China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud

The China-linked threat actor known as Jewelbug has been observed carrying out cyber espionage operations targeting governments and militaries, while simultaneously engaging in cryptocurrency fraud. "Both missions are administered from a single control panel, XG-Web , a browser-centric...

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

Microsoft has disclosed that Storm-1175 , a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain called StormEncryptor. The use of StormEncryptor marks a shift from the adversary's previous use of Medusa ransomware, the Microsoft Threat...

CVE-2026-68228

In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move srcbuf Removal to finishencode During encoder processing, there is a case where the IRQ response could return the buffer back to userspace via v4l2m2mbufdone call. In this time, userspace could que...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: bpf: It is necessary to preserve the id of the register in the synclinked regs function. The synclinked regs function copies the id of knownreg to reg when propagating the bounds of knownreg to reg, using the offset of knownreg...

EUVD-2026-54384

The Meow Gallery WordPress plugin before 5.5.2 does not escape an attachment's alt text before outputting it into an attribute of the link it builds for linked galleries, allowing users with the Author role or above to store a JavaScript payload that executes in the browser of any visitor includi...

CVE-2026-15386

The CVE affects the Meow Gallery WordPress plugin (vulnerable in versions before 5.5.2). The flaw is that the plugin does not escape an attachment’s alt text when it injects it into the URL/link attributes of linked galleries, enabling stored XSS. Attackers with the Author role or higher can stor...

CVE-2026-7753

creationtimestamp| type| source ---|---|--- 2026-08-05 06:36:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hyzljjuhq4ge2 2026-08-06 04:15:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msf6l3vo4x2n 2026-08-06 04:15:09+00:00| seen|...

CVE-2026-70478

creationtimestamp| type| source ---|---|--- 2026-08-04 21:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msbwlb3shi23 2026-08-05 03:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/117040665415933315 2026-08-05 03:00:27+00:00| seen|...

CVE-2026-68075

creationtimestamp| type| source ---|---|--- 2026-08-04 19:18:41+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/4gb3tsgdocdqi...

WhatsApp account takeover scam asks you to “vote for my friend”

A scam is spreading through WhatsApp with the goal of taking over victims' accounts entirely. It starts with a message that feels harmless and familiar. Someone—often a contact whose account has already been compromised—asks you to support a friend or relative of theirs by voting in an online...

CVE-2026-46713

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, contain a vulnerability in the JSON-LD signature validation and compaction process that allows spoofed activities to be accepted as valid. This issue has been fixed in version 2026.5.4...

CVE-2026-47746

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, are vulnerable to timing attacks during JSON-LD signature validation and the compaction process. Because the JSON-LD parsing context is not shared between signature verification and...

CVE-2026-47746 Misskey: JSON-LD signature validation + compaction is vulnerable to timing attacks

Misskey is an open source, federated social media platform. Versions 12.37.0 and later, but prior to 2026.5.4, are vulnerable to timing attacks during JSON-LD signature validation and the compaction process. Because the JSON-LD parsing context is not shared between signature verification and...

CVE-2025-69938

creationtimestamp| type| source ---|---|--- 2026-07-31 15:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrxcmapwft2y...

SUSE CVE-2026-55229

Gotenberg is a Docker-powered stateless API for PDF files. Prior to 8.34.0, Gotenberg's /forms/libreoffice/convert endpoint allows a specially crafted document to cause LibreOffice to automatically retrieve external HTTPS resources and local file resources during document conversion, enabling bli...

CVE-2026-64425

A flaw was found in the Linux kernel's iouring subsystem. This vulnerability allows linked work items to continue executing even after a system exit process has begun. This can lead to a denial of service by prolonging the exit sequence and potentially consuming system resources unexpectedly...

CVE-2026-51290

creationtimestamp| type| source ---|---|--- 2026-07-29 08:53:33+00:00| seen| https://gist.github.com/programmervuln/b9336a5d90ed38222932b37190e963e9 2026-07-30 19:54:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrv7rn5hx62r...

CVE-2026-11598

creationtimestamp| type| source ---|---|--- 2026-07-28 11:37:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrpd4byovt22...

CVE-2026-14490

creationtimestamp| type| source ---|---|--- 2026-07-28 08:09:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mroxhfbgzj24...

SUSE CVE-2026-64425

In the Linux kernel, the following vulnerability has been resolved: iouring/io-wq: re-check IOWQBITEXIT for each linked work item commit 10dc95939817 "iouring/io-wq: check IOWQBITEXIT inside work run loop" fixed the obvious case where ioworkerhandlework took one exit-bit snapshot before draining...