CVE-2026-70426: Critical Jenkins RCE Flaw Bypasses Deserialization Filter

TL;DR Jenkins patched a critical Jenkins vulnerability, CVE-2026-70426, that bypasses the JEP-200 deserialization filter. Attackers with Agent/Connect permission can run code on the controller. The August 5, 2026 advisory also fixes 22 other flaws. Why This Jenkins Vulnerability Matters The Jenkins controller is the brain of most CI/CD pipelines. Consequently, code execution there exposes source code, build secrets, and deployment credentials.

securityonline.info

CVE-2026-20272 & CVE-2026-20267: Cisco IOS XE Flaws Hit CVSS 9.8

TL;DR Cisco patched seven Cisco IOS XE vulnerability issues in an August 2026 hardening release. Two are Critical, led by CVE-2026-20272 at CVSS 9.8. Cisco found them internally and reports no active exploitation. Why This Cisco IOS XE Vulnerability Matters IOS XE powers a huge range of Cisco routers and switches. Therefore, a flaw here reaches deep into enterprise and carrier networks.

securityonline.info

CVE-2026-20303 & CVE-2026-20304: Cisco SD-WAN Flaws Hit CVSS 9.9

TL;DR Cisco patched five Cisco SD-WAN vulnerability issues in Catalyst SD-WAN Software. Three are Critical, with two scoring CVSS 9.9. Cisco found them internally and reports no active exploitation. Why This Cisco SD-WAN Vulnerability Matters Catalyst SD-WAN routes traffic across enterprise and government networks. Therefore, a flaw here threatens the core of many corporate WANs. The bugs affect every deployment type, including on-prem, cloud, and FedRAMP government setups.

securityonline.info

AI Floods Apple Vulnerability Reports

The Surge of AI Submissions Artificial intelligence networks have flooded Apple with vulnerability reports. Consequently, the company has restricted new submissions. Some incoming materials reveal dangerous discoveries. However, poorly verified or completely fabricated problems constitute a significant portion of this influx. Artificial intelligence describes these fake issues convincingly. Apple altered its rules in June. Now, researchers can keep only a limited number of reports open simultaneously.

meterpreter.org

OpenAI Rebuts Apple Lawsuit: Publishes iMessage Evidence

The high-stakes trade secret litigation battle between Apple and OpenAI has officially ignited into fierce public confrontation. Following Apple's recent petition to a U.S. court for a preliminary injunction, attempting to block OpenAI and two former Apple employees from utilizing confidential data, OpenAI executed an exceptionally rare and rapid public relations counteroffensive within hours. OpenAI published a lengthy article on its official blog titled…

securityexpress.info

SGLang Hit by Six Vulnerabilities, Including Unauthenticated RCE (CVE-2026-15969)

TL;DR A researcher found six SGLang vulnerabilities, and the worst allow unauthenticated remote code execution. SGLang serves large language models such as DeepSeek and Qwen. CERT/CC published the advisory on July 30, 2026. No patch exists yet, and the maintainers have not responded. Why it matters SGLang runs inference for popular open models. Many teams expose it as an API service.

securityonline.info

Shai-Hulud npm Worm Compromises Supply Chain

The Initial JavaScript Breach A single installation of a routine JavaScript library could expose a company's cloud infrastructure, repositories, and internal services to attackers. The Shai-Hulud npm worm infiltrated highly popular packages. Users download these packages over two billion times monthly. Subsequently, the worm propagated using stolen developer credentials. The number of infected components multiplied rapidly. Recent estimates indicate the total now exceeds one thousand.

meterpreter.org

CVE-2026-9044: TP-Link Command Injection Hits Archer AXE75

TL;DR: TP-Link patched a TP-Link command injection flaw in the Archer AXE75 V1 router. Tracked as CVE-2026-9044, it carries a CVSS v4.0 score of 8.5. Firmware 1.5.6 Build 20260623 fixes the issue. Why it matters The flaw lives in the router's OpenVPN module. TP-Link's advisory states plainly that "successful exploitation of this vulnerability may enable an attacker to gain full control of the affected device."

securityonline.info

SpaceX Q2 Earnings: AI Capital Expenditure Surges 2013%

Since SpaceX formally executed its initial public offering on June 12th of this year, external observers finally obtained an unobstructed view into the genuine financial condition of Elon Musk's technological behemoth. This conglomerate intricately integrates Starlink, rocket launches, the X social platform, and xAI under a single corporate umbrella. According to the newly released SpaceX Q2 2026 earnings report, total corporate revenue achieved a robust 92 percent year-over-year growth, cresting at $7.8 billion.

securityexpress.info

IBM Patches Three CVSS 9.8 Flaws, Including CVE-2026-12943 Command Execution

TL;DR IBM has disclosed three critical vulnerabilities across three products, each rated CVSS 9.8. The flaws affect App Connect Enterprise, Power HMC, and webMethods Integration. Two of them let attackers execute arbitrary commands or code without logging in. IBM reports no exploitation in the wild for any of the three. Why it matters These IBM critical vulnerabilities sit in enterprise integration and management tools.

securityonline.info

XCSSET macOS Malware Returns with Stealthy Memory Exploits

The Resurgence of XCSSET Following several months of quiet activity, a notorious malware family targeting software developers has returned with a stealthy upgrade. This malicious tool leaves almost no trace on local disk drives. Security researchers at Palo Alto Networks recently uncovered XCSSET macOS malware version 40 in active campaigns. Since April 2026, this threat has propagated primarily through compromised Xcode projects, the primary development environment for Apple platforms.

meterpreter.org

Spotify Premium Hits 300 Million Users Despite AI Slop Issues

Despite recent controversies surrounding frequent server outages and an influx of low-quality, AI-generated music, the user growth trajectory of global music streaming titan Spotify remains astonishingly robust. During its latest quarterly earnings call, Spotify announced a monumental milestone: its Premium paid subscriber base officially surpassed the 300 million mark. This figure represents a solid 9 percent year-over-year increase. Consequently, this milestone not only cements Spotify's absolute market dominance but also expands its lead to nearly three times that of its primary rival, Apple Music, which currently holds an estimated 100 million paid users.

securityexpress.info

Linux suTrap Local Privilege Escalation Flaw PoC Exploit Disclosed

TL;DR Security researchers have detailed a critical Linux suTrap local privilege escalation flaw. This interactive su TIOCSTI bug allows an unprivileged user to gain root access during an active session. Furthermore, the vulnerability details and a proof-of-concept exploit code are now publicly disclosed. Therefore, administrators must take immediate action to secure their environments. Why It Matters System administrators frequently use the su command to drop privileges for application testing.

securityonline.info

DarkSword Exploit Exposes iOS Vulnerabilities

The Rise of a New Threat Six iOS vulnerabilities accidentally leaked on GitHub rapidly evolved into a formidable weapon. Now, at least seven independent threat groups actively utilize this exploit. This threat involves the commercial DarkSword exploit chain. It specifically targets iOS versions 18.4 through 18.7. Recently, Censys mapped the infrastructure supporting this malicious network. Consequently, researchers discovered a much broader operational scale than previously assumed.

meterpreter.org

Xbox 25th Anniversary Freebies: Claim Your Digital Rewards

Microsoft's iconic gaming brand, Xbox, is rapidly approaching a monumental milestone: its 25th anniversary on November 15th of this year. To express profound gratitude to players for a quarter-century of unwavering support, Xbox has announced a spectacular array of complimentary digital commemorative gifts. These offerings include an exclusive anniversary badge, dynamic backgrounds designed by renowned community creators, and a specially curated retrospective showcase on Xbox Game Pass.

securityexpress.info

North Korean Hackers Hide C2 Servers in Ethereum

North Korean cyber syndicates have long sought a method to cloak their command servers. Therefore, they want to render them untraceable and immune to blockades. Now, they utilize a seemingly ordinary cryptocurrency transfer. This transfer appears entirely empty at first glance. The transferred sum is zero. Furthermore, it bears no accompanying data. The sole element of consequence within such a transaction is the recipient address.

meterpreter.org

NVIDIA Dynamo Code Execution Flaw CVE-2026-24254 CVSS 9.8

TL;DR NVIDIA recently published an urgent software update for NVIDIA Dynamo for Linux. This update patches several security issues, including a critical NVIDIA Dynamo flaw. The most severe vulnerability carries a maximum CVSS score of 9.8. Why It Matters NVIDIA Dynamo plays a key role in artificial intelligence workflows. Many enterprise organizations rely on it for machine learning operations. An attacker can exploit these…

securityonline.info

Apple Bug Bounty Limits AI Slop and Fake Reports

With the proliferation of generative AI and large language models (LLMs), the threshold for discovering software vulnerabilities has plummeted. However, this has also unleashed unforeseen repercussions for the cybersecurity divisions of major technological behemoths. To combat the overwhelming deluge of "AI slop," Apple recently confirmed the implementation of more stringent submission constraints on its renowned Bug Bounty Program. According to a…

securityonline.info

Perplexity Achieves Major Legal Victory Over Amazon

Perplexity, a pioneering artificial intelligence search engine and agentic service startup, has secured a monumental reversal in its legal confrontation with e-commerce titan Amazon regarding automated AI shopping capabilities. The United States Court of Appeals for the Ninth Circuit has officially dissolved a previously issued injunction. This ruling permits the AI shopping assistant embedded within Perplexity's Comet browser to access Amazon's digital storefront once more.

securityonline.info

Microsoft Forces OneDrive Photos Install on Windows

Unwanted Application Deployment Microsoft's actions continually elicit a profound sense of bewilderment. Recently, the corporation began aggressively deploying an application christened OneDrive Photos. It forces this installation upon all users. This occurs indiscriminately, regardless of active Microsoft 365 subscriptions. Worse still, this application remains inextricably attached to the core OneDrive client. Users cannot uninstall it independently. Instead, they must completely eradicate the entire OneDrive ecosystem to remove the intrusive software.

securityonline.info

OctLurk and SilkLurk Backdoors Hit Central Asian Government Networks

At a glance

securityonline.info

Critical SonicWall SMA Vulnerabilities Under Attack

The Appeal of VPN Gateways Organizations install VPN gateways at the edge of their corporate networks. They do this specifically so remote employees can securely connect to internal systems. Consequently, these devices frequently become a lucrative target for cybercriminals. On July 14, 2026, SonicWall issued a security advisory regarding two critical vulnerabilities in the SMA 1000 series. These flaws include CVE-2026-15409, which scores 10 on the CVSS 3.1 scale.

meterpreter.org

XMRig Botnet Abuses Linux PAM to Spread Forensic Smokescreen Across User Accounts

At a glance

securityonline.info

NVMe 2.4 Specification Released: Post-Quantum Security Included

The demands for storage performance and security within artificial intelligence, cloud computing, and enterprise data centers continue to escalate dramatically. In response, the NVM Express organization, responsible for defining non-volatile memory interface standards, officially announced a monumental rollout of 11 major NVMe specification updates today. This comprehensive update encompasses the highly anticipated NVMe 2.4 Base Specification. Furthermore, it includes crucial revisions to the Command Set, Transport protocols, the NVMe Management Interface (NVMe-MI 2.2), and the NVMe Boot 1.4 specification.

securityexpress.info

Chinese Threat Actor Runs Autonomous AI Cyberattacks Using DeepSeek

At a glance Field Detail Actor Chinese-speaking operator, aliases knaithe and KnYuan Activity AI-enabled autonomous hacking campaign Targets Internet-exposed infrastructure, Chinese systems, and a Malaysian government entity Scale 460+ targets attempted; 3 confirmed breaches Status No charges; attribution assessed by Unit 42; OpenAI disabled a linked account Source Palo Alto Networks Unit 42 TL;DR Palo Alto Networks Unit 42 uncovered an autonomous AI cyberattack campaign run by a Chinese-speaking actor.

securityonline.info

Adform Cyber Attack: Malicious Scripts Hijack Crypto Wallets

Adform, a prominent European advertising technology enterprise, recently disclosed a severe security breach. Hackers successfully compromised the company on July 27, 2026. According to rigorous analysis by security researchers, the attackers subtly replaced Adform's legitimate advertising and tracking codes with malicious scripts. Consequently, when users visited compromised downstream websites, these scripts attempted to manipulate their clipboards or text input fields, specifically targeting cryptocurrency addresses.

securityonline.info

OpenAI Legal Battles: Apple Trade Secrets and DOJ Fines

Recently, OpenAI finds itself besieged on multiple fronts. On one side, Apple has severely escalated its trade secret litigation against the AI firm. Apple is not only seeking a preliminary injunction but also alleging a widening conspiracy of departing "moles" implicated in the leak, demanding an expedited judicial investigation. Simultaneously, the U.S. Department of Justice (DOJ) slapped OpenAI with a substantial $3.2 million fine for deliberately excluding domestic U.S.

securityexpress.info

Windows Control Panel Migration: Why Legacy Code Persists

For many years, Microsoft has strived to migrate traditional Control Panel applets into the modern Settings application across Windows 10 and Windows 11. Nevertheless, numerous legacy applets remain unmigrated, rendering the immediate eradication of the classic Control Panel virtually impossible. Indeed, many power users still harbor a profound preference for the legacy Control Panel, as transferring certain settings to the modern interface occasionally introduces unwanted complexity.

securityonline.info

Cloudflare Wallets: Programmable Payment and Identity Infrastructure for AI Agents

Cloudflare has announced the launch of Cloudflare Wallets - a programmable wallet system designed not for everyday consumers, but for AI agents and automated applications. The product's stated ambition is to serve as the foundational payment and identity layer for the agentic internet. Users may currently register a reserved wallet username through their Cloudflare account via Cloudflare.Pay. Each account is limited to one reserved username.

securityonline.info

GenieLocker Ransomware Targets Russian Manufacturers on Windows, Linux, and ESXi

At a glance

securityonline.info