Comparing 28 June 2026 with the previous day 21 June 2026.
The vulnerability allows attackers to bypass the Windows Mark-of-the-Web security boundary by using specially crafted RAR5 archives with Zone.Identifier stream entries to evade 7-Zip's guard mechanism.
No changes in this category.
No changes in this category.
Iranian state actors continue cyber operations despite diplomatic ceasefires, exposing a loophole in international conflict law regarding cyberwarfare under ceasefire conditions.
An authentication bypass in Check Point VPN solutions is actively exploited in the wild, enabling unauthorized access without credentials , BSI alert signals urgent remediation.
APT29 (Cloaked Ursa) and UNC6692 exploit compromised accounts to send phishing links via Microsoft Teams messages redirecting to credential harvesting pages mimicking legitimate Microsoft login portals.
BSI advisory on multiple Chrome vulnerabilities without specific CVE numbers; details not yet published, but code execution and security bypass possible.