Comparing 28 June 2026 with the previous day 27 June 2026.
The vulnerability allows attackers to bypass the Windows Mark-of-the-Web security boundary by using specially crafted RAR5 archives with Zone.Identifier stream entries to evade 7-Zip's guard mechanism.
No changes in this category.
No changes in this category.
Russian intelligence services are conducting a targeted campaign using fake SMS messages to steal credentials from Ukrainian and European government officials, military personnel, and activists , a strategic threat pattern for DACH organizations in government and critical infrastructure sectors.
Russian intelligence services are expanding their Signal-targeted phishing campaigns to extract Backup Recovery Keys, enabling access to historical messages and compromising the security of encrypted communications within organizations.
Three of the patched vulnerabilities are already being actively exploited in the wild; Firefox and Thunderbird should be updated immediately.
BSI warns of multiple vulnerabilities in core Microsoft security components; specific CVE numbers and CVSS scores are not disclosed in this alert.