Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
Summary CISA has added three critical Ubiquiti UniFi OS vulnerabilities to its Known Exploited Vulnerabilities catalog, all carrying the maximum CVSS score of 10.0. The flaws — CVE-2026-34908 (access control…
Summary A high-severity server-side request forgery (SSRF) vulnerability in Cisco Unified Communications Manager (CUCM) and its Session Management Edition — tracked as CVE-2026-20230 (CVSS 8.6) — is now being actively…
Summary A supply chain attack targeting Klue, a market intelligence platform, has led to the mass exfiltration of Salesforce CRM data from hundreds of enterprise customers — including several prominent…
Summary A critical vulnerability chain targeting LiteLLM, one of the most popular open-source AI gateway and proxy servers, has been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog with a…
Summary A large-scale credential compromise campaign dubbed “FortiBleed” has exposed valid VPN and administrator credentials for over 73,000 internet-facing FortiGate firewalls across 194 countries — roughly half of all reachable…
Summary On June 22, 2026, President Trump signed two executive orders aimed at securing the United States against advanced cryptographic threats posed by quantum computing. The orders mandate an accelerated…
Summary In a rare joint statement issued June 22–23, the Five Eyes intelligence alliance — the United States, United Kingdom, Canada, Australia, and New Zealand — warned that frontier AI…
Summary Nintendo of America has confirmed a data breach originating from a cyberattack on TinyPulse, a third-party employee engagement and survey platform owned by WebMD Health Services. A threat actor…
Summary A critical zero-day authentication bypass vulnerability in Check Point VPN products, tracked as CVE-2026-50751 (CVSS 9.3), is under active exploitation by threat actors linked to the Qilin ransomware operation.…
Summary A pair of newly disclosed HTTP/2 denial-of-service vulnerabilities dubbed the “HTTP/2 Bomb” are sending shockwaves through the web infrastructure community. CVE-2026-49975 affects the default HTTP/2 configurations of Apache HTTP…