Technology ❯ Information Security

Incident Response

Vulnerability Management Threat Detection Threat Intelligence Patch Management Product Security Incident Response Team Threat Actors Data Protection Forensics Data Breach Management Threat Analysis

Compromised GitHub Actions Were Re‑enabled and Resumed Running Old Mini Shai‑Hulud Malware

The reactivation allowed injected code to harvest CI/CD credentials, highlighting the need for SHA pinning, secret rotation, workflow audits.

Critical WordPress File-Inclusion Flaw Patched but Exploited Within Hours

SFR Says July Hack Exposed Contact Details of Fibre Subscribers

Metabase Zero‑Day SQL Injection Exploited to Steal Customer Data

BTCPay Server Releases Emergency Patch as Critical Flaw Is Actively Exploited

Arista Patches Actively Exploited CVE-2026-16812 in VeloCloud Orchestrator

Public Proof‑of‑Concept Released for Certighost AD CS Flaw

Race-Condition Bug in snap-confine Lets Local Users Gain Root on Ubuntu Desktop

Public PoC Drives Active Exploitation of Critical SharePoint RCE

Attackers Exploit Critical ServiceNow RCE Flaw

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

HollowByte Causes Persistent Memory Bloat in OpenSSL, Patch Available

Microsoft Revokes 11 Old Signed UEFI Shims That Could Bypass Secure Boot

Progress Issues Patch After Zero-Day Forces ShareFile Storage Zone Shutdown

Peru Schedules National Cyberattack Drill for July 16

KDDI Says Up to 14.2 Million Email Accounts May Be Exposed in Major Breach

Mandiant Says Cisco SD‑WAN Zero‑Day Gave Attackers Root Access

Cisco Patches Exploited SD‑WAN Manager Zero‑Day

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

CrowdStrike and Google Disrupt Glassworm Botnet Targeting Developers