Global Threat Campaign Hits Critical VMware vCenter Flaw
Exploitation against CVE-2026–59310 began earlier this month, and patching the vulnerability may not be enough to fully mitigate the threat. Quelle: Zum Originalbeitrag
Dark Reading
Belgium’s eID Authentication Opens Citizen Accounts to RCE
The trust framework underlying Belgium’s electronic ID system was fully compromised by severe vulnerabilities in a key browser extension, showcasing bigger problems with extensions in general. Quelle: Zum Originalbeitrag
‚Jewelbug‘ APT Balances State Espionage & Cryptocurrency Theft
Researchers discovered hackers-for-hire performing cyber espionage and financially motivated heists from the same Web panel. Quelle: Zum Originalbeitrag
Walmart’s "Trusted Agent" Approach to Purple Teaming
Walmart co-locates red and blue teams to build trust and improve security through collaborative purple teaming exercises Quelle: Zum Originalbeitrag
Long-running Data Theft Campaign Targeting Salesforce, ServiceNow
The "City-Forum" campaign has been active since at least March 2025 and has targeted organizations across multiple sectors with custom tooling. Quelle: Zum Originalbeitrag
Walmart Leaders Transform Security Operations Without Going Bananas
The big-box giant has scaled its defenses by encouraging trust and innovation. Good communications, transparency, and team spirit are key factors. Quelle: Zum Originalbeitrag
Ransomware Hits Colombian Justice Ministry Days Before Presidential Transition
Attackers continue to target critical infrastructure and government-linked organizations in the country, mirroring the increased activity across Latin America. Quelle: Zum Originalbeitrag
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA
The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances. Quelle: Zum Originalbeitrag
Microsoft’s Patch Tuesday Deluge Continues With August Updates
Security experts say prioritization should be the main focus for the August updates, not the massive CVE volume. Quelle: Zum Originalbeitrag
The Patch Gap: Why Defenders Need to Think in Chains, Not Checklists
It’s time to turn from CVSS-backed patching to choke-point patching focused on breaking chains to critical assets. Quelle: Zum Originalbeitrag