Security news, decoded.

A critical vulnerability in the open-source developer platform Windmill is being actively exploited in the wild, allowing attackers to read arbitrary server files without authentication. The flaw, tracked as CVE-2026-29059 (CVSS score: 7.5), affects the 'getlogfile' endpoint and enables path traversal attacks. Attackers can exploit this to access sensitive data like the SUPERADMINSECRET environment variable, which grants elevated privileges. A fix was released in version 1.603.3 in January 2026, but many systems remain vulnerable.

A critical server-side request forgery (SSRF) vulnerability has been identified in LMDeploy’s OpenAI-compatible API server, affecting versions up to 0.14.0. The flaw allows unauthenticated attackers to exploit a redirect bypass, enabling access to internal services and cloud metadata endpoints such as 169.254.169.254. This could lead to the exposure of sensitive information like IAM credentials. The issue was reported on June 12, 2026, but went unaddressed for over a month before being publicly disclosed. A fix was merged into the main branch via PR 4734, though no official release has included it yet. Users are advised to apply strict egress filtering until an updated version is available.

A critical remote code execution flaw in Microsoft SharePoint, tracked as CVE-2026-50522, is currently being actively exploited by attackers to extract IIS machine keys from vulnerable servers. Offensive security firm WatchTowr reported that exploitation began shortly after a proof-of-concept was made public, allowing unauthorized access without authentication. The vulnerability affects on-premise SharePoint installations, and experts warn that simply applying patches isn't sufficient—organizations must also rotate their IIS machine keys to fully secure their systems.

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive for U.S. government agencies to address a critical vulnerability in Langflow, a visual framework used for building AI agents. The flaw, tracked as CVE-2026-0770, enables unauthenticated attackers to achieve remote code execution with minimal effort. This vulnerability was recently added to CISA’s Known Exploited Vulnerabilities (KEV) catalog, mandating immediate remediation under Binding Operational Directive 26-04. Trend Micro researchers identified the issue in how Langflow processes the execglobals parameter, allowing attackers to run arbitrary code as root. According to KEVIntel, over 220 exploitation attempts have been recorded since mid-June, with malicious payloads observed stealing AWS credentials and deploying malware.

A new SharePoint vulnerability, CVE-2026-50522, is being actively exploited in real-world attacks—marking the fourth such flaw found under attack in just one month. Microsoft addressed the issue on July 14 as part of its monthly security updates, labeling it a critical remote code execution flaw due to improper handling of untrusted data. Attackers can exploit this flaw by authenticating as a Site Owner and injecting malicious code onto the server. Threat intelligence firm Defused first reported signs of exploitation, followed by confirmation from WatchTowr that attackers are stealing machine keys for persistent access. While Microsoft has not yet updated its advisory to reflect active exploitation, CISA has urged immediate patching of similar SharePoint vulnerabilities.

A critical unauthenticated chain in WordPress Core led to rapid exploitation within 90 minutes of the patch being released. Attackers used CVE-2026-60137 (SQL injection) and CVE-2026-63030 (REST API route confusion) to create admin accounts and achieve remote code execution. Over 65,000 attempts were blocked by Patchstack from more than 1,500 unique IPs. The vulnerabilities affect versions 6.8 through 7.0.1 and are now fixed in 7.0.2, 6.9.5, and 6.8.6. Sites that remain unpatched should monitor for suspicious admin accounts, unknown plugins, or unexpected PHP files.

Bishop Fox has developed and released an open-source tool named Snowpick that identifies unauthenticated data exposure in ServiceNow platforms. During authorized penetration tests, the firm scanned 166 ServiceNow instances and found that 31% had exposed data accessible without credentials. These vulnerabilities stemmed from misconfigurations and access control flaws rather than new zero-day exploits. The tool uses public endpoints like Service Portal widgets and the Table REST API to detect leaked information such as ticket attachments, knowledge base entries, and service catalog details. Organizations are advised to audit their configurations using Snowpick to prevent potential incidents.

A critical remote code execution (RCE) vulnerability in Microsoft SharePoint, tracked as CVE-2026-50522, is currently being actively exploited by attackers to steal sensitive machine keys. These stolen keys enable adversaries to forge authentication tokens and gain unauthorized access to SharePoint resources under compromised identities. Microsoft classified the flaw as a deserialization-of-untrusted-data issue that allows unauthenticated remote code execution. The vulnerability was patched in July’s updates but had not been flagged as exploited at the time. Offensive security firm watchTowr reported observing real-world exploitation attempts shortly after a proof-of-concept (PoC) exploit surfaced online. A PowerShell-based PoC for CVE-2026-50522 has since been shared on GitHub, demonstrating how attackers can deliver malicious payloads via a WS-Federation sign-in response. While patching mitigates the risk, experts recommend rotating credentials for any potentially exposed assets.

Security researchers have confirmed that hackers are actively exploiting two critical vulnerabilities in WordPress Core—CVE-2026-63030 and CVE-2026-60137—to deploy persistent webshells and install malicious plugins on compromised systems. These flaws, collectively referred to as 'wp2shell,' allow remote code execution without requiring authentication, leveraging the REST API's batch-processing feature. WordPress has issued patches in versions 7.0.2, 6.9.5, and 6.8.6, but many sites remain unpatched. Threat actors are scanning for vulnerable installations, stealing credentials, and creating backdoor access points. Administrators are urged to update their platforms immediately and inspect logs and plugins for signs of intrusion.

A critical vulnerability in AWS's Kiro coding IDE allowed attackers to exploit a poisoned web page to rewrite configuration files and execute arbitrary code on a developer's machine. The flaw bypassed Kiro’s approval-based security model, enabling unauthorized actions without user interaction. Researchers from Intezer and Kodem Security discovered that manipulating the mcp.json file—used to define external tools—could lead to remote code execution. AWS has since patched the issue, but no CVE identifier was assigned. The vulnerability affected versions up to 0.10.16 and was confirmed resolved in version 0.11.130. Developers are advised to update to the latest stable release to ensure protection.

A critical local privilege escalation (LPE) vulnerability, CVE-2026-8933, has been discovered in the snap-confine component used by recent versions of Ubuntu Desktop. This flaw could allow unprivileged users to escalate privileges to root due to a race condition during sandbox initialization. The affected systems include Ubuntu Desktop 24.04, 25.10, and 26.04. Exploitation involves leveraging two concurrent race conditions to manipulate file ownership and bypass AppArmor confinement. Canonical has issued patches through its security team, and organizations are urged to update their snapd packages immediately.

Microsoft has confirmed that a critical vulnerability in SharePoint Server, CVE-2026-50522, is currently being actively exploited. This flaw allows unauthenticated attackers to execute arbitrary code remotely through deserialization of untrusted data. A proof-of-concept (PoC) exploit was recently made public, enabling threat actors to extract SharePoint machine keys and maintain persistent access. The vulnerability affects all supported on-premises versions of SharePoint Server and carries a CVSS score of 9.8. Security experts warn that patching alone is insufficient—defenders should also rotate credentials for potentially compromised systems.

Threat actors are actively exploiting a recently patched vulnerability in Palo Alto Networks' PAN-OS software to gain unauthorized access and deploy the Qilin ransomware. The flaw, CVE-2026-0257, allows attackers to bypass authentication and establish SSL VPN sessions when certain certificate configurations are enabled. Arctic Wolf Labs reported multiple incidents in June 2026 where this vulnerability was leveraged as an initial access vector, leading to varied post-exploitation tactics including encryption and data exfiltration. Affected systems should apply available patches immediately.

Threat actor JadePuffer has returned with ENCFORGE, a new ransomware specifically designed to attack AI and machine learning infrastructure. This follows an earlier campaign where the group used an AI agent to exploit a known vulnerability (CVE-2025-3248) in Langflow, leading to database encryption and destruction. Researchers have confirmed that the same operator is now deploying ENCFORGE, which targets over 180 file types related to AI models, datasets, and configurations. The ransomware was successfully deployed after initial attempts failed, highlighting the evolving tactics of this threat actor. Experts warn that encrypting production AI models can lead to costly recovery efforts, urging organizations to patch exposed systems and harden their environments.

Zimbra has issued security updates for its email platform to resolve several high-severity vulnerabilities, including a critical command injection flaw in the SNMP monitoring component. The latest patch, Zimbra 10.1.20, also resolves four cross-site scripting (XSS) issues in the Classic Web Client. These flaws could allow attackers to execute malicious scripts or bypass mail forwarding restrictions. While there is no evidence of active exploitation, past XSS vulnerabilities in Zimbra have been targeted by threat actors, underscoring the importance of applying this update promptly.

Researchers uncovered multiple vulnerabilities in five open-source Android AI agent frameworks—AppAgent, AppAgentX, Mobile-Agent-v3, Open-AutoGLM, and MobA—that could allow attackers to execute arbitrary code on connected host computers. By injecting invisible or misleading text into screenshots processed by these agents, malicious apps can trick the AI into performing unintended actions, such as launching programs or stealing credentials. The flaws stem from unsafe handling of model outputs, lack of input sanitization, and insecure broadcast mechanisms. Despite being reported privately, no official patches have been issued, and none of the projects currently list a formal vulnerability disclosure process.

A critical vulnerability in the widely used JavaScript library node-tar has been patched, addressing a denial-of-service flaw that could allow attackers to exhaust server storage and crash services. The issue, tracked as CVE-2026-59873, affects versions up to 7.5.18 and enables resource exhaustion through specially crafted gzip-compressed tar files. Attackers can exploit this by sending malicious archives that expand exponentially during decompression, leading to high CPU usage and full disk consumption. The fix in version 7.5.19 introduces limits on decompression ratios to prevent such attacks.

Cosmetics giant Estée Lauder has confirmed that sensitive employee data was stolen due to a zero-day vulnerability in Oracle E-Business Suite (CVE-2025-61882). The flaw allowed unauthenticated remote code execution and was exploited by the Cl0p cybercrime group starting in August 2025. In June 2026, the company revealed that personal and financial information of employees had been accessed, including names, Social Security numbers, and health records. Estée Lauder is offering two years of free identity monitoring to affected individuals and urging vigilance against phishing attempts.

Researchers from Volexity have confirmed that two critical vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 devices—CVE-2026-15409 and CVE-2026-15410—were actively exploited as zero-day flaws weeks before being publicly disclosed. These exploits enabled attackers to gain unauthorized access, install custom malware, and maintain persistent control over vulnerable systems. The attacks started as early as June 22, 2026, with threat actors leveraging these flaws to bypass security controls and exfiltrate sensitive data. SonicWall has issued patches, but experts warn that patching alone is insufficient; organizations must also check for signs of compromise and reset credentials.

The Qilin ransomware group is actively exploiting a critical authentication bypass vulnerability in Palo Alto Networks' GlobalProtect VPN software (CVE-2026-0257) to gain unauthorized access and deploy ransomware. The flaw was patched on May 13, but attackers began using it as early as May 17, with CISA adding it to its Known Exploited Vulnerabilities list on May 29. Cybersecurity firm Arctic Wolf confirmed multiple breaches linked to this exploit, resulting in widespread encryption of victim systems. With over 170,000 exposed GlobalProtect instances tracked online, urgent remediation is advised for any unpatched deployments.

Cosmetics giant Estée Lauder has revealed a data breach linked to an unpatched vulnerability in Oracle E-Business Suite (EBS), which was used for internal HR operations. The breach occurred on or around August 9, 2025, when an unauthorized party accessed the system and stole sensitive personal and financial information from some individuals. The incident is connected to the exploitation of CVE-2025-61882, a critical flaw allowing remote code execution without authentication. Oracle issued patches for this vulnerability on October 4, 2025, but many organizations remained vulnerable during the active exploitation period. Estée Lauder has engaged cybersecurity experts, informed authorities, and is providing two years of free identity monitoring to affected individuals.

Attackers are actively exploiting two critical vulnerabilities in WordPress—CVE-2026-63030 and CVE-2026-60137—to achieve unauthenticated remote code execution (RCE) and fully compromise vulnerable sites. These flaws, collectively named wp2shell, allow attackers to execute arbitrary code on default WordPress installations without requiring authentication or plugins. Security researchers have reported widespread exploitation attempts globally, with malicious actors uploading web shells, stealing credentials, and creating backdoor admin accounts. Cloudflare and Wiz have confirmed that a significant percentage of WordPress deployments were initially exposed to these issues, though remediation efforts have reduced exposure.

A critical remote code execution vulnerability in ServiceNow's AI platform, tracked as CVE-2026-6875, is being actively exploited just days after its disclosure. The flaw allows unauthenticated attackers to bypass sandbox protections and execute arbitrary code under specific conditions. While ServiceNow has deployed patches for hosted instances, self-hosted customers are responsible for applying them. Cybersecurity firm Searchlight Cyber published technical details on July 14, followed by reports from Defused indicating real-world exploitation using those methods. Although ServiceNow initially stated it had no evidence of active attacks, a spokesperson confirmed awareness of the exploitation but noted it appears limited to non-hosted environments.

Zimbra has issued a new security update addressing multiple high-severity vulnerabilities, including a critical command injection flaw disclosed in late June. The bug affects the SNMP monitoring feature when specific services are active, allowing unauthenticated attackers to execute arbitrary system commands. Version 10.1.20 of the Zimbra Collaboration Suite includes a full fix for this issue, along with patches for four cross-site scripting (XSS) vulnerabilities, a mail forwarding bypass, and several other access control and integration-related flaws. While Zimbra warns users to upgrade immediately, it has not confirmed whether any of these issues have been actively exploited.

A new ransomware variant called ENCFORGE has emerged, specifically targeting AI infrastructure components like model weights and training datasets. This malware is being deployed by the JADEPUFFER threat actor following exploitation of an unpatched vulnerability in Langflow versions prior to 1.3.0. The flaw, CVE-2025-3248, allows remote code execution without authentication and remains a high-risk issue with a CVSS score of 9.8. Researchers at Sysdig discovered that attackers are using this entry point to deploy ENCFORGE, which encrypts AI-specific file formats such as PyTorch checkpoints, Hugging Face models, and FAISS indexes. The ransomware avoids exfiltrating data but focuses on rendering AI assets unusable, potentially costing organizations hundreds of thousands in recovery costs. Immediate mitigation includes upgrading Langflow to version 1.9.1 or later and securing Docker socket access.

A critical vulnerability in ServiceNow AI Platform, identified as CVE-2026-6875, is currently being actively exploited by attackers to execute arbitrary code without authentication. The flaw, rated with a CVSS score of 9.5, enables sandbox escape and has been observed in real-world attacks targeting the "/assessmentthanks.do" endpoint. Patches have been issued for several versions including Brazil EA/GA, Australia Patch 2, Zurich Patch 7b/9, and Yokohama Patch 12 Hot Fix 1b/Patch 13. Security researchers emphasize the need for immediate patching to prevent full system compromise.

Cosmetics giant Estée Lauder has disclosed a data breach following an attack that exploited a vulnerability in Oracle E-Business Suite (CVE-2025-61882). Hackers gained unauthorized access on August 9, 2025, stealing personal details such as full names, Social Security numbers, health records, and financial account information. The flaw allowed remote code execution and was actively exploited by the Clop ransomware group since early 2025. Oracle issued patches for the issue in October 2025, but the breach highlights ongoing risks for organizations using unpatched systems.

Threat actors have exploited two zero-day vulnerabilities in SonicWall SMA1000 Secure Mobile Access appliances—CVE-2026-15409 and CVE-2026-15410—to install custom malware on vulnerable systems. These flaws allowed attackers to bypass authentication, gain root access, and deploy malicious tools like KNUCKLEBALL, Sou5, and ORANGETAIL. Security firm Volexity uncovered the attack chain, revealing that the threat actor, tracked as UTA0533, began exploiting these issues as early as June 22, weeks before public disclosure. SonicWall has issued patches for versions 6210, 7210, and 8200v; users are urged to apply them immediately.

Two critical vulnerabilities in WordPress, CVE-2026-60137 and CVE-2026-63030, are being actively exploited to enable unauthenticated remote code execution (RCE) on millions of sites. When combined, these flaws allow attackers to fully compromise default installations without needing login credentials. The vulnerabilities were discovered using AI tools and have already led to widespread exploitation, including the creation of backdoor admin accounts and deployment of malware like Overlord RAT. WordPress has issued a patch in version 7.0.2, urging all users to update immediately.

Security researchers uncovered sandbox escape techniques affecting four popular AI-powered coding assistants: Cursor, OpenAI's Codex, Google's Gemini CLI, and Antigravity. These vulnerabilities allowed attackers to execute arbitrary code outside the sandbox by manipulating files that external tools later process. The flaws were identified by Pillar Security and categorized into multiple failure modes related to unsafe file handling and overly trusting command allowlists. Most issues have been addressed in recent software updates, though some vendors downgraded the severity due to perceived low exploitability. The findings highlight a broader design flaw in how these tools handle workspace files.

A new variant of the JadePuffer ransomware, now using a custom tool named EncForge, is targeting AI infrastructure by encrypting critical assets like training datasets and model checkpoints. The threat actor exploited a vulnerability in Langflow (CVE-2025-3248) to gain access and deploy ransomware designed specifically for AI environments. This development highlights the growing risk of ransomware tailored to disrupt machine learning operations.

Ivanti is leveraging large language models (LLMs) to enhance its vulnerability detection and remediation efforts. Recently, an LLM identified a critical vulnerability, CVE-2026-10520, in Ivanti’s Sentry mobile gateway, which was rated as maximum severity with a CVSS score of 10 out of 10. The company has begun integrating advanced AI models into its security red teams to uncover and fix flaws that traditional tools miss. Ivanti’s CISO, Daniel Spicer, shared insights on how the initiative is progressing, highlighting successes in both identifying and resolving vulnerabilities using models from Anthropic and OpenAI.

A critical SQL injection vulnerability in WordPress Core, tracked as CVE-2026-63030, is currently being actively exploited. Dubbed 'wp2shell' by researchers, this flaw allows unauthenticated attackers to achieve remote code execution through the REST API. Attackers are already probing systems using crafted requests that attempt to inject malicious payloads into database queries. If you're running WordPress, check your exposure at https://wp2shell.com and assume compromise if vulnerable. Immediate patching is strongly recommended.

A server used by a malware operator was left unsecured, allowing researchers at Rapid7 to recover a full toolkit containing lure templates, test files, and documentation. The data reveals an AI-assisted approach to crafting phishing attacks that exploit CVE-2025-33053 (CVSS 8.8), a WebDAV vulnerability patched in June 2025. The campaign targeted Mexican users via a fake government ID lookup site, delivering infostealers through malicious .scr files disguised as PDFs. Researchers found evidence suggesting the attackers used open-source AI coding tools to automate parts of their workflow, including generating phishing content and testing multiple signed binaries for potential hijack opportunities.

Threat intelligence firm Defused has confirmed that attackers are actively exploiting CVE-2026-6875, a severe pre-authentication remote code execution flaw in ServiceNow's AI Platform. This vulnerability allows unauthenticated users to bypass the script sandbox and execute arbitrary code on affected systems. Discovered by Searchlight Cyber researchers, the flaw was patched by ServiceNow in late June 2026, but exploitation in the wild began shortly after the public disclosure on July 13. Attackers are using payloads targeting the /assessmentthanks.do endpoint, employing a novel method for sandbox escape compared to the original proof-of-concept. Organizations running self-hosted instances should apply the latest security updates immediately.

Two critical zero-day vulnerabilities in SonicWall secure remote access appliances were actively exploited by a threat actor for several weeks before being patched. According to Volexity, attackers used CVE-2026-15409 and CVE-2026-15410 to deploy custom malware like KnuckleBall and gain unauthorized access to systems. SonicWall issued hotfixes on July 14 after the exploitation was discovered as early as June 22. CISA has also added these flaws to its Known Exploited Vulnerabilities catalog.

A critical remote code execution vulnerability in WordPress Core has been actively exploited in the wild, allowing unauthenticated attackers to execute arbitrary code on vulnerable installations. The flaw, known as wp2shell, combines two issues—CVE-2026-63030 and CVE-2026-60137—to enable full system compromise without authentication or plugins. Proof-of-concept exploits are already circulating, and early signs of real-world attacks have emerged. Meanwhile, SonicWall Secure Mobile Access (SMA) appliances were targeted with zero-day exploits before patches were publicly available. Two vulnerabilities, CVE-2026-15409 and CVE-2026-15410, allowed attackers to achieve arbitrary command execution. Both flaws have now been addressed by SonicWall. Organizations running these products should prioritize patching immediately to mitigate risks.

This week saw multiple major cybersecurity incidents and patches. Ernst & Young disclosed a data breach via a compromised third-party IT support platform, potentially exposing sensitive client and employee data. Jscrambler suffered a supply chain attack where stolen credentials led to the distribution of malicious npm packages. Meanwhile, Coca-Cola's subsidiary Fairlife confirmed a ransomware attack that disrupted U.S. dairy production. In terms of vulnerabilities, Microsoft addressed 622 flaws in its largest-ever Patch Tuesday update, including two actively exploited issues (CVE-2026-56164 and CVE-2026-56155). WordPress issued emergency fixes for two critical RCE flaws (CVE-2026-63030 and CVE-2026-60137), while SonicWall released hotfixes for two zero-day vulnerabilities (CVE-2026-15409 and CVE-2026-15410) being exploited by ransomware groups.