News desk
Security incidents, exploited vulnerabilities, breach reports, and urgent patch notes, arranged for fast scanning like a daily cyber newspaper.
July 12, 2026
CVE-2026-0257 lets attackers bypass GlobalProtect restrictions on exposed PAN-OS portals and gateways when authentication override cookies are misconfigured. Palo Alto confirms limited exploitation.
Ghost CMS CVE-2026-26980 is being exploited to steal Admin API keys, inject malicious JavaScript into posts, and send visitors to ClickFix/FakeCaptcha malware pages.
Laravel-Lang Composer packages were hijacked through rewritten GitHub tags to load a credential stealer. Check composer.lock, src/helpers.php, autoload.files, and rotate exposed CI secrets.
Drupal Core CVE-2026-9082 is a PostgreSQL-only SQL injection flaw now listed in CISA KEV. Patch affected Drupal branches and check logs for exploit attempts.
Microsoft Defender CVE-2026-41091 and CVE-2026-45498 are exploited in attacks. Check Engine 1.1.26040.8, Platform 4.18.26040.7, and update endpoints before the CISA KEV deadline.
Attackers are bypassing MFA on SonicWall Gen6 SSL-VPN devices where CVE-2024-12802 remediation was incomplete. Disable LDAP UPN login, check VPN logs, and replace unsupported...
ChromaDB CVE-2026-45829, dubbed ChromaToast, can let an unauthenticated attacker execute code through malicious embedding model loading before authentication checks run.
SHub Reaper is a macOS infostealer campaign that abuses AppleScript, fake security updates, and GoogleUpdate-like LaunchAgents to steal browser data, wallets, files, and sessions.
NGINX CVE-2026-42945 is now being exploited in the wild, according to VulnCheck activity reported by The Hacker News. Patch exposed NGINX servers and review...
Before you go
Scan your Windows PC for malware, adware, and unwanted programs with a lightweight cleanup tool trusted in our removal guides.
6-day trial available. Offer opens in the same tab.
