Vulnerability Intelligence Report — July 6, 2026
Vulnerability Intelligence Report — July 6, 2026 New CISA KEV: 0 | KEV calendar still clear | FortiBleed traced to INC and Lynx ransomware | … Read More
Fortinet FortiSandbox: CVE-2026-25089 and CVE-2026-26083 — Two Critical CVSS 9.8 Vulnerabilities Under Active Exploitation
CVE: CVE-2026-25089, CVE-2026-26083 | CVSS 3.1: 9.8 (Critical) | Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | CWE: CWE-78 (OS Command Injection), CWE-862 (Missing Authorization) | Vendor: Fortinet | Product: … Read More
WinRAR Code Execution Vulnerability via Malformed Recovery Volumes — Update to Version 7.23
What Is the Vulnerability A vulnerability in WinRAR’s handling of recovery volumes (REV files) allows attackers to execute arbitrary code on the user’s system. When … Read More
FortiBleed Campaign: Compromised Fortinet Firewalls Used for Ransomware Deployment — 74,000 Credentials at Risk
What Happened A threat actor group operating under the banner “FortiBleed” has been systematically compromising Fortinet FortiGate firewalls and VPN gateways using previously stolen credentials … Read More
Vulnerability Intelligence Report — July 5, 2026
Vulnerability Intelligence Report — July 5, 2026 New CISA KEV: 0 | KEV calendar clear for the first time this week | FortiBleed: 74K Fortinet … Read More
FatFs Embedded Filesystem: 7 Vulnerabilities Expose Millions of SD Cards, USB Drives, IoT and Embedded Devices
CVE: CVE-2026-38192 through CVE-2026-38198 (7 total) | Vendor/Product: FatFs — Generic FAT/exFAT Filesystem Module (ChaN) What Is the Vulnerability Seven new CVEs have been disclosed … Read More
Emerging Threat: AI Agent Poisoning via SEO and Hidden HTML Prompt Injection — Attackers Trick AI Agents Into Fraudulent Actions
TTP Advisory: AI Agent Prompt Injection via SEO and Hidden HTML | Target: AI Coding Assistants, Research Agents, Browser Agents What Is the Attack Technique … Read More
FBI Warning: TeamPCP Threat Actors Compromising Developer and Security Tools in Large-Scale Supply Chain Attacks
CVE: N/A (TTP Advisory) | CVSS: N/A | Vendor: N/A | Product: Developer and Security Tools (Supply Chain) What Is the Advisory The FBI has … Read More
CVE-2026-54998 and CVE-2026-41106: Microsoft Exchange Online and 365 Copilot Critical Privilege Escalation — Cloud-Side Patched
CVE: CVE-2026-54998, CVE-2026-41106 | CVSS: Critical (Microsoft severity rating) | Vendor: Microsoft | Product: Exchange Online, Microsoft 365 Copilot What Is the Vulnerability Two critical … Read More
CVE-2026-46242 ‘Bad Epoll’: Linux Kernel 0-Day Local Privilege Escalation to Root — Affects Servers, Desktops, and Android Devices
CVE: CVE-2026-46242 | CVSS: 7.8 (High) | Vendor: Linux Kernel | Product: epoll subsystem What Is the Vulnerability CVE-2026-46242, dubbed “Bad Epoll,” is a critical … Read More