Comparing 7 July 2026 with the previous day 6 July 2026.
Prior BeyondTrust flaws have been actively exploited for web shell and backdoor deployment, justifying urgent patch prioritization for these critical authentication bypass vulnerabilities.
ToddyCat APT exploits OAuth token hijacking against Gmail and targets corporate email; spyware remains second-most common threat category in ICS environments.
The alert mentions critical flaws in BeyondTrust software but provides no details on CVE numbers, attack scenarios, or active exploitation , the article appears incomplete or is a preview lacking substantive technical information.
A use-after-free vulnerability in Adobe Acrobat Reader DC enables remote code execution upon user interaction with CVSS 7.8; no public exploitation known, but timely patching required.
A use-after-free vulnerability in Adobe Acrobat Reader DC enables remote code execution when a user interacts with malicious documents or web pages.
The BSI warns of multiple unspecified vulnerabilities in Chrome and Edge; without CVE numbers, precise risk assessment is currently not possible.
BSI warning on critical vulnerabilities in Ubiquiti UniFi OS with RCE and privilege escalation potential requires prompt patch review in network infrastructure.
BSI warns of multiple unspecified vulnerabilities in 7-Zip with code execution potential; specific CVE numbers and technical details are missing from this advisory.
A long-overlooked KVM vulnerability allows attackers within virtual machines to escape their isolated environment and gain kernel privileges on the host system.
The BSI warns of multiple OpenSSL vulnerabilities without specific CVE references in this notice; this indicates a summary or update of multiple already-known vulnerabilities.
The campaign abuses legitimate Microsoft authentication mechanisms instead of fake login pages, combining collaboration-themed lures with OAuth Device-Flow exploitation to bypass MFA and gain persistent account access.
Januscape is the first known KVM vulnerability that can be exploited on both Intel and AMD architectures, enabling direct guest-to-host escape.
BSI advisory on multiple Linux Kernel DoS vulnerabilities without specific CVE references or exploitation details; urgency and affected versions remain unclear.
No changes in this category.
No changes in this category.
The PolinRider campaign demonstrates a coordinated North Korean supply-chain attack model that has compromised over 100 legitimate open-source packages and directly endangers developer environments and CI/CD credentials.
Chinese state-sponsored actors conducted an AI-assisted espionage campaign against approximately 30 organizations in September 2025, with the AI system autonomously executing 80,90% of tactical operations and reducing human decision-making to only 4,6 points per campaign.
North Korea-aligned PolinRider campaign distributes 100+ malicious packages across open-source registries and Chrome extensions; targets developer supply chains critical to manufacturing environments (CAD, ERP integrations).
A 16-year-old use-after-free vulnerability in the Linux KVM hypervisor enables the first reliable guest-to-host escape with full code execution on both Intel and AMD x86 systems.
BSI advisory on multiple Windows/Windows Server vulnerabilities without specific CVE listing indicates current patch-cycle warning or aggregation of concurrent exposures.
BSI warns of multiple critical vulnerabilities in widely deployed PDF software enabling remote code execution and requiring immediate patching.
A generic BSI warning about multiple Edge vulnerabilities without specific CVE numbers, indicating a routine update-cycle advisory.
BSI warns of multiple vulnerabilities in Adobe Creative Cloud applications without specific CVE numbers, suggesting an aggregated patch advisory; exploitation requires user action (malicious files).
The release of PoC code for a Linux kernel vulnerability enabling local root access significantly increases exploitation risk and requires urgent patching on affected Ubuntu systems.
EtherRAT is being distributed via fake IT support calls through Microsoft Teams,a social engineering campaign that exploits trusted-contact impersonation to install remote access trojans on Windows systems.
BSI warning on multiple unspecified Linux kernel vulnerabilities without CVE references; update details required for concrete risk assessment.