1. Executive summary Progress Software has disclosed multiple high-severity vulnerabilities — including OS command injection, incorrect authorization, and missing authorization flaws — across LoadMaster, ECS Connection Manager,
1. Executive summary CVE-2026-16812 is a CVSS 10.0 CRITICAL OS command injection vulnerability (CWE-78) in Arista VeloCloud Orchestrator (VCO) On-Prem. The
1. Executive summary MedusaHVNC is a remote access trojan (RAT) offered as malware-as-a-service (MaaS) and promoted via a dedicated website and Telegram channel.
1. Executive summary A proof-of-concept (PoC) exploit and technical details for CVE-2026-54121 (dubbed "Certighost") were publicly released on July 24,
1. Executive summary AWS has launched an AI-powered DevOps Agent feature for troubleshooting AWS Network Firewall incidents. The agent automates log inspection, firewall rule review,
1. Executive summary On 2026-07-26, the actor "Global Secret Group" published a claim on its leak site naming Hinduja Tech — an India-
1. Executive summary On 2026-07-26, the actor "Global Secret Group" listed Portman Finance Group (UK, ~£300M revenue, 1,000–5,000 employees)
1. Executive summary On 2026-07-26, the actor "ExfilSquad" publicly claimed a data-theft/extortion operation against the UK Department for Education (education.
1. Executive summary On 2026-07-26, the actor "ExfilSquad" publicly claimed a ransomware attack against Newcastle University (GB), posting on their leak site
1. Executive summary On 26 July 2026, the actor "ExfilSquad" publicly claimed a ransomware attack against the Police National Legal Database (PNLD), a UK
1. Executive summary On 25 July 2026, the Qilin ransomware group listed GURR Abdichtungstechnik GmbH (Germany) as a victim on its leak site. Attribution to the
1. Executive summary On 25 July 2026, the ransomware actor "nova" publicly claimed a compromise of SistNet (sistnet.it), a division of Sistemi Tre