{"exported_at":"2026-07-31T23:04:35.938Z","count":165,"iocs":[{"type":"domain","value":"wordpress.org","source":"HackRead","source_url":"https://hackread.com/wordfence-critical-backdoor-arve-wordpress-plugin/","article_title":"Wordfence Finds Critical Backdoor in ARVE WordPress Plugin","article_url":"https://hackread.com/wordfence-critical-backdoor-arve-wordpress-plugin/","published_at":"2026-07-31T13:07:14.000Z","valid_from":"2026-07-31T13:07:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-17059","source":"GBHackers","source_url":"https://gbhackers.com/keycloak-flaw-exposes-users-personal-data/","article_title":"Keycloak Flaw Exposes Users’ Personal Data to Restricted Admins","article_url":"https://gbhackers.com/keycloak-flaw-exposes-users-personal-data/","published_at":"2026-07-31T13:00:00.000Z","valid_from":"2026-07-31T13:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"GBHackers","source_url":"https://gbhackers.com/critical-jetbrains-teamcity-flaw/","article_title":"Critical JetBrains TeamCity Flaw Enables Unauthenticated Remote Code Execution","article_url":"https://gbhackers.com/critical-jetbrains-teamcity-flaw/","published_at":"2026-07-31T10:47:38.000Z","valid_from":"2026-07-31T10:47:38.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"CSO Online","source_url":"https://www.csoonline.com/article/4203872/jetbrains-says-a-crafted-http-request-could-break-teamcity.html","article_title":"JetBrains says a crafted HTTP request could break TeamCity","article_url":"https://www.csoonline.com/article/4203872/jetbrains-says-a-crafted-http-request-could-break-teamcity.html","published_at":"2026-07-31T10:46:30.000Z","valid_from":"2026-07-31T10:46:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-28323","source":"GBHackers","source_url":"https://gbhackers.com/critical-solarwinds-web-help-desk-flaw/","article_title":"Critical SolarWinds Web Help Desk Flaw Lets Attackers Bypass SAML Authentication","article_url":"https://gbhackers.com/critical-solarwinds-web-help-desk-flaw/","published_at":"2026-07-31T08:10:06.000Z","valid_from":"2026-07-31T08:10:06.000Z","origin":"rss"},{"type":"ipv4","value":"91.92.40.13","source":"GBHackers","source_url":"https://gbhackers.com/recon-only-ssh-attack/","article_title":"Recon-Only SSH Attack Leaves No Malware but Signals a Second-Stage Intrusion","article_url":"https://gbhackers.com/recon-only-ssh-attack/","published_at":"2026-07-31T07:35:43.000Z","valid_from":"2026-07-31T07:35:43.000Z","origin":"rss"},{"type":"ipv4","value":"8.4.248.4","source":"GBHackers","source_url":"https://gbhackers.com/php-patches-3-security-flaws-enabling-sql-injection/","article_title":"PHP Patches 3 Security Flaws Enabling SQL Injection, Memory Corruption and DoS Attacks","article_url":"https://gbhackers.com/php-patches-3-security-flaws-enabling-sql-injection/","published_at":"2026-07-31T06:53:39.000Z","valid_from":"2026-07-31T06:53:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"SecurityWeek","source_url":"https://www.securityweek.com/critical-code-execution-vulnerability-patched-in-teamcity/","article_title":"Critical Code Execution Vulnerability Patched in TeamCity ","article_url":"https://www.securityweek.com/critical-code-execution-vulnerability-patched-in-teamcity/","published_at":"2026-07-31T06:50:30.000Z","valid_from":"2026-07-31T06:50:30.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10032,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33204","article_title":"ISC Stormcast For Friday, July 31st, 2026 https://isc.sans.edu/podcastdetail/10032, (Fri, Jul 31st)","article_url":"https://isc.sans.edu/diary/rss/33204","published_at":"2026-07-31T02:00:03.000Z","valid_from":"2026-07-31T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/196369/malware/researchers-expose-flying-eagle-criminal-ecosystem-behind-fake-chinese-police-app.html","article_title":"Researchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police App","article_url":"https://securityaffairs.com/196369/malware/researchers-expose-flying-eagle-criminal-ecosystem-behind-fake-chinese-police-app.html","published_at":"2026-07-30T22:41:51.000Z","valid_from":"2026-07-30T22:41:51.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-kindarails2shell-cve-2026-66066-critical-arbitrary-file-read-and-possible-remote-code-execution-in-ruby-on-rails","article_title":"KindaRails2Shell: CVE-2026-66066, Critical Arbitrary File Read and Possible Remote Code Execution in Ruby on Rails","article_url":"https://www.rapid7.com/blog/post/etr-kindarails2shell-cve-2026-66066-critical-arbitrary-file-read-and-possible-remote-code-execution-in-ruby-on-rails","published_at":"2026-07-30T16:11:10.000Z","valid_from":"2026-07-30T16:11:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42897","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/30/cve-2026-42897-microsoft-exchange-email-attack/","article_title":"Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)","article_url":"https://www.helpnetsecurity.com/2026/07/30/cve-2026-42897-microsoft-exchange-email-attack/","published_at":"2026-07-30T14:23:34.000Z","valid_from":"2026-07-30T14:23:34.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59726","source":"CSO Online","source_url":"https://www.csoonline.com/article/4203408/critical-ruflo-flaw-lets-attackers-hijack-ai-agents-through-exposed-mcp-bridge.html","article_title":"Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge","article_url":"https://www.csoonline.com/article/4203408/critical-ruflo-flaw-lets-attackers-hijack-ai-agents-through-exposed-mcp-bridge.html","published_at":"2026-07-30T12:29:58.000Z","valid_from":"2026-07-30T12:29:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18064","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-06","article_title":"NASA Core Flight System (cFS) Health & Safety (HS) Application","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-06","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"domain","value":"igss.schneider-electric.com","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","article_title":"Schneider Electric IGSS","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"url","value":"https://igss.schneider-electric.com/)","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","article_title":"Schneider Electric IGSS","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-04","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-14227","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-01","article_title":"MikroTik RouterOS","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-01","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-12562","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03","article_title":"Toptech Systems RCU II+ and Multiload II+","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-03","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-5846","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-09","article_title":"Watchfire Controller Software","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-09","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-21662","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","article_title":"Johnson Controls OpenBlue Employee","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34495","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","article_title":"Johnson Controls OpenBlue Employee","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-34497","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","article_title":"Johnson Controls OpenBlue Employee","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-02","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66720","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66369","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63550","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65421","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66364","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66349","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-56758","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66360","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","article_title":"MZ Automation GmbH libiec61850","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-10","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61893","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","article_title":"MZ Automation lib60870","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63033","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","article_title":"MZ Automation lib60870","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-211-11","published_at":"2026-07-30T12:00:00.000Z","valid_from":"2026-07-30T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"GBHackers","source_url":"https://gbhackers.com/cisa-adds-cisco-secure-firewall-management-flaw/","article_title":"CISA Adds Cisco Secure Firewall Management Flaw to Exploited Vulnerabilities List","article_url":"https://gbhackers.com/cisa-adds-cisco-secure-firewall-management-flaw/","published_at":"2026-07-30T11:45:20.000Z","valid_from":"2026-07-30T11:45:20.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/30/cisco-fmc-cve-2026-20316-exploited/","article_title":"Cisco FMC static credentials exploited by attackers (CVE-2026-20316)","article_url":"https://www.helpnetsecurity.com/2026/07/30/cisco-fmc-cve-2026-20316-exploited/","published_at":"2026-07-30T10:44:09.000Z","valid_from":"2026-07-30T10:44:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59309","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","article_title":"Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)","article_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","published_at":"2026-07-30T10:35:21.000Z","valid_from":"2026-07-30T10:35:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59310","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","article_title":"Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)","article_url":"https://www.rapid7.com/blog/post/etr-critical-vmware-vcenter-vulnerabilities-allow-authentication-bypass-and-remote-code-execution-cve-2026-59309-cve-2026-59310","published_at":"2026-07-30T10:35:21.000Z","valid_from":"2026-07-30T10:35:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"Security Affairs","source_url":"https://securityaffairs.com/196289/security/u-s-cisa-adds-a-cisco-secure-firewall-management-center-fmc-flaw-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196289/security/u-s-cisa-adds-a-cisco-secure-firewall-management-center-fmc-flaw-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-07-30T09:06:54.000Z","valid_from":"2026-07-30T09:06:54.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"SecurityWeek","source_url":"https://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/","article_title":"Cisco Secure FMC Zero-Day Exploited in the Wild","article_url":"https://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/","published_at":"2026-07-30T06:31:31.000Z","valid_from":"2026-07-30T06:31:31.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html","article_title":"Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data","article_url":"https://thehackernews.com/2026/07/cisco-fmc-zero-day-actively-exploited.html","published_at":"2026-07-30T05:08:39.000Z","valid_from":"2026-07-30T05:08:39.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15679","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-523/","article_title":"ZDI-26-523: Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-523/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-41032","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-522/","article_title":"ZDI-26-522: Phoenix Contact CHARX SEC-3000 Insertion of Sensitive Information into Log File Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-522/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44095","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-521/","article_title":"ZDI-26-521: Phoenix Contact CHARX SEC-3000 Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-521/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44103","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-520/","article_title":"ZDI-26-520: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Jupicore External Control of Path Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-520/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44099","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-519/","article_title":"ZDI-26-519: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-519/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44091","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-518/","article_title":"ZDI-26-518: (Pwn2Own) Phoenix Contact CHARX SEC-3150 MQTT Service Server-Side Request Forgery Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-518/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44098","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-517/","article_title":"ZDI-26-517: (Pwn2Own) Phoenix Contact CHARX SEC-3150 BackendURL WebSocket Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-517/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44090","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-516/","article_title":"ZDI-26-516: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-516/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44100","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-515/","article_title":"ZDI-26-515: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-jupicore Missing Authentication Configuration Modification Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-515/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44094","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-514/","article_title":"ZDI-26-514: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Failing Open Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-514/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44097","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-513/","article_title":"ZDI-26-513: (Pwn2Own) Phoenix Contact CHARX SEC-3150 update2-upload Arbitrary File Upload Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-513/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44107","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-512/","article_title":"ZDI-26-512: (Pwn2Own) Phoenix Contact CHARX SEC-3150 ModBus Server Exposed Dangerous Function Denial-of-Service Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-512/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44093","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-511/","article_title":"ZDI-26-511: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Symlink Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-511/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44104","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-510/","article_title":"ZDI-26-510: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Missing Cryptographic Signature Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-510/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44101","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-509/","article_title":"ZDI-26-509: (Pwn2Own) Phoenix Contact CHARX SEC-3150 OCPP Missing Authentication for Critical Function Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-509/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44095","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-508/","article_title":"ZDI-26-508: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx_set_ip_address Improper Input Validation Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-508/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44096","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-507/","article_title":"ZDI-26-507: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Privilege Defined With Unsafe Actions Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-507/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44105","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-506/","article_title":"ZDI-26-506: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Insertion of Sensitive Information into Log File Authentication Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-506/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44092","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-505/","article_title":"ZDI-26-505: (Pwn2Own) Phoenix Contact CHARX SEC-3150 charx-system-config-manager Service CRLF Injection Firewall Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-505/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-7849","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-504/","article_title":"ZDI-26-504: (Pwn2Own) Phoenix Contact CHARX SEC-3150 CharxSystemConfigManager Configuration Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-504/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44108","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-503/","article_title":"ZDI-26-503: (Pwn2Own) Phoenix Contact CHARX SEC-3150 Race Condition Firewall Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-503/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-44106","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-502/","article_title":"ZDI-26-502: (Pwn2Own) Phoenix Contact CHARX SEC-3150 user-applications Link Following Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-502/","published_at":"2026-07-30T05:00:00.000Z","valid_from":"2026-07-30T05:00:00.000Z","origin":"rss"},{"type":"domain","value":"api.anthropic.com","source":"GBHackers","source_url":"https://gbhackers.com/claude-global-outage-hits-users/","article_title":"Claude Global Outage Hits Users With “529 Overloaded” Error Messages","article_url":"https://gbhackers.com/claude-global-outage-hits-users/","published_at":"2026-07-30T04:58:26.000Z","valid_from":"2026-07-30T04:58:26.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10702","source":"GBHackers","source_url":"https://gbhackers.com/hackers-can-compromise-tor-browser-users/","article_title":"Hackers Can Compromise Tor Browser Users by Exploiting Firefox JIT Flaw","article_url":"https://gbhackers.com/hackers-can-compromise-tor-browser-users/","published_at":"2026-07-30T04:31:12.000Z","valid_from":"2026-07-30T04:31:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"GBHackers","source_url":"https://gbhackers.com/critical-rails-flaw/","article_title":"Critical Rails Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code","article_url":"https://gbhackers.com/critical-rails-flaw/","published_at":"2026-07-30T04:03:53.000Z","valid_from":"2026-07-30T04:03:53.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10030,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33200","article_title":"ISC Stormcast For Thursday, July 30th, 2026 https://isc.sans.edu/podcastdetail/10030, (Thu, Jul 30th)","article_url":"https://isc.sans.edu/diary/rss/33200","published_at":"2026-07-30T02:00:03.000Z","valid_from":"2026-07-30T02:00:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"BleepingComputer","source_url":"https://www.bleepingcomputer.com/news/security/cisco-warns-of-fmc-static-credential-flaw-exploited-in-zero-day-attacks/","article_title":"Cisco warns of FMC static credential flaw exploited in zero-day attacks","article_url":"https://www.bleepingcomputer.com/news/security/cisco-warns-of-fmc-static-credential-flaw-exploited-in-zero-day-attacks/","published_at":"2026-07-29T21:35:40.000Z","valid_from":"2026-07-29T21:35:40.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-66066","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-rails-flaw-could-let.html","article_title":"Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads","article_url":"https://thehackernews.com/2026/07/critical-rails-flaw-could-let.html","published_at":"2026-07-29T18:10:00.000Z","valid_from":"2026-07-29T18:10:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity","article_title":"CVE-2026-63077: Critical unauthenticated remote code execution in JetBrains TeamCity","article_url":"https://www.rapid7.com/blog/post/etr-cve-2026-63077-critical-unauthenticated-remote-code-execution-in-jetbrains-teamcity","published_at":"2026-07-29T16:16:48.000Z","valid_from":"2026-07-29T16:16:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59726","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/ruflo-mcp-flaw-lets-unauthenticated.html","article_title":"Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory","article_url":"https://thehackernews.com/2026/07/ruflo-mcp-flaw-lets-unauthenticated.html","published_at":"2026-07-29T15:39:30.000Z","valid_from":"2026-07-29T15:39:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59309","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/three-critical-vmware-flaws-allow-auth.html","article_title":"Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape","article_url":"https://thehackernews.com/2026/07/three-critical-vmware-flaws-allow-auth.html","published_at":"2026-07-29T15:31:15.000Z","valid_from":"2026-07-29T15:31:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53921","source":"SC Media","source_url":"https://www.scworld.com/brief/openwrt-releases-security-updates-for-critical-dhcpv6-flaw-and-other-vulnerabilities","article_title":"OpenWrt releases security updates for critical DHCPv6 flaw and other vulnerabilities","article_url":"https://www.scworld.com/brief/openwrt-releases-security-updates-for-critical-dhcpv6-flaw-and-other-vulnerabilities","published_at":"2026-07-29T14:33:58.000Z","valid_from":"2026-07-29T14:33:58.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"SC Media","source_url":"https://www.scworld.com/brief/jetbrains-patches-critical-teamcity-flaw-enabling-unauthenticated-code-execution","article_title":"JetBrains patches critical TeamCity flaw enabling unauthenticated code execution","article_url":"https://www.scworld.com/brief/jetbrains-patches-critical-teamcity-flaw-enabling-unauthenticated-code-execution","published_at":"2026-07-29T14:30:48.000Z","valid_from":"2026-07-29T14:30:48.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59726","source":"GBHackers","source_url":"https://gbhackers.com/critical-ruflo-mcp-bridge-flaw/","article_title":"Critical Ruflo MCP Bridge Flaw Allows Full AI Agent Platform Takeover","article_url":"https://gbhackers.com/critical-ruflo-mcp-bridge-flaw/","published_at":"2026-07-29T13:51:23.000Z","valid_from":"2026-07-29T13:51:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47876","source":"Security Affairs","source_url":"https://securityaffairs.com/196231/security/broadcom-patches-critical-vmware-esxi-vulnerability-enabling-host-code-execution.html","article_title":"Broadcom Patches Critical VMware ESXi Vulnerability Enabling Host Code Execution","article_url":"https://securityaffairs.com/196231/security/broadcom-patches-critical-vmware-esxi-vulnerability-enabling-host-code-execution.html","published_at":"2026-07-29T13:02:49.000Z","valid_from":"2026-07-29T13:02:49.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-20316","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/29/cisa-adds-one-known-exploited-vulnerability-catalog","article_title":"CISA Adds One Known Exploited Vulnerability to Catalog ","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/29/cisa-adds-one-known-exploited-vulnerability-catalog","published_at":"2026-07-29T12:00:00.000Z","valid_from":"2026-07-29T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-10702","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/researchers-show-single-malicious.html","article_title":"Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser","article_url":"https://thehackernews.com/2026/07/researchers-show-single-malicious.html","published_at":"2026-07-29T11:57:00.000Z","valid_from":"2026-07-29T11:57:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-65094","source":"GBHackers","source_url":"https://gbhackers.com/nvidia-bluefield-flaw/","article_title":"NVIDIA BlueField Flaw Lets VM Users Execute Code via Crafted Messages","article_url":"https://gbhackers.com/nvidia-bluefield-flaw/","published_at":"2026-07-29T11:41:30.000Z","valid_from":"2026-07-29T11:41:30.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"GBHackers","source_url":"https://gbhackers.com/check-point-smartconsole-zero-day/","article_title":"Check Point SmartConsole Zero-Day Lets Unauthenticated Attackers Gain Full Admin Access","article_url":"https://gbhackers.com/check-point-smartconsole-zero-day/","published_at":"2026-07-29T09:21:21.000Z","valid_from":"2026-07-29T09:21:21.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/rapid7-releases-poc-for-exploited-check.html","article_title":"Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass","article_url":"https://thehackernews.com/2026/07/rapid7-releases-poc-for-exploited-check.html","published_at":"2026-07-29T08:58:27.000Z","valid_from":"2026-07-29T08:58:27.000Z","origin":"rss"},{"type":"domain","value":"mend.io","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/29/mend-io-runtime-protection/","article_title":"Mend.io enhances application security with AI runtime protection and faster zero-day response","article_url":"https://www.helpnetsecurity.com/2026/07/29/mend-io-runtime-protection/","published_at":"2026-07-29T07:49:10.000Z","valid_from":"2026-07-29T07:49:10.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-60004","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html","article_title":"New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands","article_url":"https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html","published_at":"2026-07-29T07:47:19.000Z","valid_from":"2026-07-29T07:47:19.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/flying-eagle-android-rat-traces-found.html","article_title":"Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates","article_url":"https://thehackernews.com/2026/07/flying-eagle-android-rat-traces-found.html","published_at":"2026-07-29T07:07:23.000Z","valid_from":"2026-07-29T07:07:23.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18299","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-467/","article_title":"ZDI-26-467: GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-467/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18298","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-466/","article_title":"ZDI-26-466: GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-466/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18297","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-465/","article_title":"ZDI-26-465: GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-465/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18296","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-464/","article_title":"ZDI-26-464: GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-464/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18295","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-463/","article_title":"ZDI-26-463: GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-463/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18309","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-462/","article_title":"ZDI-26-462: GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-462/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18308","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-461/","article_title":"ZDI-26-461: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-461/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18307","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-460/","article_title":"ZDI-26-460: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-460/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18306","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-459/","article_title":"ZDI-26-459: GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-459/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18305","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-458/","article_title":"ZDI-26-458: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-458/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18304","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-457/","article_title":"ZDI-26-457: GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-457/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18303","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-456/","article_title":"ZDI-26-456: GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-456/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18302","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-455/","article_title":"ZDI-26-455: GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-455/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18301","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-454/","article_title":"ZDI-26-454: GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-454/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18300","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-453/","article_title":"ZDI-26-453: GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-453/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18269","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-486/","article_title":"ZDI-26-486: (Pwn2Own) Kenwood DNR1007XR tchdr_bytestream_read Out-Of-Bounds Write Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-486/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18268","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-485/","article_title":"ZDI-26-485: (Pwn2Own) Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-485/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18267","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-484/","article_title":"ZDI-26-484: (Pwn2Own) Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-484/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18264","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-483/","article_title":"ZDI-26-483: NoMachine getstat Command Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-483/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59689","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-482/","article_title":"ZDI-26-482: Progress Software Kemp LoadMaster enablexroot Use of Hard-Coded Cryptographic Key Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-482/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-59690","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-481/","article_title":"ZDI-26-481: Progress Software Kemp LoadMaster access Missing Authorization Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-481/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18265","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-480/","article_title":"ZDI-26-480: OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-480/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18274","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-479/","article_title":"ZDI-26-479: Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-479/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-15686","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-478/","article_title":"ZDI-26-478: Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-478/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18284","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-477/","article_title":"ZDI-26-477: (Pwn2Own) Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-477/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18283","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-476/","article_title":"ZDI-26-476: (Pwn2Own) Sony XAV-9500ES udev USB Rules Authorization Bypass Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-476/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18282","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-475/","article_title":"ZDI-26-475: (Pwn2Own) Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-475/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18281","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-474/","article_title":"ZDI-26-474: (Pwn2Own) Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-474/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18280","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-473/","article_title":"ZDI-26-473: (Pwn2Own) Sony XAV-9500ES gpsd Buffer Overflow Arbitrary Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-473/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18279","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-472/","article_title":"ZDI-26-472: (Pwn2Own) Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-472/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18278","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-471/","article_title":"ZDI-26-471: (Pwn2Own) Sony XAV-9500ES prh_l2_decode_packet Out-Of-Bounds Read Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-471/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18287","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-470/","article_title":"ZDI-26-470: Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-470/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18286","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-469/","article_title":"ZDI-26-469: Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-469/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18285","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-468/","article_title":"ZDI-26-468: Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-468/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18273","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-490/","article_title":"ZDI-26-490: (Pwn2Own) Kenwood DNR1007XR USB Incorrect Default Permissions Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-490/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18272","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-489/","article_title":"ZDI-26-489: (Pwn2Own) Kenwood DNR1007XR startUpdateProcess Command Injection Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-489/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18271","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-488/","article_title":"ZDI-26-488: (Pwn2Own) Kenwood DNR1007XR vCardParser Heap-based Buffer Overflow Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-488/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-18270","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-487/","article_title":"ZDI-26-487: (Pwn2Own) Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-487/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13054","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-501/","article_title":"ZDI-26-501: WatchGuard FireWare OS sigd comp_start_cb Directory Traversal Arbitrary File Creation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-501/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13050","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-500/","article_title":"ZDI-26-500: WatchGuard FireWare OS networkd network_wireless_kick_off_user_cb Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-500/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-13053","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-499/","article_title":"ZDI-26-499: WatchGuard FireWare OS cli Token Parser Stack-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-499/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-71387","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-498/","article_title":"ZDI-26-498: TrendAI Vision One Incorrect Privilege Assignment Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-498/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-71386","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-497/","article_title":"ZDI-26-497: TrendAI Vision One Service Gateway Logs Information Disclosure Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-497/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62660","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-496/","article_title":"ZDI-26-496: Trend AI Cleaner One Pro Link Following Arbitrary File Deletion Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-496/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-47876","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-495/","article_title":"ZDI-26-495: (Pwn2Own) VMware ESXi VMXNET3 espQueueMask Out-Of-Bounds Write Local Privilege Escalation Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-495/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43729","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-494/","article_title":"ZDI-26-494: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-494/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43733","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-493/","article_title":"ZDI-26-493: Apple macOS USD File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-493/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43780","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-492/","article_title":"ZDI-26-492: Apple macOS ImageIO Numeric Truncation Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-492/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-43673","source":"Zero Day Initiative","source_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-491/","article_title":"ZDI-26-491: Apple macOS CoreAudio Out-Of-Bounds Write Remote Code Execution Vulnerability","article_url":"http://www.zerodayinitiative.com/advisories/ZDI-26-491/","published_at":"2026-07-29T05:00:00.000Z","valid_from":"2026-07-29T05:00:00.000Z","origin":"rss"},{"type":"email","value":"layouts@0.1.2-2773.beta","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/two-compromised-joyfill-npm-packages.html","article_title":"Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js","article_url":"https://thehackernews.com/2026/07/two-compromised-joyfill-npm-packages.html","published_at":"2026-07-29T04:20:57.000Z","valid_from":"2026-07-29T04:20:57.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-42533","source":"GBHackers","source_url":"https://gbhackers.com/nginx-heap-overflow-flaw/","article_title":"NGINX Heap Overflow Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code","article_url":"https://gbhackers.com/nginx-heap-overflow-flaw/","published_at":"2026-07-29T03:53:17.000Z","valid_from":"2026-07-29T03:53:17.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10028,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33194","article_title":"ISC Stormcast For Wednesday, July 29th, 2026 https://isc.sans.edu/podcastdetail/10028, (Wed, Jul 29th)","article_url":"https://isc.sans.edu/diary/rss/33194","published_at":"2026-07-29T02:00:02.000Z","valid_from":"2026-07-29T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16232","source":"Rapid7 Blog","source_url":"https://www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232","article_title":"Check Point SmartConsole Authentication Bypass Technical Analysis (CVE-2026-16232)","article_url":"https://www.rapid7.com/blog/post/ra-check-point-smartconsole-authentication-bypass-technical-analysis-cve-2026-16232","published_at":"2026-07-28T18:32:03.000Z","valid_from":"2026-07-28T18:32:03.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53921","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-openwrt-dhcpv6-flaw-could-let.html","article_title":"Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root","article_url":"https://thehackernews.com/2026/07/critical-openwrt-dhcpv6-flaw-could-let.html","published_at":"2026-07-28T12:56:14.000Z","valid_from":"2026-07-28T12:56:14.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16347","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-05","article_title":"MikroTik RouterOS and Cloud Hosted Router","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-05","published_at":"2026-07-28T12:00:00.000Z","valid_from":"2026-07-28T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54429","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-03","article_title":"Siemens SIMATIC S7-PLCSIM Advanced","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-03","published_at":"2026-07-28T12:00:00.000Z","valid_from":"2026-07-28T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16581","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06","article_title":"igloohome Smart Lock Mobile Application","article_url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-06","published_at":"2026-07-28T12:00:00.000Z","valid_from":"2026-07-28T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Security Affairs","source_url":"https://securityaffairs.com/196169/security/jetbrains-patches-cvss-9-8-teamcity-flaw-allowing-server-takeover.html","article_title":"JetBrains Patches Critical TeamCity Flaw Allowing Server Takeover","article_url":"https://securityaffairs.com/196169/security/jetbrains-patches-cvss-9-8-teamcity-flaw-allowing-server-takeover.html","published_at":"2026-07-28T11:17:06.000Z","valid_from":"2026-07-28T11:17:06.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/28/teamcity-rce-cve-2026-63077-fixed/","article_title":"JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)","article_url":"https://www.helpnetsecurity.com/2026/07/28/teamcity-rce-cve-2026-63077-fixed/","published_at":"2026-07-28T11:04:12.000Z","valid_from":"2026-07-28T11:04:12.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"GBHackers","source_url":"https://gbhackers.com/critical-teamcity-flaw/","article_title":"Critical TeamCity Flaw Lets Unauthenticated Attackers Execute System Commands","article_url":"https://gbhackers.com/critical-teamcity-flaw/","published_at":"2026-07-28T10:58:50.000Z","valid_from":"2026-07-28T10:58:50.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53264","source":"GBHackers","source_url":"https://gbhackers.com/ai-discovered-linux-kernel-zero-day/","article_title":"AI-Discovered Linux Kernel Zero-Day Enables Root Privilege Escalation","article_url":"https://gbhackers.com/ai-discovered-linux-kernel-zero-day/","published_at":"2026-07-28T10:34:07.000Z","valid_from":"2026-07-28T10:34:07.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-68686","source":"Security Affairs","source_url":"https://securityaffairs.com/196130/security/u-s-cisa-adds-arista-velocloud-orchestrator-and-fortinet-fortios-flaws-to-its-known-exploited-vulnerabilities-catalog.html","article_title":"U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog","article_url":"https://securityaffairs.com/196130/security/u-s-cisa-adds-arista-velocloud-orchestrator-and-fortinet-fortios-flaws-to-its-known-exploited-vulnerabilities-catalog.html","published_at":"2026-07-28T08:19:29.000Z","valid_from":"2026-07-28T08:19:29.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-63077","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html","article_title":"Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In","article_url":"https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html","published_at":"2026-07-28T08:11:22.000Z","valid_from":"2026-07-28T08:11:22.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-53264","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/researcher-says-ai-helped-develop-linux.html","article_title":"Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit","article_url":"https://thehackernews.com/2026/07/researcher-says-ai-helped-develop-linux.html","published_at":"2026-07-28T08:04:44.000Z","valid_from":"2026-07-28T08:04:44.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16812","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/attackers-exploit-arista-velocloud.html","article_title":"Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw","article_url":"https://thehackernews.com/2026/07/attackers-exploit-arista-velocloud.html","published_at":"2026-07-28T04:43:53.000Z","valid_from":"2026-07-28T04:43:53.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10026,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33190","article_title":"ISC Stormcast For Tuesday, July 28th, 2026 https://isc.sans.edu/podcastdetail/10026, (Tue, Jul 28th)","article_url":"https://isc.sans.edu/diary/rss/33190","published_at":"2026-07-28T02:00:03.000Z","valid_from":"2026-07-28T02:00:03.000Z","origin":"rss"},{"type":"domain","value":"media.io","source":"HackRead","source_url":"https://hackread.com/ai-tools-create-story-videos-workflow-wondershare-media-io/","article_title":"Too Many AI Tools? Here’s How to Create Story Videos In One Workflow With Wondershare Media.io","article_url":"https://hackread.com/ai-tools-create-story-videos-workflow-wondershare-media-io/","published_at":"2026-07-27T22:56:11.000Z","valid_from":"2026-07-27T22:56:11.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-27577","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html","article_title":"n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process","article_url":"https://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html","published_at":"2026-07-27T13:05:15.000Z","valid_from":"2026-07-27T13:05:15.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-54121","source":"Help Net Security","source_url":"https://www.helpnetsecurity.com/2026/07/27/certighost-cve-2026-54121-poc-exploit-released/","article_title":"PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)","article_url":"https://www.helpnetsecurity.com/2026/07/27/certighost-cve-2026-54121-poc-exploit-released/","published_at":"2026-07-27T12:04:09.000Z","valid_from":"2026-07-27T12:04:09.000Z","origin":"rss"},{"type":"cve","value":"CVE-2025-68686","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-27T12:00:00.000Z","valid_from":"2026-07-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16812","source":"CISA Advisories","source_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","article_title":"CISA Adds Two Known Exploited Vulnerabilities to Catalog","article_url":"https://www.cisa.gov/news-events/alerts/2026/07/27/cisa-adds-two-known-exploited-vulnerabilities-catalog","published_at":"2026-07-27T12:00:00.000Z","valid_from":"2026-07-27T12:00:00.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-61511","source":"GBHackers","source_url":"https://gbhackers.com/vbulletin-pre-auth-rce-flaw/","article_title":"vBulletin Pre-Auth RCE Flaw Allows Remote PHP Code Execution","article_url":"https://gbhackers.com/vbulletin-pre-auth-rce-flaw/","published_at":"2026-07-27T11:11:46.000Z","valid_from":"2026-07-27T11:11:46.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-49176","source":"GBHackers","source_url":"https://gbhackers.com/windows-walletservice-flaw/","article_title":"Windows WalletService Flaw Lets Standard Users Gain SYSTEM Privileges","article_url":"https://gbhackers.com/windows-walletservice-flaw/","published_at":"2026-07-27T08:31:46.000Z","valid_from":"2026-07-27T08:31:46.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10024,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33186","article_title":"ISC Stormcast For Monday, July 27th, 2026 https://isc.sans.edu/podcastdetail/10024, (Mon, Jul 27th)","article_url":"https://isc.sans.edu/diary/rss/33186","published_at":"2026-07-27T02:00:02.000Z","valid_from":"2026-07-27T02:00:02.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-16723","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html","article_title":"Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available","article_url":"https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html","published_at":"2026-07-25T12:52:43.000Z","valid_from":"2026-07-25T12:52:43.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-57239","source":"GBHackers","source_url":"https://gbhackers.com/foxit-pdf-reader-flaw/","article_title":"Foxit PDF Reader Flaw Lets Local Attackers Gain SYSTEM Privileges via DLL Sideloading","article_url":"https://gbhackers.com/foxit-pdf-reader-flaw/","published_at":"2026-07-24T13:15:56.000Z","valid_from":"2026-07-24T13:15:56.000Z","origin":"rss"},{"type":"domain","value":"hunt.io","source":"Security Affairs","source_url":"https://securityaffairs.com/195941/hacking/thailands-ministry-of-finance-targeted-with-hermes-ai-agent-running-unattended-hades-implant-staged.html","article_title":"Thailand’s Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged","article_url":"https://securityaffairs.com/195941/hacking/thailands-ministry-of-finance-targeted-with-hermes-ai-agent-running-unattended-hades-implant-staged.html","published_at":"2026-07-24T12:10:28.000Z","valid_from":"2026-07-24T12:10:28.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-32194","source":"The Hacker News","source_url":"https://thehackernews.com/2026/07/bing-images-flaws-let-crafted-svgs-run.html","article_title":"Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers","article_url":"https://thehackernews.com/2026/07/bing-images-flaws-let-crafted-svgs-run.html","published_at":"2026-07-24T11:45:17.000Z","valid_from":"2026-07-24T11:45:17.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-62183","source":"GBHackers","source_url":"https://gbhackers.com/apache-syncope-flaws/","article_title":"Apache Syncope Flaws Let Users Gain Admin Roles and Execute Remote Code","article_url":"https://gbhackers.com/apache-syncope-flaws/","published_at":"2026-07-24T08:54:04.000Z","valid_from":"2026-07-24T08:54:04.000Z","origin":"rss"},{"type":"ipv4","value":"4.1.24.1","source":"GBHackers","source_url":"https://gbhackers.com/apache-syncope-flaws/","article_title":"Apache Syncope Flaws Let Users Gain Admin Roles and Execute Remote Code","article_url":"https://gbhackers.com/apache-syncope-flaws/","published_at":"2026-07-24T08:54:04.000Z","valid_from":"2026-07-24T08:54:04.000Z","origin":"rss"},{"type":"ipv4","value":"4.0.74.0","source":"GBHackers","source_url":"https://gbhackers.com/apache-syncope-flaws/","article_title":"Apache Syncope Flaws Let Users Gain Admin Roles and Execute Remote Code","article_url":"https://gbhackers.com/apache-syncope-flaws/","published_at":"2026-07-24T08:54:04.000Z","valid_from":"2026-07-24T08:54:04.000Z","origin":"rss"},{"type":"cve","value":"CVE-2026-0257","source":"CSO Online","source_url":"https://www.csoonline.com/article/4201019/ransomware-groups-are-hammering-your-vulnerable-vpns.html","article_title":"Ransomware groups are hammering your vulnerable VPNs","article_url":"https://www.csoonline.com/article/4201019/ransomware-groups-are-hammering-your-vulnerable-vpns.html","published_at":"2026-07-24T07:00:00.000Z","valid_from":"2026-07-24T07:00:00.000Z","origin":"rss"},{"type":"url","value":"https://isc.sans.edu/podcastdetail/10022,","source":"SANS ISC","source_url":"https://isc.sans.edu/diary/rss/33182","article_title":"ISC Stormcast For Friday, July 24th, 2026 https://isc.sans.edu/podcastdetail/10022, (Fri, Jul 24th)","article_url":"https://isc.sans.edu/diary/rss/33182","published_at":"2026-07-24T02:00:02.000Z","valid_from":"2026-07-24T02:00:02.000Z","origin":"rss"}]}