Security news, decoded.

Attackers are reportedly exploiting a vulnerability in Gitea’s reverse-proxy authentication logic to gain access to internet-reachable instances by providing only a valid username. The issue, affecting Gitea official Docker images before 1.26.3, is tracked as CVE-2026-20896 (CVSS 9.8) and can be triggered using a single HTTP header, enabling authentication bypass when reverse-proxy auth is configured incorrectly. Researchers say exploitation began shortly after disclosure, and organizations should upgrade to patched Gitea versions as quickly as possible to reduce risk of full compromise of repositories and secrets.

Attackers have started exploiting a critical path traversal vulnerability in Adobe ColdFusion shortly after it was made public, with proof of in-the-wild use reported for CVE-2026-48282 (CVSS 10/10). The flaw can enable arbitrary code execution, making it a high-impact risk for systems running Adobe ColdFusion versions patched by Adobe in ColdFusion 2025 update 10 and ColdFusion 2023 update 21. This matters because exploitation began within two hours of disclosure, leaving little time for organizations to validate and deploy mitigations before attackers moved.

A long-standing Linux kernel issue dubbed Januscape allows attackers inside a guest virtual machine to escape into the host, leading to arbitrary code execution or host crashes. The problem, tracked as CVE-2026-53359, is a use-after-free bug in KVM/x86 shadow MMU emulation and has been present for about 16 years before a June 2026 fix (commit 81ccda30b4e8). This matters for multi-tenant cloud environments running KVM, where exploitation can compromise other guests or cause denial of service.

Active exploitation attempts have been observed against Adobe ColdFusion shortly after patches were released on June 30, 2026. The targeted issue is CVE-2026-48282, a path traversal vulnerability that can be abused by remote, unauthenticated attackers to upload a malicious file and trigger arbitrary code execution via a web-accessible location. This matters because attackers can leverage the Remote Development Services (RDS) feature when it is enabled and access is not properly restricted, so organizations running affected ColdFusion versions should urgently update and hunt for suspicious artifacts.

Cisco Talos reports that the China-nexus APT actor UAT-7810 continues expanding LapDogs Operational Relay Box (ORB) networks, adding new malware capabilities to support follow-on attacks on high-value targets. The actor is developing an updated version of SHORTLEASH tracked as LONGLEASH and has introduced additional backdoors including DOGLEASH and the Java-based JARLEASH for remote administration. Talos also observed UAT-7810 exploiting unpatched Ruckus wireless routers using CVE-2020-22653, CVE-2020-22658, and CVE-2023-25717, underscoring the risk of ORB-based persistence and device compromise when these vulnerabilities remain unremediated.

A newly reported Linux kernel issue, tracked as CVE-2026-53359 and dubbed Januscape, can be exploited by a guest VM to corrupt host state and gain execution on the underlying system via the KVM shadow MMU. This matters for multi-tenant x86 cloud environments—especially those with nested virtualization—because successful exploitation can lead to full host compromise, denial of service, or root-level code execution. Researchers note the flaw was present for 16 years and has been patched in the mainline kernel as of June 19.

A suspected China-aligned threat group has been observed targeting Roundcube webmail used by physics and engineering departments at U.S. and Canadian universities, enabling credential theft and persistent access. The campaign chains exploitation of CVE-2024-42009 (XSS) and then leverages CVE-2025-49113 for remote code execution, with payloads such as VShell for post-compromise activity; Proofpoint tracks the activity as UNKMassTraction. This matters because opening a crafted email in the Roundcube client can trigger access to the mail server, turning email delivery into a practical path to compromise.

BeyondTrust has disclosed critical issues in its Remote Support (RS) and Privileged Remote Access (PRA) products that could let attackers bypass authentication and reach protected appliances. The company cites CVE-2026-40138 (RS and PRA versions 25.3.2 or earlier) and CVE-2026-40139, where improper handling of RS authentication requests could allow unauthenticated remote attackers to gain unauthorized access. BeyondTrust also released fixes for CVE-2026-40140 and CVE-2026-40141 affecting unpatched RS and PRA instances, which can lead to denial-of-service or unintended access to restricted resources, making patching urgent.

Citrix disclosed CVE-2026-8451, a memory overread issue in NetScaler ADC and NetScaler Gateway devices configured as a SAML identity provider (IDP), with a CVSS score of 8.8. Researchers and security vendors report that threat actors are actively scanning for and using a proof-of-concept-style exploit, potentially leaking sensitive information and enabling further compromise (including privilege escalation and lateral movement). Organizations using affected NetScaler systems should prioritize applying the fixed versions and reviewing SAML IDP activity for suspicious events.

Check Point reports that the Iran-linked threat cluster “Cavern Manticore” is using a previously undocumented modular command-and-control framework called Cavern (aka Cav3rn) to target Israeli organizations, with IT service providers and government entities among the main focuses. The activity leverages SysAid software update functionality to trigger DLL side-loading and then delivers additional payload modules via the Cavern agent, enabling tailored reconnaissance, data theft, and lateral movement while complicating analysis through mixed compilation formats. Separately, CVE-2025-52691, CVE-2025-68613, CVE-2025-9316, CVE-2025-34291, and CVE-2025-54068 are referenced as part of broader exploitation activity tied to the same state-linked operations.

A use-after-free bug in Linux’s KVM shadow MMU can be triggered from a guest VM to corrupt host kernel shadow-page state, with a public proof-of-concept able to panic the host. The issue, tracked as CVE-2026-53359 (“Januscape”), affects KVM on Intel and AMD x86 systems and matters because a malicious tenant could potentially crash the host and, in reported research, even reach host code execution under the right conditions (root in the guest and nested virtualization enabled). Fixes have been merged as commit 81ccda30b4e8 and stable releases include kernel versions such as 7.1.3, 6.18.38, 6.12.95, 6.6.144, 6.1.177, 5.15.211, and 5.10.260.

Researchers reported “JadePuffer,” an LLM-driven ransomware operation attributed to an “agentic” threat actor that carried out extortion with no human operator during key stages. The attack began by exploiting CVE-2025-3248 in an Internet-facing Langflow deployment, then moved to compromise a production database server running a MySQL database and an Alibaba Nacos configuration service to enumerate, exfiltrate selected data, delete it, and demand payment. The incident matters because it demonstrates a full, automated ransomware lifecycle that can adapt in real time—highlighting the need to patch Langflow quickly and avoid exposing code-execution endpoints to the Internet.

Threat actors have been seen probing recently fixed Gitea Docker images for a critical authentication weakness tracked as CVE-2026-20896 (CVSS 9.8). The issue occurs when the Docker image default trusts all source IPs for the X-WEBAUTH-USER header, which can allow unauthenticated attackers to gain elevated access if reverse-proxy authentication is enabled and the allowlist is not restricted. This affects Gitea Docker image versions before and including 1.26.2, with the fix provided in version 1.26.3.

Attackers are exploiting a max-severity Adobe ColdFusion vulnerability, CVE-2026-48282, with KEVIntel reporting in-the-wild use shortly after public details emerged. The issue affects ColdFusion versions 2025.9, 2023.20, and earlier and can enable remote code execution without needing attacker privileges, making unpatched systems a priority risk. Adobe has released fixes and urged administrators to apply updates immediately, with Canadian and other monitoring efforts also warning defenders to remediate.

A proof-of-concept exploit has been released for the Linux “Bad Epoll” issue, which is a race-condition use-after-free in the epoll subsystem. The vulnerability is tracked as CVE-2026-46242 and affects Linux kernels 6.4+ (including confirmation on Pixel 10 devices using kernel 6.6), where attackers may achieve kernel memory leakage and root privileges. Since this can be used to bypass privilege boundaries, it matters for desktops, servers, and Android systems that run affected kernels.

Check Point Research reports multiple incidents this week, including ransomware cases impacting River Bank & Trust, Indra Group, Nidec Chaun Choung Technology, and a major Aflac Japan breach affecting nearly 4.4 million customers. The update also covers AI-driven threats such as LLM-generated ransomware that abuses Chrome’s File System Access API and AI domain “phantom squatting” used for phishing. On the vulnerability side, critical issues including CVE-2026-46817 (Oracle E-Business Suite), CVE-2026-46242 (Linux kernel Bad Epoll), CVE-2026-8451 (Citrix NetScaler), and CVE-2026-8037 (Progress Kemp LoadMaster) are emphasized due to exploitation risk and rapid weaponization.

Cisco Talos’ ClamAV released security patch versions 1.5.3 and 1.4.5 to address seven vulnerabilities affecting its executable and archive parsing logic, plus quarantine handling hardening. The fixes cover CVE-2026-20213, CVE-2026-20214, CVE-2026-20217, CVE-2026-20215, CVE-2026-20243, CVE-2026-20216, and CVE-2026-20244, which can lead to memory corruption, crashes, scanner bypass conditions, or unstable behavior when processing crafted inputs. These updates also matter because ClamAV is commonly used in mail gateways and endpoint/file scanning workflows where attackers may leverage malformed files to disrupt or evade scanning.

Attackers are actively exploiting CVE-2026-48558 in SimpleHelp RMM, using the authentication-bypass weakness to deploy the Djinn Stealer malware across Windows, macOS, and Linux systems. In parallel, threat intelligence reports exploitation attempts against CVE-2026-46817 affecting Oracle E-Business Suite Payments, with the Oracle Payments module targeted via weekend activity. These incidents matter because they show how quickly patched (or still-fresh) enterprise flaws can be weaponized, increasing the urgency of remediation and monitoring for both vendors.

Researchers report a ransomware case, JadePuffer, in which an autonomous LLM agent handled reconnaissance through credential theft, lateral movement, persistence, privilege escalation, and finally encryption. Initial access was achieved by exploiting CVE-2025-3248 in Langflow, with later impact on Alibaba Nacos also involving CVE-2021-29441 for an authentication bypass that enables rogue admin creation. This matters because AI-driven “agentic” malware could reduce the expertise needed to run full intrusion chains while also changing detection requirements for defenders.

runZero disclosed seven vulnerabilities in FatFs, a filesystem library used to access FAT and exFAT volumes on removable storage. The issues are tracked as CVE-2026-6682, CVE-2026-6683, CVE-2026-6684, CVE-2026-6685, CVE-2026-6686, CVE-2026-6687, and CVE-2026-6688, including integer overflows that can lead to memory corruption and possible code execution when a device mounts attacker-controlled or malformed storage/update images. This matters because FatFs is bundled into many embedded platforms and firmware (e.g., Espressif ESP-IDF, STMicroelectronics STM32Cube, Zephyr, MicroPython, ArduPilot, RT-Thread, Mbed, Samsung TizenRT, and the SWUpdate updater), expanding potential impact across consumer IoT, industrial systems, drones, and crypto wallets.

A newly disclosed Linux kernel issue called “Bad Epoll” (CVE-2026-46242) enables unprivileged local users to gain root access. It impacts Linux systems and Android devices that run affected kernel builds, because an epoll use-after-free race can corrupt kernel memory and turn a normal account into full control. Fixes are available via upstream (commit a6dc643c69311677c574a0f17a3f4d66a5f3744b) and distribution backports, and timing makes the bug hard but the published proof of concept reliably achieves escalation on tested setups.

Researchers uncovered the modular malware framework Avalon, which uses a multi-stage phishing chain to bypass security controls and ultimately deploy a ransomware component internally tracked as CrownX. Avalon is designed to harvest credentials and browser data, establish remote access and lateral movement, suppress forensic visibility (including ETW interference), and then encrypt files while disrupting recovery using shadow copy removal. The same report also highlights a JADEPUFFER agentic ransomware campaign that gained access via CVE-2025-3248 affecting a Langflow instance, underscoring how readily AI-assisted tooling can accelerate ransomware development and attack execution.

Security researchers attribute a campaign by the threat actor Armored Likho to attacks against government organizations and the electric power sector in Russia, Brazil, and Kazakhstan. The activity includes spear-phishing and malware that deploys BusySnake Stealer, a Python-based information stealer for Windows that can exfiltrate browser data (including cookies), screenshots, clipboard contents, and other sensitive material. The intrusion chain also leverages a Windows shortcut-related flaw, tracked as CVE-2025-9491 (aka ZDI-CAN-25373) and patched by Microsoft in November 2025, enabling remote code execution when LNK files are handled improperly.

A threat actor used agentic LLM-driven automation to carry out a ransomware operation after compromising internet-exposed Langflow via CVE-2025-3248, a critical missing authentication issue that enables arbitrary Python code execution on the host. The intruder tracked as JadePuffer then used AI-assisted reconnaissance and credential harvesting, before targeting a production MySQL and Alibaba Nacos setup, including abuse of CVE-2021-29441 and Nacos weaknesses tied to a default JWT signing key. This matters because it demonstrates how capable models can lower the barrier for large-scale, hands-off malicious actions against neglected and improperly hardened application and configuration infrastructure.

Cato Networks reports two critical vulnerabilities in the AI code editor Cursor that could enable remote code execution on the host operating system by escaping the IDE’s sandbox. The issues are tracked as CVE-2026-50548 and CVE-2026-50549 (CVSS 9.8), collectively referred to as DuneSlide, and they can be triggered through crafted prompts that abuse Cursor’s automatic terminal command execution and weaknesses in file path handling involving symbolic links. This matters because a malicious payload could move from an injected IDE action to unrestricted OS-level code execution.

Threat actors linked to the Anubis ransomware operation have been seen abusing Citrix Bleed 2 to gain initial access, specifically via CVE-2025-5777 affecting Citrix NetScaler ADC and Gateway (CVSS 9.3). The same reporting highlights their use of remote access tools, credential theft, RDP/PsExec for lateral movement, and follow-on data theft before deploying ransomware. In related ransomware activity, Kaspersky described The Gentlemen RaaS using a Go-based backdoor and weaponizing a BYOVD scenario involving the ktapi.sys driver for kernel-level abuse, while Sophos reported a VECT and TeamPCP supply-chain partnership that enables ransomware deployment across victims of Trivy and LiteLLM supply chain attacks. These developments matter because they combine high-impact exploitation and credential compromise with scalable “industrialized” deployment tactics that lower the barrier for attackers.

Cisco Talos highlights ARToken, a phishing-as-a-service operator panel for Microsoft 365 focused on device code phishing, Primary Refresh Token (PRT) persistence, email access/BEC operations, and SharePoint exfiltration—capabilities exposed through 80+ API endpoints. Separately, Talos notes that a recently reported authentication bypass in SimpleHelp remote monitoring and management (RMM), tracked as CVE-2026-48558, has been exploited in the wild to obtain a fully authenticated technician session for malware delivery. These findings matter because they indicate both increasing maturity in credential/theft-driven phishing tooling and active exploitation of authentication weaknesses.

Adobe has released APSB26-68 addressing a large set of security issues in Adobe ColdFusion, impacting ColdFusion 2025 (Update 9 and below) and ColdFusion 2023 (Update 20 and below). The bulletin includes fixes for multiple remote-impact vulnerabilities such as CVE-2026-48276, CVE-2026-48277, CVE-2026-48281, CVE-2026-48316, CVE-2026-48282, CVE-2026-48283, CVE-2026-48313, CVE-2026-48315, CVE-2026-48307, CVE-2026-48285, and CVE-2026-48314. These issues matter because they can enable arbitrary file read/write and privilege escalation pathways—potentially escalating to remote code execution when vulnerable features are reachable and misconfigured.

Security coverage this week describes multiple weaknesses that let attackers slip through “allowed” paths, including AI compute hijacking via misconfigured Ollama model servers used as the reasoning engine in offensive tooling. Apple’s Hide My Email service has a reported flaw that can reveal users’ real addresses, while research also details an attack chain against Claude Cowork on Windows that can lead to root-level execution in its sandbox and potential data exfiltration. Separately, CISA confirmed Microsoft Defender’s BlueHammer (CVE-2026-33825) was exploited in ransomware attacks, underscoring how quickly real-world impact can follow once patching lags.

Threat actors reportedly started attacking affected Citrix NetScaler ADC and NetScaler Gateways almost immediately after public disclosure, with exploitation observed in under 24 hours. The issue, tracked as CVE-2026-8451 (CVSS 8.8), is an out-of-bounds read in the NetScaler XML parser that can disclose memory contents via the NSCTASS cookie when appliances are configured as SAML IDP; no authentication is required for successful exploitation. This matters because the rapid weaponization suggests exposed internet-facing systems could be targeted quickly, so organizations should prioritize patching or mitigate by disabling SAML IDP and checking relevant logs and cookies.

Cisco has confirmed that attackers are actively exploiting a Unified Communications Manager (Unified CM) vulnerability patched in early June: CVE-2026-20230. The issue is a remote, low-complexity server-side request forgery (SSRF) that can be abused by attackers without privileges via crafted HTTP requests, potentially leading to file-related impacts on affected systems. This matters because it indicates real-world compromise is underway, and Cisco recommends upgrading to fixed releases and using mitigations like disabling the vulnerable WebDialer service when updates can’t be applied immediately.

CISA says attackers are now actively using a high-severity remote code execution weakness in Microsoft SharePoint, tracked as CVE-2026-45659. The issue is caused by unsafe deserialization of untrusted data and can let authenticated attackers with minimal permissions run arbitrary code on unpatched SharePoint servers via low-complexity, network-based attacks. Microsoft has released fixes for SharePoint Enterprise Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition, and CISA has added CVE-2026-45659 to its Known Exploited Vulnerabilities (KEV) catalog, requiring federal agencies to patch by the applicable deadline.

Cisco reports that CVE-2026-20230 has been exploited in the wild in Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition (Unified CM SME). The issue stems from improper validation of certain HTTP requests and could enable SSRF-style activity that may ultimately allow arbitrary file drops and potential root access. This matters because only devices with the WebDialer service enabled are affected (disabled by default), and Cisco advises upgrading to fixed releases to remediate.

CISA says attackers are already exploiting a high-severity Microsoft SharePoint Server vulnerability that stems from unsafe deserialization of untrusted data (CVE-2026-45659, CVSS 8.8). The issue can allow an authenticated attacker with at least Site Member permissions to run arbitrary code on affected SharePoint servers, which makes it particularly dangerous and easy to repeat in practice. SharePoint Server Subscription Edition, SharePoint Server 2019, SharePoint Server 2016, and SharePoint Enterprise Server 2016 are affected, and CISA added CVE-2026-45659 to its KEV catalog with an expectation that federal agencies patch within three days.

Security firm Sysdig reports what it believes is the first ransomware campaign end-to-end automated by an AI agent, operated by “JADEPUFFER.” The intrusion began with CVE-2025-3248 in Langflow (patched in Langflow 1.3.0), a missing-authentication issue that allows unauthenticated remote Python code execution—enabling rapid credential theft, lateral movement, and database encryption and deletion. The attack then leveraged additional weaknesses including CVE-2021-29441 to take over Nacos, underscoring how unpatched internet-exposed services can be chained into fully automated extortion.