McKesson under pressure after a cyber incident and ShinyHunters’ claim
McKesson, the large Texas-based pharmaceutical distributor, has confirmed a security incident that is causing disruptions to its systems. The company said the intrusion involves a third-party application and that the investigation is still in its early stages. Help Net Security reports that ShinyHunters claims to have stolen 284 million patient records, although the figure has not yet been independently verified.…
Read the article →
PaperCut: emergency patch 2 closes the exploited RCE chain
PaperCut has released Emergency Patch Release 2 after researchers demonstrated that the first fix could be bypassed against a pre-authentication remote code execution chain that was already being actively exploited. The flaw affects PaperCut…
Read the article →
PaperCut: zero-day under attack, emergency patch released
PaperCut Software has confirmed that a zero-day vulnerability in the NG and MF products has already been actively exploited in real-world attacks. The company has released an emergency patch and has asked customers to…
Read the article →
PaperCut under attack with an already exploited zero-day
PaperCut has confirmed that a vulnerability in the NG and MF products is being actively exploited in zero-day attacks. The company has released emergency patches for v25 and v26 and has warned of incidents…
Read the article →
CISA adds Oracle HTTP Server/WebLogic Proxy Plug-in to KEV catalog for active exploitation
CISA has added CVE-2026-21962 to the Known Exploited Vulnerabilities catalog after finding evidence of active exploitation against Oracle HTTP Server and Oracle WebLogic Server Proxy Plug-in. The flaw is a critical access control vulnerability…
Read the article →
Suspected Iran-linked attack takes UK power plant offline
According to press sources cited by Help Net Security and Infosecurity Magazine, a British power plant remained offline for four days in July 2026 because of a cyberattack suspected to have been carried out…
Read the article →
CISA adds four critical vulnerabilities to KEV catalog for active exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming their active exploitation in the wild. Among them are an authentication flaw in…
Read the article →
Check Point SmartConsole: authentication bypass actively exploited
Check Point has fixed a critical vulnerability in the SmartConsole login process, tracked as CVE-2026-16232, which allows an unauthenticated attacker to obtain an application token and gain access with full administrative privileges. Reports indicate…
Read the article →
Russian campaign against Zimbra with zero-click exploit and theft of emails and 2FA codes
Several Russia-linked groups exploited an as-yet-unknown vulnerability in Zimbra for months to target government and strategic organizations in the West. The vector was particularly dangerous because simply opening or even just viewing the email…
Read the article →
Active exploit on SharePoint CVE-2026-50522 after Patch Tuesday
Microsoft SharePoint has come under attack following the publication of a public proof-of-concept for CVE-2026-50522, a critical deserialization flaw that can lead to remote code execution. Researchers at watchTowr and other analysts have observed…
Read the article →
Ransomware on Japan’s cold chain
The Adobe Acrobat for Chrome flaw exposes WhatsApp Web data
North Korean ClickFake campaign targets Web3 professionals
Fake alert app in Bahrain distributes Android spyware
Kratos taken down, the phishing kit behind thousands of campaigns per month
HollowGraph uses Microsoft 365 calendars as a covert C2 channel
Ubuntu snap-confine: the race condition that leads to local root
Two million cars with dealer-installed anti-theft systems are exposed via BluetoothRansomware on Japan’s cold chainThe Adobe Acrobat for Chrome flaw exposes WhatsApp Web dataNorth Korean ClickFake campaign targets Web3 professionalsFake alert app in Bahrain distributes Android spywareKratos taken down, the phishing kit behind thousands of campaigns per monthHollowGraph uses Microsoft 365 calendars as a covert C2 channelUbuntu snap-confine: the race condition that leads to local rootTwo million cars with dealer-installed anti-theft systems are exposed via Bluetooth- FakeGit: 7,600 malicious GitHub repositories trick AI agents and spread SmartLoader
- CISA Demonstrates the Defensive Gap in Two Critical Infrastructures
- Google launches CodeMender and Gemini 3.5 Flash Cyber to uncover vulnerabilities
- OpenAI: the models escaped the sandbox and hit Hugging Face
- OT security: the ‘air gap’ is a myth and resilience must be designed
- PR3TACK wants to map threats before attackers use them
- AGCOM says AI is reshaping access to information and pluralism
- China’s Kimi K3 is testing Western AI pricing, chips, and sovereignty