Emma Davis

News · July 20, 2026

Hugging Face Breach: Rotate Tokens After Autonomous AI Attack

Hugging Face says an autonomous AI-driven intrusion reached internal datasets and service credentials through its dataset-processing pipeline. Users should rotate access tokens and review...

News · July 20, 2026

NGINX CVE-2026-42533: Patch Map Regex Heap Overflow Now

NGINX 1.30.4 and 1.31.3 fix CVE-2026-42533, a map-and-regex heap overflow that can crash workers and may allow code execution under specific configurations.

News · July 19, 2026

UAC-0145 ClickFix Campaign Uses Fake CAPTCHAs to Drop Malware

CERT-UA says UAC-0145, a Sandworm-linked cluster, is using fake CAPTCHA prompts on compromised sites to make targets run malware on Windows and Android devices.

News · July 19, 2026

7-Zip CVE-2026-14266: Update to 26.02 to Fix XZ RCE

7-Zip CVE-2026-14266 affects XZ chunked-data handling. Update to 26.02 and review archive-processing workflows.

News · July 18, 2026

NadMesh Botnet Targets AI Services for Cloud and Kubernetes Keys

NadMesh is scanning exposed ComfyUI, Ollama, n8n, Gradio, MCP, Docker, Redis, Jenkins, and Kubernetes surfaces to steal cloud credentials and cluster tokens.

News · July 18, 2026

wp2shell WordPress Core RCE: Update to 7.0.2 or 6.9.5 Now

WordPress released emergency fixes for wp2shell, a core RCE chain affecting WordPress 6.9.x and 7.0.x sites. Admins should confirm 7.0.2, 6.9.5, or the matching...

News · July 17, 2026

ACR Stealer ClickFix Campaign Targets Browser Tokens and Microsoft 365 Files

Microsoft says ACR Stealer ClickFix campaigns are stealing browser credentials, session tokens, and Microsoft 365 files. Defenders should hunt WebDAV, mshta, PowerShell, and token...

News · July 17, 2026

SharePoint CVE-2026-58644 Added to CISA KEV After Exploitation

CISA added Microsoft SharePoint CVE-2026-58644 to KEV after exploitation was detected. Patch on-premises SharePoint Server 2016, 2019, and Subscription Edition quickly, then check for...

News · July 16, 2026

Zoom CVE-2026-53412: Critical Windows Account Takeover Flaw Fixed

Zoom fixed CVE-2026-53412, a critical Windows account-takeover flaw. Check Zoom Workplace and VDI Client versions and update from official channels.

News · July 16, 2026

AsyncAPI npm Packages Hit by Miasma Botnet Malware

Five malicious AsyncAPI npm releases briefly shipped a require-time Miasma loader through trusted GitHub Actions publishing. Developers should check lockfiles and rotate exposed CI...

News · July 15, 2026

Microsoft July Patch Tuesday Fixes AD FS and SharePoint Zero-Days

Microsoft fixed exploited AD FS and SharePoint Server zero-days in July Patch Tuesday. Prioritize CVE-2026-56164 and CVE-2026-56155 before routine CVEs.

News · July 14, 2026

SonicWall SMA1000 CVEs Hit CISA KEV After Zero-Day Attacks

SonicWall patched actively exploited SMA1000 SSRF and code-injection flaws. Admins should move to fixed hotfix builds and review IOC logs, not just patch.