Intelligence · Updated daily

Security Intelligence

AI-analysed threats, vulnerabilities and campaigns. Not just what happened — what it means, who's affected, and what to do about it.

RSS feedCVE index910 entries

Vulnerabilities Malware Campaigns Supply Chain Policy Tools

Page 10 of 37

226–250 of 910

criticalSupply ChainActive

North Korean Sapphire Sleet targets npm ecosystem with Mastra AI supply chain compromise affecting 140+ packages

Microsoft attributed a compromise of over 140 npm packages to North Korean threat actor Sapphire Sleet, leveraging the Mastra AI project as an entry point. This represents a high-impact supply chain attack with potential for widespread malware distribution across the JavaScript ecosystem.

21 June 2026npm registry, Mastra AI, JavaScript applications using affected npm packages

informationalPolicyEmerging

Macron's AI Governance Push: Democratic Nations Seek Coordinated Regulatory Framework

French President Macron has called for wealthy democracies to coordinate on AI regulation and urged the US to share advanced AI capabilities. This represents a significant geopolitical positioning around AI governance standards.

21 June 2026

highVulnerabilityActive

Gravity SMTP Plugin Information Disclosure Enables API Key Extraction at Scale

Attackers are exploiting an unauthenticated information disclosure flaw in Gravity SMTP (CVE-2026-4020) to extract API keys, OAuth tokens, and configuration secrets from roughly 100,000 WordPress installations. The vulnerability remains exploitable despite patches because many sites run unpatched versions.

CVE-2026-4020

21 June 2026Gravity SMTP WordPress Plugin

highMalwareEmerging

Prinz Eugen ransomware employs temporal targeting strategy to evade detection and maximise impact

A new ransomware family named Prinz Eugen prioritises recently modified files for encryption and omits ransom notes, suggesting operators are optimising for speed and evasion. This behaviour pattern indicates a maturing threat actor focused on minimising forensic artefacts.

21 June 2026Generic Windows environments

criticalVulnerabilityActive

Langflow IDOR in Flow Access Control – Authentication Bypass via UUID-Based Direct Object Reference

An Insecure Direct Object Reference (IDOR) vulnerability in Langflow's `/api/v1/responses` endpoint allows authenticated attackers to access and execute flows owned by other users by manipulating flow UUIDs. The vulnerability bypasses user ownership validation when flows are referenced by UUID rather than endpoint name.

CVE-2026-55255

20 June 2026langflow-ai/langflow (v1.9.0 and likely earlier versions)

criticalVulnerabilityActive

Langflow BaseFileComponent Arbitrary File Read Leading to Authentication Bypass and RCE

Path traversal via symlink injection in tar extraction allows unauthenticated file disclosure, JWT secret theft, and remote code execution in Langflow RAG deployments. Organizations must patch immediately as exploit chain is straightforward and affects multiple file-handling components.

CVE-2026-55447

20 June 2026Langflow (langflow/langflow), BaseFileComponent derivatives: DoclingInlineComponent, DoclingRemoteComponent, FileComponent, NvidiaIngestComponent, VideoFileComponent, UnstructuredComponent

criticalVulnerabilityActive

OpenRemote Manager Cross-Tenant IDOR in Bulk Alarm Deletion

OpenRemote Manager's bulk removeAlarms() endpoint fails to validate alarm ownership across tenants, allowing authenticated users to delete alarms in any realm. This breaks multi-tenant isolation and enables destruction of critical safety and security alerts.

20 June 2026openremote/openremote-manager

highCampaignActive

Credential Attack Campaigns Against Security Vendors Expose Risk in Trusted Infrastructure

Large-scale credential attacks are targeting security vendors' devices and infrastructure, putting downstream customers at risk. Unit 42 publishes mitigation guidance as these campaigns remain actively exploited.

20 June 2026Security vendor appliances and management infrastructure

highVulnerabilityActive

Multiple High-Impact Vulnerabilities Surface: Apple Beats Eavesdropping, GCP Config Connector Takeover, and Android TV Botnet Link

SecurityWeek reports several significant security issues including an Apple Beats eavesdropping flaw patch, an unpatched GCP Config Connector vulnerability enabling account takeover, an Android TV botnet linked to an Israeli firm, and closure of the DOT's Delta Air Lines CrowdStrike incident investigation.

20 June 2026Apple Beats, Google Cloud Platform Config Connector, Android TV +2

criticalVulnerabilityEmerging

Permanent A12/A13 SecureROM Vulnerability Reveals Limits of Hardware Security

Researchers have demonstrated a working exploit (usbliter8) that achieves arbitrary code execution in the immutable SecureROM of Apple A12 and A13 chips. Because the affected code is burned into silicon at manufacture, no software update can patch this vulnerability, affecting millions of devices permanently.

20 June 2026Apple A12 chips, Apple A13 chips

highMalwareContained

International takedown of SocGholish botnet disrupts Evil Corp's malware distribution infrastructure

Law enforcement conducted a coordinated international operation against the SocGholish botnet, a distribution mechanism linked to Russia-based cybercrime group Evil Corp. The disruption degrades Evil Corp's ability to deliver secondary payloads and conduct follow-on attacks against compromised networks.

20 June 2026SocGholish botnet victims, organisations compromised by Evil Corp campaigns

highSupply ChainActive

Klue OAuth breach exposes Salesforce integrations as Icarus group emerges with extortion claims

Klue, a market intelligence platform, suffered a breach exposing OAuth tokens that provide access to customers' Salesforce environments. The Icarus extortion group claims responsibility and is threatening to release stolen data.

20 June 2026Klue, Salesforce (customer environments), Klue customers

criticalVulnerabilityActive

Path Traversal in Crawl4AI File Downloads Enables Unauthenticated Arbitrary File Write and RCE

Crawl4AI's download handler fails to sanitize filenames from HTTP headers and page-controlled sources, allowing path traversal to write arbitrary files with attacker content. Pre-authenticated exploitation is possible via the Docker `/crawl` endpoint, enabling remote code execution through shell rc-file overwriting, SSH key injection, or cron job placement.

19 June 2026crawl4ai (async_crawler_strategy.py)

criticalVulnerabilityActive

Crawl4AI Unauthenticated RCE via Chromium Launch-Argument Injection

Crawl4AI's unauthenticated Docker API accepts user-supplied Chromium launch arguments that bypass a denylist-based filter, enabling arbitrary command execution as the container user. The vulnerability class (argument injection + incomplete denylist) is a known anti-pattern that defenders should watch for in containerized applications.

19 June 2026Crawl4AI < 0.9.0

criticalVulnerabilityActive

Gemini MCP Tool: Path Traversal and Command Injection via Unsafe Prompt Parsing

gemini-mcp-tool versions prior to 1.1.6 fail to validate @file prompt directives, enabling arbitrary file exfiltration and OS command injection on Windows. Defenders must patch immediately and audit logs for suspicious @file references.

CVE-2026-0755

19 June 2026gemini-mcp-tool/<1.1.6

highMalwareActive

NetNut Residential Proxy Service Masking Four-Year Android Botnet Operation at Scale

Popa, a multi-year Android botnet compromising millions of consumer TV boxes, has been attributed to NetNut, a residential proxy service operated by publicly-traded Israeli firm Alarum Technologies. The botnet facilitates advertising fraud, account takeovers, and mass data scraping under commercial cover.

19 June 2026Alarum Technologies Ltd (NASDAQ: ALAR), NetNut (residential proxy service), Android TV boxes +1

criticalCampaignActive

REDCap Deployment Crisis: Majority of Exposed Instances Running Outdated Versions Exploited by UNC6508

A significant majority of internet-facing REDCap servers remain unpatched and are actively targeted by China-linked UNC6508 for initial access and backdoor installation. This represents a widespread supply-chain risk affecting research institutions and healthcare organisations globally.

19 June 2026REDCap, Research institutions, Healthcare organisations

criticalVulnerabilityEmerging

NGINX Critical RCE Flaws Expose HTTP/3 Module to Unauthenticated Attack

F5 released patches for two critical remote code execution vulnerabilities in NGINX Open Source, with CVE-2026-42530 being a use-after-free in the HTTP/3 module exploitable by unauthenticated remote attackers. This affects organisations running NGINX with HTTP/3 support enabled.

CVE-2026-42530

19 June 2026NGINX Open Source, F5

highPolicyActive

Bulgarian Export Licensing Enabled Surveillance Tool Sales to Authoritarian Regimes

Human Rights Watch obtained Bulgarian export records showing the government approved surveillance technology exports by firm Circles to law enforcement and intelligence agencies in countries with documented human rights abuse records between 2018 and 2023. This represents a systemic compliance failure in export controls for dual-use surveillance capabilities.

19 June 2026Circles (surveillance firm), Bulgarian government export licensing authority

highMalwareActive

Gentlemen RaaS Escalates EDR Evasion with Dedicated Tooling Arsenal

Gentlemen ransomware-as-a-service is actively developing and maintaining multiple EDR killer tools to help affiliates disable endpoint defences during attacks. This represents a shift towards commoditised EDR bypass capabilities within the RaaS ecosystem.

19 June 2026Organisations using EDR solutions, Enterprise endpoints

criticalVulnerabilityActive

Langflow Unauthenticated File Upload – Disk Exhaustion and Path Disclosure

The `/api/v1/upload/{flow_id}` endpoint in Langflow lacks authentication and input validation, allowing unauthenticated attackers to exhaust server disk space and extract absolute file paths for further reconnaissance.

CVE-2026-55450

18 June 2026Langflow (up to commit 2d67402b1dbaefcbce85a244d4a6cd5e4bda1cfe)

highVulnerabilityActive

XXE via Unprotected Saxon TransformerFactory in HAPI FHIR XsltUtilities

HAPI FHIR's saxonTransform() methods instantiate bare Saxon TransformerFactory instances without XXE protections, enabling XML External Entity injection for file disclosure and SSRF attacks. This bypasses the library's own hardened factory pattern documented in XMLUtil.

CVE-2026-55471

18 June 2026ca.uhn.hapi.fhir:org.hl7.fhir.utilities <= 6.9.8

criticalVulnerabilityActive

Avo Rails Admin: Authorization Bypass in Association Attach Endpoint Enables Privilege Escalation

Missing authorization check on POST endpoint for attaching associated records allows authenticated low-privilege users to bypass UI controls and manipulate authorization-bearing relationships, leading to privilege escalation and cross-tenant data exposure.

CVE-2026-55518

18 June 2026avo-hq/avo

criticalVulnerabilityEmerging

Vertex AI SDK Bucket Squatting Enables Cross-Tenant Remote Code Execution via Pickle Deserialization

A flaw in Google's Vertex AI Python SDK allows attackers to hijack model uploads through bucket squatting and achieve remote code execution across tenant boundaries via unsafe pickle deserialization. This affects any organisation using the SDK to upload models to Google Cloud.

18 June 2026Google Vertex AI Python SDK, Google Cloud Platform

highToolActive

MFA Bypass Techniques Gain Traction: Legacy Authentication Controls Prove Insufficient Against Modern Attack Methods

SecurityWeek is hosting a webinar on attack techniques that circumvent multi-factor authentication and evade detection systems. The event highlights a growing capability gap where conventional MFA implementations no longer provide adequate protection against sophisticated threat actors.

18 June 2026Organisations using legacy MFA implementations