Artificial Intelligence (AI)
Three Hugging Face Diffusers CVEs Bypass Custom-Code Safeguard
From safeguard to bypass — the diffusers CVEs land this week, and any machine that loads an untrusted model repository is the exposed surface.
Latest
Nation-State Cyber Threats
Iran-Linked Nimbus Manticore Deploys NightLedger Backdoor Across Middle East, Africa, South Asia
New backdoor, familiar actor — the Iran-linked group tracked as Nimbus Manticore has a fresh toolset, and Kaspersky's write-up of NightLedger lands this week.
Vulnerabilities
24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login
Twenty-four thousand hash leaks underneath the OS — the BMC exposure map lands this week, and the fix is not a patch but a posture change.
Artificial Intelligence (AI)
Hackers Used Autonomous AI Agent to Target Thailand Finance Ministry, Researchers Say
Ten days after Hugging Face — the second autonomous-agent cyber event lands this week.
Vulnerabilities
PTC Windchill Vulnerability Exploited in Cl0p Ransomware Campaign
From advisory to active ransomware — the PTC Windchill flaw is on the wire this week, and reporting now ties the exploitation to a Cl0p-style extortion campaign.
Data Breaches
DentaQuest Data Breach Potentially Impacts Over 23 Million People
From May intrusion to July disclosure — one of 2026's largest healthcare breaches lands this week.
Data Breaches
Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack
Confirmed at the parent, claimed by Anubis — Fairlife lands on the leak wire this week.
Vulnerabilities
PoC Exploit Released for Critical AD CS Domain-Takeover Flaw (Certighost, CVE-2026-54121)
From advisory to public proof-of-concept — the critical AD CS "Certighost" domain-takeover flaw (CVE-2026-54121) goes public this week, with the fix already shipped in Microsoft's July 2026 update.
Vulnerabilities
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
Patch first, patch fast — a public vBulletin exploit lands this week.
Artificial Intelligence (AI)
Nvidia and Tech Giants Form Open Secure AI Alliance in Response to OpenAI-Hugging Face Incident
From incident to alliance in ten days — the AI-defender industry reorganizes this week.
Vulnerabilities
Microsoft Defender for Endpoint Update Leaves Some Linux Hosts Defenseless
The EDR update that broke the EDR — Microsoft Defender for Endpoint for Linux misfires this week, disabling protection on some hosts and stalling on hardened RHEL.
Vulnerabilities
n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
From CVE fix to fresh bypass: roughly five months after patching CVE-2026-27577, n8n has closed the same class of expression-sandbox escape again — this time reportedly with no CVE of its own, only a security advisory.