📰 Dev.to · BeyondMachines

Iranian-affiliated hackers linked to the IRGC disabled a small UK power plant for four days in July 2026 by exploiting internet-exposed industrial controllers.

Elementor Pro versions before 4.2.2 contain a critical logic flaw in the file upload module that allows unauthenticated attackers to bypass extension filters an

UMC Utrecht suffered a data breach affecting 5,000 guesthouse visitors after an unauthorized actor compromised its third-party booking provider, VIPS PMS. The s

Paperclip patched three critical vulnerabilities, including a CVSS 10.0 RCE flaw, that allow attackers to take over AI agent servers and local development machi

CISA reports active exploitation of an Apache Tomcat vulnerability (CVE-2026-34486) to its KEV catalog after Chinese threat actors exploited a fail-open logic e

IBM Langflow OSS injection vulnerability (CVE-2026-9198)is actively exploited. CISA has added the flaw to its Known Exploited Vulnerabilities catalog and requir

A vulnerability chain in Azure Cosmos DB's Gremlin API allowed attackers to escape sandboxes, steal a platform-wide master key, and gain full read/write access

Amgen Inc. suffered a material data breach in July 2026 after attackers exfiltrated patient health information and proprietary corporate data from third-party c

Love, Bonito reports a website vulnerability on July 26, 2024, that allowed unauthorized access to customer names, contact details, and partial payment informat

Kootenai County disclosed a ransomware attack that compromised residents’ personal information, including Social Security numbers, financial details, and finger

Adobe patched a high-severity vulnerability dubbed HermeticReader (CVE-2026-48294) in its Acrobat Chrome extension that allowed malicious websites to silently s

Chick-fil-A suffered a credential stuffing attack in June 2026 where unauthorized parties used stolen third-party credentials to access loyalty accounts and exp

Siemens patched a maximum-severity authentication bypass vulnerability CVE-2026-56451 in its Opcenter X manufacturing platform that allowed unauthenticated atta

Microsoft SharePoint on-premises servers are under active attack following the release of exploit code for CVE-2026-50522. Attackers are stealing machine keys t

During the week of July 13–20, 2026, there were 21 security advisories (including actively exploited flaws in SharePoint, Fortinet, and SonicWall, plus Microsof

Archon OS versions up to 0.3.11 are vulnerable to a web-to-client attack (CVE-2025-69443) that allows malicious websites to steal AI API keys and run commands o

Blank Rome LLP disclosed a data breach affecting over 57,000 individuals after a threat actor used social engineering to trick an attorney into uploading sensit

JoomliC fixed a critical remote code execution vulnerability in the iCagenda Joomla extension that attackers are actively using to compromise servers. The flaw

Binarly researchers discovered six vulnerabilities in the U-Boot bootloader's FIT signature verification process that allow for arbitrary code execution and den

Ireland's Health Service Executive (HSE) suspended the issuance of physical medical and insurance cards after a cyberattack on an external printing provider.

CISA has warned of active exploitation of two critical RCE vulnerabilities in Joomla's SP Page Builder and Page Builder CK extensions. Attackers are using these

CISA and Sysdig researchers report active exploitation of two critical Langflow vulnerabilities, including a 9.9-rated IDOR and a 9.3-rated RCE, used to steal A

Pro-Kurdish hacktivists defaced two U.S. Army websites by exploiting suspected WordPress or plugin vulnerabilities to modify 404 error pages with political mess

OPNsense released critical security updates to fix a root remote code execution vulnerability (CVE-2026-57155) in its GeoIP alias importer. The update also patc