-
AI cyber resilience and the trust gap
Backup and recovery has evolved into data protection, security and cyber recovery. Today, the focus is on business …
-
Week in review: Refrigeration cyberattacks hit European retailers again, Patch Tuesday forecast
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The first ten lines of a command …
-
Hot fridges, a fake nuclear alert and a $6bn heist: are we in the foothills of a hacking epidemic?
Alex Pearce was doing the morning rounds at his fruit and vegetable wholesale business in London on Monday last week when he noticed …
-
CVE-2026-124552 – Webmin through 2.670 contains a stored cross-site scripting vulnerability in the …
Webmin through 2.670 contains a stored cross-site scripting vulnerability in the Shorewall and Shorewall6 modules’ list.cgi, which renders …
-
CVE-2026-124551 – ClassroomIO through 1.0.0 contains an authorization bypass vulnerability that allows …
ClassroomIO through 1.0.0 contains an authorization bypass vulnerability that allows authenticated users of any organization to clone other …
-
CVE-2026-124494 – SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability because the …
SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability because the html.clean() sanitizer’s _normalizeURL() function …
-
CVE-2026-124493 – SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the …
SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the DocumentType constructor that injects header textContent …
-
CVE-2026-124492 – SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in …
SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in ModalAnchorEditor’s #createBookmarkList, which inserts …
-
CVE-2026-124491 – SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the …
SunEditor before 3.4.0 contains a stored cross-site scripting vulnerability in the FileUpload plugin create() method that assigns …
-
CVE-2026-124490 – OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral …
OpenEMR before 8.3.0 contains a path traversal vulnerability in the RingCentral RCFaxClient disposeDocument() method of oe-module-faxsms …
-
CVE-2026-124489 – OpenEMR before 8.3.0 contains a broken access control vulnerability in …
OpenEMR before 8.3.0 contains a broken access control vulnerability in portal/portal_payment.php that allows low-privilege authenticated …
-
CVE-2026-124488 – OpenEMR before 8.3.0 contains an authorization bypass vulnerability that allows …
OpenEMR before 8.3.0 contains an authorization bypass vulnerability that allows authenticated clinicians lacking high-sensitivity …
●●●
NVD
- CVE-2026-123495 – Vikunja 2.0.0 before 2.7.1 accepts form-encoded bodies on the /api/v2 login and OIDC …
- CVE-2026-123496 – Vikunja veans before 2.7.1 contains a symlink following vulnerability that allows …
- CVE-2026-123493 – Vikunja from 2.4.0 before 2.7.1 contains an authentication bypass vulnerability that …
- CVE-2026-124552 – Webmin through 2.670 contains a stored cross-site scripting vulnerability in the …
- CVE-2026-123494 – Vikunja before 2.7.1 contains a cross-site request forgery vulnerability that allows …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- Virtualization security: attack layers and misconfiguration impact
- The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
- MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT dev
- CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
- Filter generation in practice: from algorithms to LLMs