CVE ID :CVE-2026-57677 Published : July 2, 2026, 11:15 a.m. | 6 hours, 29 minutes ago Description :Unauthenticated PHP Object Injection in Novalnet Payment Gateway for WooCommerce Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected

Learn More

CISA Adds CVE-2026-45659 SharePoint Vulnerability to KEV The U.S. Cybersecurity and Infrastructure Security Agency (Cybersecurity and Infrastructure Security Agency) has added a critical Microsoft SharePoint vulnerability to its Known Exploited Vulnerabilit … Read more Published Date: Jul 02, 2026 (2 hours,

Learn MoreCISA Adds CVE-2026-45659 SharePoint Vulnerability to KEV

‘Citrix NetScaler-lek dag na bekendmaking misbruikt bij aanvallen’ Een nieuwe kwetsbaarheid in Citrix NetScaler ADC en Gateway waarvoor op 30 juni een beveiligingsupdate verscheen, is een dag na de bekendmaking misbruikt bij aanvallen, zo meldt cybersecuritybedrijf L … Read more

Learn More

ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories This week’s security news is mostly about weak spots.Browsers, bots, sandboxes, AI systems, and email flows all show the same problem in different ways. Everything looks normal until

Learn MoreThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories

Vulnerabilities in OpenIDC liboauth2 software Vulnerabilities in OpenIDC liboauth2 software CVE ID CVE-2026-54430 Publication date 02 July 2026 Vendor OpenIDC Product liboauth2 Vulnerable versions All before 2.3.0 Vulnerability type (CWE) Server- … Read more Published Date: Jul 02, 2026 (7 hours,

Learn MoreVulnerabilities in OpenIDC liboauth2 software

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER

Learn MoreAI Agent Exploits Langflow RCE to Automate Database Ransomware Attack

FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx ransomware operations, indicating that the verified, stolen credentials were intended for follow-o … Read more Published Date:

Learn MoreFortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations

Microsoft SharePoint-servers actief aangevallen via recent beveiligingslek Een kwetsbaarheid in Microsoft SharePoint waardoor remote code execution (RCE) mogelijk is wordt actief misbruikt bij aanvallen, zo waarschuwt het Amerikaanse cyberagentschap CISA. Microsoft kwam tijd … Read more Published Date: Jul 02,

Learn MoreMicrosoft SharePoint-servers actief aangevallen via recent beveiligingslek

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC)

Learn MoreNew ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, cit … Read more Published

Learn MoreSharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation