Security news, decoded.

This week saw significant security incidents involving ServiceNow and Hugging Face. A critical pre-authentication remote code execution vulnerability (CVE-2026-6875) in the ServiceNow AI Platform is currently being exploited in the wild, enabling unauthenticated attackers to execute arbitrary code. Meanwhile, Hugging Face reported a breach attributed to an autonomous AI agent that gained unauthorized access to internal datasets and credentials. These events underscore the growing risks associated with AI platforms and the importance of timely patching and robust security measures.

Attackers are actively exploiting a critical remote code execution (RCE) vulnerability in Fastjson, Alibaba's widely used Java JSON library. Tracked as CVE-2026-16723, this flaw affects versions 1.2.68 through 1.2.83 and enables unauthenticated attackers to execute arbitrary code under certain conditions involving Spring Boot applications. As of July 25, no official patch for the 1.x branch has been released, leaving users vulnerable unless they apply mitigations like enabling SafeMode or upgrading to Fastjson2.

Threat actors associated with the Cl0p ransomware group are actively exploiting vulnerabilities in internet-facing instances of PTC Windchill and FlexPLM to achieve unauthenticated remote code execution (RCE). Attackers combine a pre-authentication information disclosure flaw in FlexPLM’s WSDL endpoint with a critical RCE vulnerability in Windchill, identified as CVE-2026-12569 (CVSS score: 9.3), to deploy malicious JSP web shells. These attacks primarily target manufacturing, automotive, aerospace, and retail industries, where adversaries steal sensitive design and engineering data through double extortion tactics. PTC has issued warnings about increased threat activity involving this flaw, which was recently added to CISA’s KEV catalog.

Rockwell Automation has issued updates addressing four critical code execution vulnerabilities in its Arena Simulation software, as reported by CISA and Rockwell in recent advisories. The affected versions include all releases up to 17.00.00, with the fix available in version 17.00.01. The flaws—CVE-2026-8085, CVE-2026-8312, CVE-2026-8313, and CVE-2026-8314—are memory corruption issues caused by insufficient validation of user input, potentially enabling attackers to run arbitrary code if a user opens a malicious file. While remote exploitation is not possible without user interaction, the widespread use of Arena in industries like healthcare, logistics, and defense makes these vulnerabilities particularly concerning.

SecurityWeek's latest roundup highlights several major cybersecurity developments, including the emergence of Dolphin X, a new AI-driven infostealer capable of targeting over 300 applications to steal sensitive data like browser credentials and cloud tokens. Meanwhile, hundreds of Linux kernel vulnerabilities—432 in total—were disclosed in a single day, requiring urgent attention from security teams. Additionally, researchers uncovered a critical vulnerability in dealer-installed vehicle anti-theft systems, exposing millions of cars to potential Bluetooth-based hijacking attacks.

A new exploit named Certighost allows low-privileged Active Directory users to impersonate a Domain Controller by obtaining a certificate through a flaw in Active Directory Certificate Services (AD CS). Researchers H0j3n and Aniq Fakhrul disclosed the vulnerability as CVE-2026-54121 on July 24, after Microsoft had issued a patch on July 14. The flaw enables attackers to retrieve sensitive credentials like krbtgt using DCSync, even without admin rights or user interaction. A working proof-of-concept is now publicly available.

Microsoft has addressed a critical vulnerability in its Azure Automation service that could have allowed attackers to perform cross-tenant identity takeovers. The flaw, tracked as CVE-2025-29827 and rated with a CVSS score of 9.9, stemmed from a default setting that unintentionally exposed automation account identities. An attacker with access to their own Azure Automation account could exploit this to breach trust boundaries and impersonate another tenant's identity, enabling unauthorized script modifications and access to sensitive data. Microsoft researcher Shay Shavit discovered the issue and reported it to MSRC, who issued an advisory. Although no known exploits were observed, the default configuration remains a key concern. Organizations are advised to audit their automation account configurations and limit external exposure unless necessary.

A Russian state-backed hacking group called Laundry Bear has been exploiting an unpatched vulnerability in Zimbra Collaboration Suite (CVE-2025-66376) to infiltrate government and corporate networks since July 2025. The flaw, a cross-site scripting issue fixed in November 2025, allows attackers to steal sensitive data simply by having users view a malicious email. Multiple U.S. and international cybersecurity agencies warn that the threat actors continue to use this exploit against unpatched systems, targeting sectors including defense, government, education, and law enforcement. Organizations are urged to apply updates and monitor for suspicious activity.

Researchers at Zenity Labs have revealed a critical cross-site request forgery (CSRF) vulnerability in OpenAI's ChatGPT Workspace Agents, codenamed AgentForger. This flaw could have enabled attackers to create and deploy unauthorized AI agents within an organization using a simple phishing link. The vulnerability was responsibly disclosed and patched by OpenAI on June 8, 2026. If exploited, the flaw would allow an attacker to forge an AI agent with full access to connected enterprise tools like Outlook, Gmail, Slack, and more—without requiring additional user interaction after the initial click. The affected product, Agent Builder, is now being deprecated by OpenAI.

Two critical vulnerabilities in Microsoft's Bing Images service allowed attackers to execute arbitrary commands with full system privileges using specially crafted SVG files. The flaws, tracked as CVE-2026-32194 and CVE-2026-32191, were discovered by XBOW and rated 9.8 on the CVSS scale. Attackers could exploit these issues without authentication by either uploading a malicious SVG or providing a URL pointing to one. Microsoft addressed both issues internally before publicly disclosing them in March 2026, stating no customer action is required. The vulnerabilities stemmed from how Bing’s image-processing pipeline handled SVG references, enabling command injection through ImageMagick delegates. Developers are advised to follow best practices such as disabling delegates, restricting accepted image formats, and isolating processing workers.

An attacker deployed the Hermes AI agent in unattended mode to conduct post-exploitation activities within Thailand's Ministry of Finance network. The agent scanned for vulnerabilities, accessed personnel records dating back to 2012, and attempted to exploit misconfigured Hadoop services. The attack relied on default authentication settings and hardcoded credentials rather than new exploits. Threat intelligence firm Hunt.io discovered the operation after finding exposed logs and tools on a publicly accessible server. While no new vulnerabilities were exploited, the incident highlights risks from automated post-compromise operations using legitimate tools like Hermes.

NodeBB has addressed eight high-severity security flaws in its forum software, all identified by AI pentesting tools from Aikido Security during a six-hour audit. All versions prior to 4.14.0 are vulnerable, with the latest patch available in version 4.14.2. The flaws range from allowing unauthenticated users to access private messages and categories, to enabling attackers to inject malicious code through forum posts or federated connections. Some issues required only a regular user account to escalate privileges or bypass protections. While no exploitation has been reported yet, administrators are strongly advised to update immediately due to the potential for serious impacts like unauthorized access and data exposure.

The Clop ransomware group is actively exploiting a critical vulnerability in PTC’s Windchill and FlexPLM platforms, tracked as CVE-2026-12569. This flaw allows unauthenticated attackers to execute arbitrary code and deploy JSP webshells for data exfiltration. The exploit has already led to extortion attempts against affected organizations. PTC issued patches on June 17, but CISA added the flaw to its Known Exploited Vulnerabilities catalog due to ongoing threats. Cybersecurity firm ReliaQuest warns users to apply updates and isolate compromised systems immediately.

Researchers have published proof-of-concept (PoC) remote code execution (RCE) exploits targeting multiple Redis versions, including 6.2.22, 7.4.9, 8.6.4, and 8.8.0. These vulnerabilities stem from memory corruption issues in Redis Streams and the RedisBloom module. Redis has issued seven security updates on July 23 to address these flaws. Users should upgrade to the latest stable versions—6.2.23, 7.2.15, 7.4.10, 8.2.8, 8.4.5, 8.6.5, and 8.8.1—to mitigate risks. Until patches are applied, administrators are advised to restrict access to the RESTORE command and block untrusted network connections.

A new cyberattack campaign attributed to the Russia-aligned threat group UAC-0099 has been discovered, involving a malicious Notepad++ plugin used to distribute the MATCHBOIL.V2 malware. The attack starts with phishing emails that lead victims to download a ZIP file disguised as a PDF document. This package includes a legitimate copy of Notepad++ version 8.8.3 and a malicious DLL named NppExport.dll. When executed, the script extracts additional components including a modified version of MATCHBOIL, which can deliver further payloads. CERT-UA advises updating Notepad++, WinRAR, and 7-Zip to mitigate risks.

Ransomware groups are increasingly targeting the broader healthcare supply chain across the EMEA region, according to a report by Flare researcher Assaf Morag. Between 2024 and 2026, multiple threat actors including Qilin, LockBit 3.0, RansomHub, DragonForce, Gunra, NightSpire, 3AM, and Kazu have been observed attacking not just hospitals but also clinics, telemedicine providers, diagnostic labs, pharmacies, and related service organizations. These attacks often serve as entry points to larger, better-protected targets further along the supply chain. The study highlights the growing risk to patient safety and operational continuity in the healthcare sector.

In 2026, the ransomware threat landscape has become increasingly fragmented, according to Black Kite's latest report. Over the past year, 61 new ransomware groups emerged, bringing the total number of active threat actors to 146 by June 2026. The top five groups alone were responsible for nearly half of all victims. Unlike previous years dominated by a single major player or event, this year saw simultaneous expansion across multiple ransomware playbooks. Activity surged in the second half of the year, with Qilin becoming the largest operator by volume. The U.S. remains the most targeted country, but Europe and parts of Asia also experienced significant increases in attacks.

Western cybersecurity agencies have issued warnings about a Russian hacking campaign exploiting a zero-day vulnerability in Zimbra Collaboration Suite. The flaw, CVE-2025-66376, allows attackers to inject malicious code into webmail clients through CSS @import, enabling credential theft and data exfiltration. The threat group behind the attacks is linked to Laundry Bear (also known as Void Blizzard or TA488), with evidence of extensive targeting of Ukrainian and NATO-related organizations.

Russian state-backed threat actors have been exploiting a critical zero-day vulnerability in Zimbra Collaboration Suite (CVE-2025-66376) to target U.S., Ukrainian, and other Western government and enterprise networks since July 2025. The flaw allows attackers to execute a so-called 'half-click' phishing attack—requiring only that a user view a malicious email within a vulnerable version of Zimbra webmail. This method bypasses traditional phishing defenses and enables adversaries to exfiltrate sensitive data. Multiple intelligence and cybersecurity agencies warn that the exploit is being used by the APT group Laundry Bear, with ties to Russian intelligence, to gather information for strategic advantage.

A Russian state-backed hacking group has been exploiting a zero-day vulnerability in Zimbra's webmail client to steal sensitive data, including email archives and two-factor authentication (2FA) recovery codes. The flaw, CVE-2025-66376, allows attackers to execute malicious JavaScript simply by viewing a crafted HTML email. This vulnerability was actively used between July 2025 and February 2026 against government and commercial organizations in Western countries, Ukraine, and other regions. Zimbra released patches for affected versions in November 2025, but users must manually review compromised accounts and invalidate stolen credentials.

Cisco Talos researchers have uncovered a new remote access trojan (RAT) named msaRAT, developed by the Chaos ransomware group. This Rust-based malware leverages the Chrome DevTools Protocol to create a stealthy command-and-control (C2) channel without direct network interaction. It begins with a deceptive MSI file posing as a Windows update, loading the payload into memory to facilitate ransomware deployment. The technique allows attackers to evade detection by routing traffic through legitimate browser processes. Organizations are advised to monitor for unusual curl commands, unauthorized MSI downloads, and signs of Chrome or Edge manipulation.

CISA has issued a warning that the Russian state-backed hacking group Laundry Bear, also known as Void Blizzard, is exploiting a recently patched vulnerability in Zimbra Collaboration Suite to conduct email theft campaigns. The flaw, tracked as CVE-2025-66376, is a cross-site scripting (XSS) issue in the Classic UI of the software. This allows attackers to inject malicious JavaScript into HTML emails, which executes automatically when viewed—enabling silent data exfiltration without user interaction. The threat actors have targeted multiple sectors, including defense, government, education, and technology, using this zero-click exploit alongside phishing techniques to steal sensitive information such as emails, passwords, and two-factor authentication tokens.

Researchers have identified a new cyberattack method where threat actors disguise malware as Notepad++ plugins to silently install malicious tools on victims' systems. The campaign, attributed to UAC-0099, involves delivering a ZIP file containing a legitimate version of Notepad++ alongside a harmful plugin called NppExport.dll. This plugin, known as LunchPoke, establishes persistence by creating scheduled tasks and downloading additional payloads like BurnyBear and MatchBoil V2. The attack leverages a reported vulnerability (CVE-2025-56383), though the Notepad++ team disputes its classification as a flaw. Security experts recommend updating Notepad++ to version 8.9.7 and WinRAR to 7.23 to mitigate risks.

In July 2026, the White House launched Gold Eagle, a federal initiative using frontier AI to detect and address software vulnerabilities before they are exploited. This marks a shift away from the outdated model of manual vulnerability discovery and patching. With AI capable of identifying complex flaws rapidly—and attackers exploiting them within hours—traditional patch management is no longer sufficient. The article outlines five key steps for modernizing security practices, including rethinking patch prioritization, reducing exposure, validating controls, preventing vulnerabilities early, and adapting to AI-driven threat landscapes.

Researchers discovered a sandbox escape vulnerability in Anthropic's Claude Cowork that allows an AI agent to break out of its Linux VM and access the host macOS system. The flaw, named SharedRoot, could let attackers read or write files across the user’s Mac, including sensitive data like SSH keys and cloud credentials. A proof-of-concept was demonstrated using a recently disclosed Linux kernel flaw (CVE-2026-46331) to gain elevated privileges within the VM. While Anthropic has shifted new sessions to cloud execution by default, users running Cowork locally remain at risk until additional mitigations are applied.

A China-linked cyber operation tracked as JadeProx has deployed a new Windows loader named TriBack Loader to target government, healthcare, and education institutions in Asia and Latin America. The threat actors have leveraged multiple unpatched vulnerabilities including CVE-2018-11511, CVE-2021-24139, CVE-2021-31755, and CVE-2021-32305—each rated with a high CVSS score of 9.8—to gain initial access. Once inside, they used DLL sideloading techniques to execute malicious payloads and deliver post-exploitation tools like AdaptixC2 and Beagle. Sophos and Group-IB have identified spear-phishing campaigns and domain infrastructure linked to the activity, urging organizations to patch exposed Java interfaces and monitor for suspicious file patterns.

A critical authentication bypass flaw, CVE-2026-16232, in Check Point’s SmartConsole has been actively exploited in the wild. The vulnerability affects Security Management and Multi-Domain Management systems, allowing attackers to gain full administrative access without credentials. Check Point issued a security advisory on July 22, 2026, confirming active exploitation and urging immediate patching. The flaw was added to CISA’s Known Exploited Vulnerabilities catalog with a three-day window for remediation. Affected versions include R82.10, R82, R81.20, and others, all of which require installing the latest Jumbo Hotfix. Rapid7 advises checking for signs of compromise, especially in exposed environments.

A critical nine-year-old race condition vulnerability, tracked as CVE-2026-64600 and dubbed RefluXFS, has been discovered in the Linux kernel's XFS filesystem. This flaw enables local attackers to overwrite protected files and escalate privileges to root. The issue affects systems using an XFS filesystem with reflink enabled—common in major enterprise Linux distributions—and running kernel versions 4.11 or newer. Standard security measures like SELinux and container isolation do not prevent exploitation due to the low-level nature of the flaw. A patch was issued on July 16, and users are urged to update their kernels immediately.

Researchers uncovered a large-scale cyber campaign where attackers leveraged compromised GitHub repositories to deploy malicious workflows targeting cPanel and WebHost Manager (WHM) servers. Between July 12 and 13, 2026, ten Packagist packages linked to a legitimate PHP developer were used to distribute malicious GitHub Actions workflows. These workflows trigger GitHub-hosted runners that download payloads exploiting CVE-2026-41940, an authentication bypass flaw in cPanel and WHM. The attacks aim to steal credentials, configuration files, and sensitive data from vulnerable systems. This incident highlights how supply chain vulnerabilities can be weaponized at scale.

A critical authentication bypass vulnerability (CVE-2026-16232) in Check Point Security Management and Multi-Domain Security Management is currently being exploited by attackers. This flaw allows unauthenticated users to gain admin-level access through SmartConsole, enabling them to modify security policies and configurations. Check Point has issued hotfixes for supported versions—R81.20, R82, and R82.10—and advised customers to restrict access to trusted IPs if immediate patching isn't possible. CISA has added this flaw to its Known Exploited Vulnerabilities catalog, requiring U.S. federal agencies to act by July 25.

A critical zero-day vulnerability in Check Point's products has been actively exploited in the wild. CVE-2026-16232 impacts Security Management and Multi-Domain Management, enabling attackers to bypass authentication and gain full administrative control through SmartConsole. The flaw was confirmed by Check Point, which reported that only a limited number of customers with exposed management interfaces were affected. Patches and IoCs are available, and CISA added the flaw to its KEV catalog, urging immediate remediation.

Check Point Software has released a fix for a critical zero-day vulnerability affecting its SmartConsole interface, which is currently being exploited in real-world attacks. The flaw, identified as CVE-2026-16232, enables unauthenticated attackers to bypass authentication and gain administrative privileges by stealing an application token. Once inside, adversaries can alter security policies and configurations on affected systems like the Security Management Server and Multi-Domain Security Management Server (MDS). The vulnerability requires that the server’s IP be accessible over the internet and that Trusted Client restrictions are disabled. CISA has added the issue to its list of known exploited vulnerabilities and directed U.S. federal agencies to apply patches by July 25. Organizations are strongly advised to update or implement mitigations such as restricting Trusted Clients to specific IPs.

A long-standing Linux kernel vulnerability, tracked as CVE-2026-64600 and dubbed RefluXFS, has been disclosed. This flaw enables an unprivileged local user to overwrite root-owned files on XFS filesystems and achieve persistent root access. The issue affects default installations of Red Hat Enterprise Linux, Fedora Server, and Amazon Linux, among others. The vulnerability stems from a race condition in the XFS filesystem when reflink is enabled (reflink=1). A patch was merged into the Linux kernel on July 16, and updated kernels are now being distributed by major vendors. Exploitation requires specific conditions involving XFS configuration and file placement. While no active exploitation has been reported, systems meeting these criteria should apply updates immediately.

Check Point has issued security updates addressing multiple vulnerabilities in its Security Management and Multi-Domain Security Management products, including a critical flaw currently being actively exploited. The most severe issue, CVE-2026-16232 (CVSS score: 9.3), allows unauthenticated attackers to bypass authentication and gain full administrative access via the SmartConsole login process. This could enable attackers to alter security policies and configurations remotely. The flaw impacts several versions of Check Point's software, including R77.30 through R82.10. A patch is available, and users are advised to apply the latest Jumbo hotfix immediately. CISA has also added this vulnerability to its KEV catalog, mandating federal agencies to remediate by July 25, 2026.

A recent study reveals that many open source security fixes involve multiple patches, creating a window of vulnerability between the initial and final commits. Researchers analyzed 1,646 CVEs with more than one patch in the National Vulnerability Database and found that some fixes are incomplete or delayed, exposing users to potential attacks. For example, CVE-2012-0038 required two separate commits to fully resolve an integer overflow issue. Automated detection tools failed to identify these partial fixes accurately, highlighting a critical gap in current vulnerability management practices.

Unit 42 has uncovered a sustained espionage campaign attributed to Russian threat groups Void Blizzard and LAUNDRY BEAR, exploiting a critical vulnerability in Zimbra Collaboration Suite (CVE-2025-66376). Attackers used zero-click phishing emails to inject malicious JavaScript payloads into unpatched systems, stealing login credentials, email archives, and search histories. The flaw is being actively exploited against government, defense, and financial organizations in NATO countries, Ukraine, CIS nations, and parts of Africa. Palo Alto Networks recommends updating Zimbra and leveraging Cortex Advanced Email Security to mitigate risks.

Researchers have revealed a critical local privilege escalation (LPE) vulnerability in the snap-confine component of Ubuntu, allowing unprivileged users to escalate their privileges to root on default desktop installations. Tracked as CVE-2026-8933 (CVSS score: 7.8), this flaw affects Ubuntu Desktop versions 24.04, 25.10, and 26.04. The vulnerability arises from a race condition during sandbox initialization, enabling attackers to manipulate file permissions and inject malicious rules into system directories. This could lead to full system compromise. To mitigate the risk, users are advised to update their systems with the latest patches for snapd.

A recent log entry revealed an ongoing attack targeting Geoserver through CVE-2024-36401, an X-Path expression evaluation flaw. The exploit attempts to execute arbitrary commands on vulnerable systems using the Rondo botnet. Attackers are deploying malicious shell scripts hosted remotely, leveraging multiple download methods such as wget and curl. This vulnerability allows unauthenticated attackers to run arbitrary code, making it critical for users to apply patches immediately.

A critical local privilege escalation vulnerability, CVE-2026-64600, has been discovered in the Linux kernel's XFS filesystem. Attackers with basic user access can exploit this flaw to overwrite protected files and gain full root privileges on affected systems, including those using SELinux in Enforcing mode. The issue affects a wide range of enterprise Linux distributions, including RHEL, Oracle Linux, Amazon Linux, and Fedora, especially when running an XFS root filesystem with reflink enabled. The vulnerability has existed since kernel version 4.11 (circa 2017) and may impact over 16 million systems globally. Immediate patching is strongly advised, as no effective workarounds exist.