Nicholas Robert - The CyberSignal (Page 9)

Flat white line-art of a repository panel and one open padlock beside a calendar, on a deep-teal background — GitLab RCE proof-of-concept after patch.

Vulnerabilities

Depthfirst Publishes GitLab RCE Proof-of-Concept Six Weeks After Patch; Self-Managed 18.11.3 Servers at Risk

A PoC lands six weeks after the GitLab patch — self-managed servers still on 18.11.3 accelerate remediation this weekend.

Flat white line-art of a browser window building a jigsaw file from separate pieces, on a teal background — the SourTrade browser-assembly malvertising research.

Threat Intelligence

Confiant Documents "SourTrade" Malvertising Campaign Assembling Executables in the Victim's Browser

A novel malvertising delivery technique lands from Confiant — defender review for ad-tech and retail-trader-adjacent environments this weekend.

Flat white line-art of one control panel routing several tiles into a central hub, on a deep teal background — a centralized RaaS operator portal.

Ransomware

PRODAFT Documents "DevMan" Ransomware-as-a-Service Portal Operated by "Funky Mantis"

Another named RaaS operator profile from PRODAFT — defender-team pattern-tracking this weekend.

Flat white line-art of a monitor showing a simulation flow model beside a shield, on a teal background — Rockwell Arena Simulation code-execution patches.

Vulnerabilities

Rockwell Publishes Patches for Code-Execution Flaws in Arena Simulation Software

A Rockwell industrial-simulation patch — defender verification across affected industrial deployments this weekend.

Flat white line-art of a phone prayer app beside a large open padlock, on a deep blue background — the Vatican prayer app data leak affecting 700,000+ users.

Data Breaches

Vatican's Official Prayer App Leaks Personal Data of 700K+ Global Users

A scale-significant consumer-app data leak: the Vatican's official prayer app reportedly exposed personal data of more than 700,000 users worldwide, according to multi-source reporting — a consumer-notification story, not an attack event.

Flat white line-art of a passport beside a large descending stamp over a globe, on a deep teal background — US State Department visa restrictions on cyber scammers.

Policy & Government

US State Department Imposes Visa Restrictions on Foreign Cyber Scammers and Sextortionists

A new visa-restriction lever from the State Department against international cybercrime — policy coverage this week.

Flat white line-art of a small key badge held up to a large certificate seal, on a slate-blue background — the Certighost Active Directory domain-controller-impersonation disclosure.

Vulnerabilities

Researchers Disclose "Certighost" Exploit Letting Low-Privileged AD Users Impersonate a Domain Controller

An Active Directory privilege-escalation research disclosure — defender review across AD environments this week, with Microsoft's July 2026 update the confirmed fix.

Flat white line-art of an image file linked to a server rack, on a teal background — Bing Images SVG remote code execution on Microsoft's servers.

Vulnerabilities

Researchers Disclose Bing Images Flaws Letting Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

Researchers at XBOW disclosed two Bing Images flaws that let crafted SVG files run commands as SYSTEM on Microsoft's own servers. Microsoft fixed both server-side before the details went public — this is primarily a vendor-fix story, with limited consumer action.

Flat white line-art of an envelope link spawning a small robot figure inside an office doorway, on a teal background — the ChatGPT AgentForger research disclosure.

Artificial Intelligence (AI)

Researchers Disclose ChatGPT "AgentForger" Flaw That Could Deploy Rogue Workspace Agents via a Phishing Link

An AI-agent phishing vector hits ChatGPT — defender review while OpenAI's fix propagates this week.

Flat white line-art of a video-call window beside a wallet icon on an inspection stand, on a deep blue background — the BlueNoroff Zoom phishing-kit disclosure.

North Korean Threat Actors

Researchers Document "BlueNoroff" Zoom Phishing Kit Profiling Crypto Wallets Before Malware Delivery

Another BlueNoroff cryptocurrency-targeting operation lands — a defender review for crypto-industry Zoom users this week, framed around wallet-profiling awareness rather than kit mechanics.

Flat white line-art of a robot arm and a large database cylinder joined by a single key, on a deep-teal background — Kimi K3 agents and Redis zero-days.

Artificial Intelligence (AI)

Researchers Report Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit Autonomously

A Chinese-model autonomous-AI-agent capability lands with real Redis zero-days — AI-safety analysis this week.

Flat white line-art of a large envelope linked to a shield and a webmail window, on a cobalt-blue background — the NCSC-led Russian Zimbra zero-click alert.

Nation-State Cyber Threats

UK NCSC and Partners Publish International Alert on Russian State-Supported Zero-Click Zimbra Zero-Day Campaign

A year-long Russian state-supported zero-click Zimbra campaign, exposed this week by NCSC UK and partners across some 16 nations — a defender review for any organization still running unpatched Zimbra.

See all