FBI and Google Dismantle NetNut Residential Proxy Network — Over 2 Million Hijacked Home Devices Cut Off
Summary The FBI, in partnership with Google’s Threat Intelligence Group and other industry partners, has successfully disrupted NetNut, one of the world’s largest commercial residential proxy networks. Also tracked as…
Adobe ColdFusion Max-Severity RCE (CVE-2026-48282) Exploited Within Hours of Disclosure
Summary A maximum-severity remote code execution vulnerability in Adobe ColdFusion, tracked as CVE-2026-48282, is now being actively exploited in the wild — and attackers moved fast. Within just two hours…
UN Scientific Panel Warns AI Is Advancing Faster Than Governments Can Regulate — Calls for Urgent Global Action
Summary The UN’s Independent International Scientific Panel on Artificial Intelligence has released a preliminary report warning that AI capabilities are advancing at a pace that far outstrips the ability of…
Jamf Launches Beacon — A Dedicated Threat Hunting Service for Enterprise Mac Fleets
Summary Jamf has launched Beacon by Jamf Threat Labs, a premium threat hunting service built specifically for enterprise Mac environments. Announced on July 1, 2026, the service provides organizations with…
ChocoPoC RAT Targets Security Researchers Through Trojanized Proof-of-Concept Exploit Repos on GitHub
Summary A new data-stealing malware dubbed ChocoPoC is actively targeting vulnerability researchers by hiding in fake proof-of-concept exploit repositories on GitHub. Discovered jointly by YesWeHack and Sekoia on July 1,…
Google Chrome 151 Patches 382 Vulnerabilities — 15 Critical Flaws Including Sandbox Escapes
Summary Google has released Chrome 151 with fixes for 382 security vulnerabilities across the browser’s core engine, graphics stack, extensions framework, and cross-platform components. Among the patched flaws, 15 are…
Apple Ships Emergency Patches for WebKit Flaws Discovered by AI — Cites AI-Driven Exploit Acceleration as Reason for Rushed Timeline
Summary Apple has released out-of-band security updates for iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, and Safari 26.5.2, patching nearly 30 vulnerabilities — including four WebKit flaws that were discovered…
Progress Kemp LoadMaster Critical Pre-Auth RCE (CVE-2026-8037) Now Under Active Exploitation
Summary A critical pre-authentication remote code execution vulnerability in Progress Kemp LoadMaster appliances (CVE-2026-8037, CVSS 9.8) is being actively exploited following the public release of proof-of-concept exploit code. The flaw…
CISA Flags SharePoint RCE (CVE-2026-45659) as Actively Exploited — Federal Agencies Given Until July 4 to Patch
Summary CISA has added a high-severity Microsoft SharePoint Server vulnerability (CVE-2026-45659) to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild. The deserialization-of-untrusted-data flaw carries a CVSS…
Skyhawk Security AI Red Team Takes Over Full AWS Organization in Seconds — Using Only Legitimate Permissions
Skyhawk Security has published research demonstrating that its agentic AI red team system achieved full administrative control of a financial services company’s entire AWS organization in a matter of seconds…