The CyberSignal (Page 19)

Latest

Flat white line-art of a package box paused before a calendar gate and an hourglass, on a teal background — GitHub and PyPI supply-chain timing rules.

Supply Chain Attack

New GitHub, PyPI Policies Boost Supply Chain Security

Three days for GitHub, fourteen for PyPI — the poisoned-package window narrows this week.

Flat white line-art of a megaphone beside two linked server towers, on a teal background — a Hugging Face call for AI-vendor transparency.

Artificial Intelligence (AI)

Hugging Face CEO Calls for "Radical Transparency" After "Unprecedented" OpenAI Autonomous-Agent Breach

Hugging Face's CEO escalates the AI-safety conversation after OpenAI's confession — a "radical transparency" call this weekend.

Flat white line-art of a factory gear, an open blueprint drawer, and a sealed envelope, on a teal background — Cl0p PTC Windchill and FlexPLM data-extortion campaign.

Ransomware

Cl0p Affiliates Chain PTC Windchill and FlexPLM Flaws for Unauthenticated RCE in Fresh Data-Extortion Campaign

Cl0p is back with a PTC Windchill and FlexPLM chain — a defender review for industrial-lifecycle customers this weekend.

Flat white line-art of a JSON document feeding a Java coffee cup on a server rack, on a deep-red background — the Fastjson 1.x CVE-2026-16723 flaw.

Vulnerabilities

ThreatBook and Imperva Report Attacks Against Unpatched Fastjson 1.x RCE Vulnerability CVE-2026-16723

An unpatched Fastjson 1.x RCE under active attack — a defender review for Spring Boot deployments this weekend.

Flat white line-art of a repository panel and one open padlock beside a calendar, on a deep-teal background — GitLab RCE proof-of-concept after patch.

Vulnerabilities

Depthfirst Publishes GitLab RCE Proof-of-Concept Six Weeks After Patch; Self-Managed 18.11.3 Servers at Risk

A PoC lands six weeks after the GitLab patch — self-managed servers still on 18.11.3 accelerate remediation this weekend.

Flat white line-art of a browser window building a jigsaw file from separate pieces, on a teal background — the SourTrade browser-assembly malvertising research.

Threat Intelligence

Confiant Documents "SourTrade" Malvertising Campaign Assembling Executables in the Victim's Browser

A novel malvertising delivery technique lands from Confiant — defender review for ad-tech and retail-trader-adjacent environments this weekend.

Flat white line-art of one control panel routing several tiles into a central hub, on a deep teal background — a centralized RaaS operator portal.

Ransomware

PRODAFT Documents "DevMan" Ransomware-as-a-Service Portal Operated by "Funky Mantis"

Another named RaaS operator profile from PRODAFT — defender-team pattern-tracking this weekend.

Flat white line-art of a monitor showing a simulation flow model beside a shield, on a teal background — Rockwell Arena Simulation code-execution patches.

Vulnerabilities

Rockwell Publishes Patches for Code-Execution Flaws in Arena Simulation Software

A Rockwell industrial-simulation patch — defender verification across affected industrial deployments this weekend.

Flat white line-art of a phone prayer app beside a large open padlock, on a deep blue background — the Vatican prayer app data leak affecting 700,000+ users.

Data Breaches

Vatican's Official Prayer App Leaks Personal Data of 700K+ Global Users

A scale-significant consumer-app data leak: the Vatican's official prayer app reportedly exposed personal data of more than 700,000 users worldwide, according to multi-source reporting — a consumer-notification story, not an attack event.

Flat white line-art of a passport beside a large descending stamp over a globe, on a deep teal background — US State Department visa restrictions on cyber scammers.

Policy & Government

US State Department Imposes Visa Restrictions on Foreign Cyber Scammers and Sextortionists

A new visa-restriction lever from the State Department against international cybercrime — policy coverage this week.

Flat white line-art of a small key badge held up to a large certificate seal, on a slate-blue background — the Certighost Active Directory domain-controller-impersonation disclosure.

Vulnerabilities

Researchers Disclose "Certighost" Exploit Letting Low-Privileged AD Users Impersonate a Domain Controller

An Active Directory privilege-escalation research disclosure — defender review across AD environments this week, with Microsoft's July 2026 update the confirmed fix.

Flat white line-art of an image file linked to a server rack, on a teal background — Bing Images SVG remote code execution on Microsoft's servers.

Vulnerabilities

Researchers Disclose Bing Images Flaws Letting Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

Researchers at XBOW disclosed two Bing Images flaws that let crafted SVG files run commands as SYSTEM on Microsoft's own servers. Microsoft fixed both server-side before the details went public — this is primarily a vendor-fix story, with limited consumer action.

See all