jscrambler npm Attack: Compromised Releases Dropped Infostealer
Developers who installed jscrambler 8.14.0, 8.16.0, 8.17.0, 8.18.0, or 8.20.0 should audit build systems, upgrade to 8.22.0, and rotate exposed secrets.
News desk
Cybersecurity News & Analysis
Security incidents, exploited vulnerabilities, breach reports, and urgent patch notes, arranged for fast scanning like a daily cyber newspaper.
July 12, 2026Latest reports
Ubiquiti CVE-2026-50746: Patch Critical UniFi Flaws
Ubiquiti patched seven critical UniFi vulnerabilities, including CVE-2026-50746, a CVSS 10.0 command-injection issue in UniFi Connect. Update exposed controllers and appliances now.
Langflow CVE-2026-55255 Hits CISA KEV: Patch AI Workflows
CISA added Langflow CVE-2026-55255 to KEV after active exploitation. Patch self-hosted AI workflow servers to 1.9.1 and check for credential-theft signs.
Adobe ColdFusion CVE-2026-48282 Hits CISA KEV: Patch RDS RCE
Adobe says CVE-2026-48282 has been exploited in limited ColdFusion attacks. Patch ColdFusion 2025/2023, restrict RDS, and hunt for unauthorized files.
Joomla Page Builder CVEs Hit CISA KEV: Patch Two RCE Flaws
CISA added exploited Joomla SP Page Builder and PageBuilder CK RCE flaws to KEV. Patch now, then hunt for rogue admins and PHP web...
Tenda CVE-2026-11405: Hidden Router Backdoor Has No Patch
CERT/CC warns that several Tenda router firmware builds contain a hidden admin backdoor. No patch is available, so owners should disable remote management and...
Januscape CVE-2026-53359: Patch KVM/x86 Host Escape Flaw
Januscape CVE-2026-53359 affects Linux KVM/x86 hosts with nested virtualization. Patch KVM kernels or disable nested virtualization for untrusted guests.
OpenSSH 10.4 Fixes SFTP, SCP, and sshd Security Bugs
OpenSSH 10.4/10.4p1 fixes security bugs in sftp, scp, and sshd. Linux and Unix administrators should update and review a few configuration-sensitive cases.
ClamAV 1.5.3 and 1.4.5 Fix Seven Scanner Bugs
ClamAV 1.5.3 and 1.4.5 patch seven scanner vulnerabilities affecting malware-scanning deployments, including Cisco Secure Endpoint connectors.
