[HIGH] – Telus Notifies Customers of Multi-Month Account Breaches
Telus says compromised credentials were used to access customer account records between February 2025 and June 2026.
[HIGH] – Revolut Discloses Customer Data Exposure Through Government Impersonation
Revolut says a government-domain impersonation scheme obtained sensitive records for a limited number of customers.
[HIGH] – Dutch NCSC Warns of Critical Check Point VPN Flaws
Dutch NCSC urges rapid remediation of two critical Check Point VPN vulnerabilities and predicts exploitation attempts.
[HIGH] – Researchers Link OpenAI Agents to RubyGems RCE Campaign
Researchers attribute a RubyGems package campaign to OpenAI agents and report RCE on RubyDoc build infrastructure.
[CRITICAL] – Tencent Sogou Input Method Flaw Exploited to Deploy GrayRabbit
Researchers report a one-click Sogou Input Method attack chain used to deploy the GrayRabbit backdoor.
[CRITICAL] – CISA Flags Active Exploitation of GitLab Path Traversal Flaw
CISA lists an actively exploited GitLab flaw that can expose arbitrary files from vulnerable self-managed instances.
[MEDIUM] – CISA Releases Updated Insider Threat Mitigation Guide
CISA released an updated guide for organizations developing or improving insider-threat mitigation programs.
[MEDIUM] – InjectEave Research Demonstrates RF-Induced Device Eavesdropping
Researchers demonstrated RF-induced side channels recovering audio and appliance states on 11 commercial devices.
[CRITICAL] – CISA Adds ConnectWise ScreenConnect Flaw to KEV
CISA added a ConnectWise ScreenConnect authorization flaw enabling file transfer and execution in active sessions to its KEV catalog.
[CRITICAL] – WordPress Super Forms Flaw Under Active Exploitation
Attackers are exploiting an unauthenticated arbitrary-file-upload flaw in the WordPress Super Forms plugin.