Security update for google-osconfig-agent (important)

openSUSE security update: security update for google-osconfig-agent ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21210-1 Rating: important References: bsc1210938 bsc1251453 bsc1251704 bsc1260264 bsc1262926 bsc1264923 bsc1265762 bsc1266171...

FBI Seizes NetNut Proxy Platform, Popa Botnet

The Federal Bureau of Investigation FBI said today it worked with industry partners to seize hundreds of domains associated with NetNut , a sprawling residential proxy service operated by the publicly-traded Israeli company Alarum TechnologiesNASDAQ: ALAR. The action comes roughly two weeks after...

Google Disrupts NetNut Residential Proxy Network Spanning 2 Million Home Devices

Google has significantly degraded NetNut , one of the biggest networks that turns home devices into rented relays for other people's traffic. Working with the FBI, Lumen, and others, Google's Threat Intelligence Group GTIG said this week it had reduced the network's pool of usable devices by...

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that's designed to gain surreptitious access to a victim's email correspondence via the Google API. "In this campaign, the attackers focused their attention on corporate email communications hosted on Gmail,...

CVE-2026-57670

Unauthenticated Cross Site Scripting XSS in Google Maps CP = 1.2.5 versions...

WordPress Reviews Widgets for Google, TripAdvisor, Yelp & Recommendations plugin <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Ilkeggs in WordPress Plugin Trust.Reviews versions = 2.7.3...

CVE-2026-57670

Technical details (affected plugin version specifics, root cause, exploit steps, and remediation) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-57670 WordPress Google Maps CP plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Google Maps CP = 1.2.5 versions...

CVE-2026-13251

The Perfmatters plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.4 via the 's' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information...

CVE-2026-13251

The CVE-2026-13251 entry concerns the WordPress Perfmatters plugin (

CVE-2026-13251

The Perfmatters plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.4 via the 's' parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information...

CVE-2026-14423

creationtimestamp| type| source ---|---|--- 2026-07-02 08:27:08+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/116849916390659944 2026-07-02 10:30:29+00:00| seen|...

CVE-2026-14422

creationtimestamp| type| source ---|---|--- 2026-07-02 08:27:02+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-03 11:54:48+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpqifqjzyz2f 2026-07-03 11:54:48+00:00| seen|...

CVE-2026-14421

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:49+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 15:38:49+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoehf5kgm27 2026-07-02 16:53:08+00:00| seen|...

CVE-2026-14418

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:39+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 15:38:28+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoegra3kx2r 2026-07-02 15:38:29+00:00| seen|...

CVE-2026-14415

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:29+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-03 06:38:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppwq4zxbu2i 2026-07-03 12:04:49+00:00| seen|...

CVE-2026-14414

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:26+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:58:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpoiv2fzzw2y 2026-07-03 06:38:09+00:00| seen|...

CVE-2026-14413

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:23+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:29:06+00:00| seen| https://bsky.app/profile/qiancx.bsky.social/post/3mpohbc7zvi23 2026-07-02 16:29:07+00:00| seen|...

CVE-2026-14412

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:05+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:28:46+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpohapohdu2y 2026-07-03 19:57:15+00:00| seen|...

CVE-2026-14411

creationtimestamp| type| source ---|---|--- 2026-07-02 08:26:01+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260702 2026-07-02 16:30:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpohe7hqvs2k 2026-07-02 21:26:06+00:00| seen|...