🐛 COMMON VULNERABILITIES AND EXPOSURES 1[−]
19 JulAttackers Can Take Over WordPress Sites Using Newly Released wp2shell ExploitsPublic exploits are now available for two critical WordPress flaws that attackers can chain to gain remote code execution without authentication. Public proof-of-concept exploits are now available for the critical wp2shell vulnerabilities affecting WordPress Core. The flaws, trac…SECURITYAFFAIRS.COM
⚠️ VULNERABILITY DISCLOSURE 3[−]
19 JulWeek in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logsHere’s an overview of some of last week’s most interesting news, articles, interviews and videos: Two new high severity WordPress vulnerabilities, patch immediately! The 7.0.2 WordPress security release addresses one critical and one high severity security issue. Cynative: Open-s…HELPNETSECURITY.COM
19 JulSonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root AccessA previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior their public disclosure since June 22, 2026. Cybersecurity company Volexity is tracking the acti…THEHACKERNEWS.COM
19 JulMedical giant Abbott investigates two cyber incidents as ShinyHunters and ShadowByt3$ both claim breachesAnna Zhadan reports: American healthcare giant Abbott Laboratories is investigating two cyber incidents that appear to be unrelated: one involving its Cancer Diagnostics business and another affecting its LabCentral portal. Although unrelated, the two disclosures came within days…DATABREACHES.NET
🔥 INCIDENT REPORTING 2[−]
19 JulSECURITY AFFAIRS MALWARE NEWSLETTER ROUND 106Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter CrashStealer: C++ macOS infostealer posing as crash reporter Lucide Proxy: Turning Student Web Proxies into DDoS Bots …SECURITYAFFAIRS.COM
19 JulPaidwork - 23,272,765 breached accountsIn March 2026, hackers claimed they had obtained data from the gig economy platform Paidwork which they then listed for sale . Almost 11GB of data allegedly obtained from the platform was subsequently posted publicly in July and contained over 23M unique email addresses. The brea…HAVEIBEENPWNED.COM
🕵️ THREAT INTELLIGENCE 3[−]
19 JulUAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih MalwareRussian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to trick Ukrainian targets into infecting their own machines with data-stealing malware. According to the Computer Emergency Response Team of Ukraine (CERT-UA), the activity has bee…THEHACKERNEWS.COM
19 JulHackers abuse ViPNet software to target Russian govt agenciesAn advanced threat actor is abusing the update mechanism for the ViPNet private networking product suite to target Russian organizations, including government agencies. [...]BLEEPINGCOMPUTER.COM
19 JulScans for Hikvision Intelligent Security API, (Sun, Jul 19th)We have been following issues with Hikvision cameras for a long, long time . Like many similar products, Hikvision cameras have a long history of vulnerabilities and are often targeted by internet-wide scans that our honeypot network detects.
ISC.SANS.EDU
🌐 CYBER THREAT LANDSCAPE 1[−]
19 JulSecurity Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITIONA new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. OpenSSL Fixes HollowByte Memo…SECURITYAFFAIRS.COM
📰 CYBERSECURITY BRIEFINGS 1[−]
19 JulReimagining European space sovereignty.This week on T-Minus: Space-Cyber Briefing: we look at the recent evolution of the European space program. Whereas the region had previously relied on the US to support its space goals, both the UK and the EU have begun to make significant changes to reduce this reliance.THECYBERWIRE.COM
🎙️ PODCASTS 1[−]
19 JulEurope's push for space sovereignty.As space becomes an increasingly critical part of modern infrastructure, governments are reevaluating decades of policy to ensure reliable, secure, and independent access to the systems they are increasingly relying on. In this week’s episode, host Maria Varmazis sits down with p…THECYBERWIRE.COM