News desk
Security incidents, exploited vulnerabilities, breach reports, and urgent patch notes, arranged for fast scanning like a daily cyber newspaper.
July 12, 2026
The Miasma supply-chain worm has moved from poisoned package installs to repository config files that can run through AI coding tools and IDEs. Developers should inspect cloned Microsoft/Azure repos and treat editor configs as executable supply-chain risk.
CISA added Mirasvit Cache Warmer CVE-2026-45247 to KEV. Magento and Adobe Commerce stores should update to 1.11.12 and review suspicious CacheWarmer cookie traffic.
A Miasma supply-chain attack compromised @redhat-cloud-services npm packages with a credential-stealing worm. Developers should check lockfiles, CI runners, and rotate exposed secrets.
Google's June 2026 Android update fixes CVE-2025-48595, a high-severity Framework flaw that may already be under targeted exploitation.
Belgium's CCB says Windows Netlogon CVE-2026-41089 is now exploited. Patch domain controllers, restrict Netlogon paths, and check for suspicious authentication activity.
CISA added Oracle WebLogic Server CVE-2024-21182 to KEV, giving exposed T3/IIOP deployments a short June 4 remediation window.
Dutch police and NCSC took down a 17 million-device botnet. Check routers, IoT devices, proxy apps, and strange outgoing traffic.
Attackers are exploiting WP Maps Pro CVE-2026-8732 to create rogue WordPress administrator accounts. Site owners should update to 6.1.1 and audit users and logs.
Attackers are abusing FortiClient EMS CVE-2026-35616 to push a fake Fortinet endpoint patch that steals browser passwords, cookies, and autofill data from managed Windows...
Before you go
Scan your Windows PC for malware, adware, and unwanted programs with a lightweight cleanup tool trusted in our removal guides.
6-day trial available. Offer opens in the same tab.
