StegoAd Edge Extensions: Microsoft Removed 119 Malicious Add-ons
Microsoft removed 119 StegoAd Edge extensions that hid payloads in images and fonts. Users should audit extension IDs, remove matches, and rotate exposed credentials.
News desk
Cybersecurity News & Analysis
Security incidents, exploited vulnerabilities, breach reports, and urgent patch notes, arranged for fast scanning like a daily cyber newspaper.
July 12, 2026Latest reports
DirtyClone CVE-2026-43503: Patch Linux Kernel Root Flaw
DirtyClone, tracked as CVE-2026-43503, is a Linux kernel local privilege escalation flaw tied to the DirtyFrag family. Administrators should verify whether their distribution kernel...
PTC Windchill CVE-2026-12569: Patch Exploited RCE Now
CISA added PTC Windchill and FlexPLM CVE-2026-12569 to KEV after active exploitation evidence. Check exposure, patch by June 28, and review PLM integrations.
curl 8.21.0 Fixes 18 CVEs, Including 25-Year libcurl mTLS Bug
curl 8.21.0 patches 18 security flaws, including CVE-2026-8932 in libcurl mTLS connection reuse. Developers should inventory embedded libcurl copies and rebuild affected apps.
Lantronix EDS5000 CVE-2025-67038: Patch Root RCE Now
CISA says Lantronix EDS5000 CVE-2025-67038 is being actively exploited. Admins should update exposed EDS5000 serial device servers and review root-level compromise signals.
StealC and Amadey Takedown: 27M Credentials Recovered
Operation Endgame disrupted StealC and Amadey malware infrastructure, with officials reporting 326 servers neutralized and 27 million compromised data sets recovered.
UniFi OS CVE-2026-34910: Patch Root RCE Chain Now
CISA has added the UniFi OS CVE-2026-34908, CVE-2026-34909, and CVE-2026-34910 chain to KEV. Patch exposed UniFi OS consoles and rotate secrets after updating.
FFmpeg PixelSmash CVE-2026-8461: Patch Media Servers Now
FFmpeg PixelSmash CVE-2026-8461 affects MagicYUV decoding before 8.1.2. Patch media servers, desktop video tools, and thumbnail workflows that process untrusted files.
WhatsApp VBS Malware: Fake Documents Install Remote Access Tool
An active WhatsApp malware campaign is sending fake business-document VBS files to Windows users and installing a preconfigured remote management agent for attacker access.
