Archive

Every Infosec issue

86 issues since 26 May 2026, newest first. Each one is the day's Infosec news, with links to the original sources.

August 2026

• Wed 26 AugSS7 abuse in the wild, AI agents break VMs, and a backdoor that sleeps
• Tue 25 AugKeycloak flaw lets anyone reset any admin account
• Mon 24 AugIran Hackers Take Down UK Power Plant, AI Designs Live Phages
• Sun 23 AugAgentic Attackers Broke Into OpenAI
• Sat 22 AugChatMate lands live shell in Copilot
• Fri 21 AugOpenAI's Rogue Agents, Microsoft's Abused Driver, Rust Supply Chain
• Thu 20 Aug14k Dahua cameras pwned, backdoor survives resets
• Wed 19 AugCopilot makes Varonis eat its own one-click exfil bug
• Tue 18 AugGeoServer zero-day exploited, RubyGems keys leaked, TWINLOOT C2
• Mon 17 AugLoongLeak, Unisoc kernel hole, 19M patient breach
• Sun 16 AugUniversal Ruby gadget chain RCE, Citrix pre-auth
• Sat 15 AugmacOS miner, SAP RCE, GeoServer SQLi zero-day
• Fri 14 AugVMware RCE weaponized, Cisco DoS exploited, AI finds $25 0-day
• Thu 13 Augwp2shell, Docker Escape, ShieldBreak: today's top exploits
• Wed 12 AugLLM API flaw lets cheap models read premium secrets
• Tue 11 AugApple PCC breached, KVM host memory pwned, iOS exploits leaked
• Mon 10 Aug$30 watches track kids, not for safety
• Sun 9 AugRovo AI hidden prompts leak Jira; APR flaws threaten Apache
• Sat 8 AugN-able Hotfix, CSS Webmail Hijack, WordPress XSS Patch
• Fri 7 AugSafari Leaks IPs, GitHub CI Hijacked, AI Guards Bypassed
• Thu 6 AugZero-Click AI Browser Hijack, Oracle SQLi to SYSTEM, KVM Guest Escape
• Wed 5 AugmacOS root in 60s, CVSS 10.0 cross-tenant bug
• Tue 4 AugOpenAI Models Hack Hugging Face, ChainDrop Hijacks 444 Packages
• Mon 3 AugThermo Fisher flaw lets attackers rewrite DNA data
• Sun 2 AugTwo flaws expose millions of cars and 437k systems
• Sat 1 AugAdobe CVSS 10.0, Coldcard $70M heist, Rails RCE

July 2026

• Fri 31 JulLibvips RCE, 4G hijack flaws, Cisco FMC zero-day
• Thu 30 JulSecure Boot bypassable 13 years, CosmosEscape sandbox flaw
• Wed 29 JulRuflo flaw hijacks AI agents, TeamCity RCE, 24K BMCs
• Tue 28 JulOpenAI agents exploit zero-day; 750k fleet customers exposed
• Mon 27 JulTwo Oj JSON bugs lead to GitLab RCE, vBulletin exploit goes public
• Sun 26 JulDevMan RaaS portal, Steam mining traps, Bun malware builder
• Sat 25 JulClaude Cowork escapes VM, Starlink enables $114B scam
• Fri 24 JulCertighost flaw lets low‑privilege users impersonate a Domain Controller
• Thu 23 JulCritical Check Point flaw exploited, Adobe extension leaks WhatsApp chats
• Wed 22 JulSharePoint zero-day steals IIS keys; PhaaS operator arrested
• Tue 21 JulQilin ransomware weaponizes Palo Alto VPN flaw
• Mon 20 Jul500M WordPress Sites Exposed to Pre‑Auth RCE Before Patch
• Sun 19 JulCritical NGINX RCE, V8 flaw, DNS TXT malware
• Sat 18 JulLegacyHive zero-day, Zoom critical bug, Scattered Spider verdict
• Fri 17 JulWordPress zero-day, NadMesh botnet hijacks AI cloud creds
• Thu 16 JulUnder $100 AI poisoning and Shark vacuum AWS hijack
• Wed 15 JulSonicWall zero-days, ServiceNow RCE, Cursor IDE exploit
• Tue 14 JulMicrosoft Patch Tuesday record: 622 fixes, 2 zero‑days active
• Mon 13 JulModHeader spy, RabbitMQ OAuth flaw, VPN sanctions
• Sun 12 JulGPUHammer flips Nvidia A6000 bits, Laravel RCE from leaked keys
• Sat 11 JulSix U-Boot bugs, GodDamn driver, 1M SSNs leak
• Fri 10 JulLaser Wallet Hack, $5M Seed Theft, SYSTEM via Defender
• Thu 9 JulClaude Code hijack, GodDamn blinds EDR, Injective crypto drain
• Wed 8 JulGhostLock: 15-year-old Linux bug gives root and container escape
• Tue 7 JulGitLost leak, Tenda backdoor, Google sues Gemini scammers
• Mon 6 Jul16-year-old KVM bug lets guest take over host
• Sun 5 JulPolinRider: 108 packages from North Korea + $1M ransom
• Thu 2 JulCursor IDE zero-click escape, Argo CD cluster hijack
• Wed 1 JulAttackers probe Kemp RCE, Chrome sandbox falls to one bug

June 2026

• Tue 30 JunRHEL 10 container escape, CitrixBleed-style bypass
• Mon 29 Jun130 zero-days and fatal SSH cert flaw
• Sun 28 JunRussian fake-text hijacks, NIST CVSS cuts
• Sat 27 JunLinux LPE, AMSI bypass, and a hidden malware repo
• Fri 26 JunLinux pedit COW root escalation, Amazon Q extension cred leak
• Thu 25 JunClaude AI turns MeshCentral XSS into RCE; Dify leaks AI chats
• Wed 24 JunCordyceps bug chains, Bitwarden C2, and botnet TVs
• Tue 23 JunApple patches Beats mic, Claude Fable 5 jailbroken, Sentry leak
• Mon 22 JunSquidbleed and FortiBleed: 86K creds and cleartext HTTP
• Sun 21 JunRoguePlanet, GreatXML, and Check Point VPN zero-days in the wild
• Sat 20 JunAutoJack hijacks AI agents, Splunk RCE under attack
• Fri 19 JunNGINX HTTP/3 zero-day, FortiBleed VPN hijack, Apple SecureROM cracked
• Thu 18 Jun9.8 CVSS flaws in Vertiv UPS cards, OpenBSD fixes 27-year-old bug
• Wed 17 JunPHP 7 mt_rand leaks PID, Linux PAM bleeds plaintext passwords
• Tue 16 JunClaude Code API key leak, GitHub CodeQL hijack
• Mon 15 JunSplunk pre-auth RCE, OptinMonster 1.2M sites backdoored
• Tue 9 JunUbiquiti RCE, Zcash bug, French ID breach
• Mon 8 JunCheck Point, Katana, and Hades Cluster: VPN bypass, USB attack, PyPI malware
• Sun 7 JunCisco Zero-Day, IBM i RCE, JSON Data Leak
• Sat 6 JunNext.js Zero‑Click, Zapier Chain, Ransomware IT Scam
• Fri 5 JunCritical RCEs and DoS: Everest, Redis, HTTP/2
• Thu 4 Junxz backdoor and Microsoft Android token theft
• Wed 3 JunClaude Code CI hijack, RedSun SYSTEM priv esc, Iran AI attacks
• Tue 2 JunActive Netlogon RCE, npm Codex tokens, Chrome autofill bypass
• Mon 1 JunRapid7 PAN-OS bugs, Veeam RCE, Seedworm DLL hijacks

May 2026

• Sun 31 MayStarlette Host-Header Bug, TETRA Hack, Sandbox Escape
• Sat 30 MayStarlette BadHost, AI GitHub flaws, Glassworm takedown
• Fri 29 MayKopia RCE, Gogs Zero‑Day, FBI $20.9B Loss
• Thu 28 MayMegalodon malware targets 5500 repos, Fox Tempest dismantled
• Wed 27 MayGhost CMS SQLi Exploited, Drupal Core SQLi Active, Cisco 10.0 Fix
• Tue 26 MayPixel 10 zero-click, LiteSpeed root, Drupal SQL exploited