Security Feed

1. Executive summary Progress Software has confirmed that a high-severity zero-day vulnerability in ShareFile Storage Zones Controller (SZC) versions 5.x and

1. Executive summary On 15 July 2026, the ransomware operator "AiLock" publicly claimed compromise of Ferrovial, a global infrastructure and mobility operator

1. Executive summary Kaspersky has published detailed analysis of "OkoBot," a sophisticated, multi-stage malware framework active since at least April 2025

1. Executive summary Four npm packages in the @asyncapi namespace (@asyncapi/generator@3.3.1, @asyncapi/generator-helpers@1.1.1, @asyncapi/generator-components@

1. Executive summary CrashStealer is a new macOS infostealer, discovered by Jamf Threat Labs and publicly reported in July 2026, that masquerades as Apple&

1. Executive summary Spanish National Police, supported by Interpol and Europol, dismantled a cybercrime and money-laundering organisation that generated approximately €140 million ($160

1. Executive summary Microsoft's July 2026 Patch Tuesday addresses a record 622 vulnerabilities across its product ecosystem, including 57 rated critical. Two

1. Executive summary SonicWall has disclosed CVE-2026-15410, a post-authentication code injection vulnerability (CVSS 7.2 HIGH, CWE-94) in the SMA1000

1. Executive summary SonicWall has disclosed and patched CVE-2026-15409, a CVSS 10.0 CRITICAL server-side request forgery (SSRF) vulnerability (CWE-918)

1. Executive summary CVE-2026-56164 is a Missing Authentication for Critical Function vulnerability (CVSS 5.3 MEDIUM) in Microsoft SharePoint Server that allows

1. Executive summary CVE-2026-56155 is an insufficient granularity of access control vulnerability (CWE-1220) in Microsoft Active Directory Federation Services (AD FS)

1. Executive summary On 13 July 2026, the U.S. Treasury Department's Office of Foreign Assets Control (OFAC) sanctioned First VPN Service