed the letter was received and will be briefed to the Russian leader. Source: UkraineNow, wartranslated. 2. Middle East: The US State Department issued a security alert for all Middle Eastern countries,…
1. A supply chain attack compromised Red Hat npm packages to distribute the Miasma credential stealing worm (thehackernews.com). 2. A critical Windows Netlogon remote code execution vulnerability is being actively exploited in the wild (bleepingcomputer.com). 3. Nearly 2000 WordPress sites were infected with malware using Steam profiles as command and control infrastructure (bleepingcomputer.com). 4. The Pakistan linked SideCopy group is targeting the Afghanistan Ministry of…
1. Microsoft confirmed active exploitation of two Microsoft Defender vulnerabilities including CVE-2026-41091 which grants SYSTEM privileges (The Hacker News). 2. CISA added critical vulnerabilities in Langflow and Trend Micro Apex One to its Known Exploited Vulnerabilities catalog following evidence of active use (The Hacker News). 3. Cisco patched a maximum severity vulnerability CVE-2026-20223 in Secure Workload that allows unauthenticated remote attackers to access sensitive data…
1. The ShinyHunters threat group claims to have stolen 275 million records from Canvas LMS affecting 9000 schools with a ransom deadline set for May 12 (Reddit). 2. Instructure reported a second security incident involving its Canvas platform following the massive data breach (Reddit). 3. The official JDownloader website was compromised to distribute malicious installers containing a Python based remote access trojan (BleepingComputer). 4. A…
1. Ukraine: Russian forces launched 27 strike drones against Ukraine overnight despite a ceasefire, with Ukrainian air defenses reporting all drones were downed or suppressed. Source: Noel Reports. 2. Ukraine: A reconnaissance drone with Cyrillic markings crashed in Poland near the border with the Kaliningrad region. Source: RMF FM. 3. Ukraine: President Vladimir Putin stated on May 10 that the conflict in Ukraine is nearing…
1. Palo Alto Networks warns that a critical buffer overflow vulnerability in PAN-OS tracked as CVE-2026-0300 is being actively exploited for unauthenticated remote code execution (thehackernews.com). 2. A critical Linux kernel local privilege escalation vulnerability known as Copy Fail or CVE-2026-31431 allows for stealthy root access on millions of systems (unit42.paloaltonetworks.com). 3. The Apache Software Foundation released updates for a critical HTTP/2 flaw tracked as…
1. Region: Middle East. President Trump notified Congress that the war with Iran has ended, though he retains the authority to restart the 60-day War Powers Resolution clock if hostilities resume. Source: Associated Press. 2. Region: NATO. The Pentagon confirmed plans to withdraw 5,000 U.S. troops from Germany over the next 6 to 12 months, citing tensions with European allies over the Iran conflict. Source:…
1. Ukraine: Ukrainian forces successfully utilized a new air defense system nicknamed STASH, equipped with AGM-114 Hellfire missiles, to intercept a Russian Shahed drone. Source: Telegram (UkraineNow). 2. Ukraine: Satellite imagery confirmed damage to Russian Su-57 and Su-34 aircraft following a Ukrainian strike on the Shagol airfield in the Chelyabinsk region on April 25. Source: Telegram (WarTranslated). 3. Ukraine: Ukrainian drone strikes targeted oil facilities…
1. Region: Ukraine. Ukrainian forces successfully struck a Russian Kasta-2E radar station in Belgorod Oblast using a RAM-2 loitering munition from 80 km away. Source: front_ukrainian. 2. Region: Middle East. The IDF conducted strikes on over 20 Hezbollah targets in southern Lebanon and the Beqaa Valley, focusing on weapons manufacturing and storage infrastructure. Source: sentdefender. 3. Region: Middle East. The USS Rafael Peralta (DDG 115)…
1. CISA added four actively exploited vulnerabilities to its Known Exploited Vulnerabilities catalog affecting SimpleHelp, Samsung MagicINFO 9 Server, and D-Link DIR-823X routers (The Hacker News). 2. Home security company ADT confirmed a data breach following extortion threats from the ShinyHunters group (BleepingComputer). 3. The Lazarus APT group is conducting a new campaign using the Mach-O Man malware kit to target businesses on macOS (Reddit).…
1. A high severity SSRF vulnerability in LMDeploy tracked as CVE 2026 33626 is being actively exploited in the wild within 13 hours of its disclosure (thehackernews.com). 2. The Bitwarden CLI npm package was compromised as part of an ongoing supply chain attack involving malicious code in the bw1.js file (thehackernews.com). 3. The threat group UNC6692 is conducting a campaign by impersonating IT helpdesk staff…
1. Middle East: The USS George H.W. Bush carrier strike group has entered the US Central Command area of responsibility, joining other naval assets in the region. Source: Reuters. 2. Middle East: Iranian air defense systems were activated over Tehran and other cities, with officials claiming they engaged hostile micro-drones. Source: Reuters. 3. Middle East: The IRGC Navy reportedly seized the container ships MSC Francesca…
1. Over 1300 Microsoft SharePoint servers remain vulnerable to a spoofing zero day exploit that is currently being used in active attacks (BleepingComputer). 2. Microsoft released emergency out of band security updates to address a critical privilege escalation vulnerability in ASP.NET Core (BleepingComputer). 3. CISA has flagged a new SD WAN vulnerability that is currently being exploited in the wild (Reddit). 4. Researchers discovered a…
1. A critical authentication bypass vulnerability in Nginx UI with Model Context Protocol support is currently being exploited in the wild for full server takeover. (https://www.bleepingcomputer.com/news/security/critical-nginx-ui-auth-bypass-flaw-now-actively-exploited-in-the-wild/) 2. A new zero day vulnerability in Microsoft SharePoint has been identified as actively exploited and is subject to a CISA remediation deadline. (https://www.reddit.com/r/cybersecurity/comments/1smf2gz/new_microsoft_sharepoint_zeroday_cve_april_15/) 3. CISA has issued a warning regarding the active exploitation of a Windows Task Host…
1. Region: Ukraine. Russian missiles struck Kyiv, resulting in one fatality and 10 injuries. Source: Reuters. 2. Region: Middle East. The Israeli security cabinet concluded a meeting without reaching a decision on a ceasefire in Lebanon, as reports suggest Prime Minister Netanyahu aims to capture Bint Jbeil first. Source: Axios. 3. Region: Middle East. Iran’s Parliament Speaker Mohammad Ghalibaf stated that any ceasefire in Lebanon…
1. Middle East: President Donald Trump announced a U.S. naval blockade of the Strait of Hormuz following the collapse of nuclear negotiations with Iran in Islamabad. The U.S. Navy is directed to interdict any vessels that have paid transit tolls to Iran. Source: Reuters. 2. Middle East: The Israel Defense Forces have fully encircled the southern Lebanese town of Bint Jbeil, conducting ground operations and…
1. Ukraine: A prisoner exchange took place on April 11, 2026, resulting in the return of 175 Ukrainian servicemen and 7 civilians from Russian captivity. Source: Reuters. 2. Ukraine: A 36-hour Easter ceasefire between Ukraine and Russia commenced at 16:00 on April 11, with the Ukrainian General Staff ordering forces to respond only in kind. Source: Reuters. 3. Middle East: Direct negotiations between U.S. and…