Vulnerabilities
Unpatched Fastjson Vulnerability Now Actively Exploited
From unpatched advisory to active exploitation — Fastjson on the wire this week.
Vulnerabilities
Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
Patch first, patch fast — a public vBulletin exploit lands this week.
Supply Chain Attack
New GitHub, PyPI Policies Boost Supply Chain Security
Three days for GitHub, fourteen for PyPI — the poisoned-package window narrows this week.
Vulnerabilities
ThreatBook and Imperva Report Attacks Against Unpatched Fastjson 1.x RCE Vulnerability CVE-2026-16723
An unpatched Fastjson 1.x RCE under active attack — a defender review for Spring Boot deployments this weekend.
Vulnerabilities
Check Point Patches Exploited SmartConsole Authentication Bypass CVE-2026-16232
A Check Point SmartConsole authentication bypass under active attack — defender teams accelerate patch verification this week.
Artificial Intelligence (AI)
OpenAI Fixes ChatGPT Agent Flaw That Could Have Let Attackers Forge an AI Insider
OpenAI patches an AI-insider-forgery vulnerability in ChatGPT Agent — defender review this week.
Vulnerabilities
Oracle Ships July 2026 Critical Patch Update Addressing 1,400+ Vulnerabilities, Many Reportedly AI-Discovered
Oracle's July CPU pushes past 1,400 CVEs — the AI-discovery patch-volume trend continues across major enterprise vendors this week.
Vulnerabilities
Fourth Actively Exploited SharePoint Vulnerability CVE-2026-50522 (CVSS 9.8) Under Attack After PoC Release
SharePoint's fourth actively-exploited flaw in a month lands with a machine-key-theft twist — defender teams patch AND rotate this week.
Vulnerabilities
Trend Micro ZDI Discloses 7-Zip CVE-2026-14266 Heap Buffer Overflow in XZ Chunked Data Handling
A crafted XZ archive can run code in 7-Zip — defender teams verify the 26.02 update this week.
Vulnerabilities
wp2shell WordPress Mass Exploitation Expands; Millions of Sites at Risk
wp2shell moves from active exploitation to mass takeover — hosting providers and defender teams accelerate remediation this week.
Vulnerabilities
ServiceNow AI Platform CVE-2026-6875 (CVSS 9.5 Sandbox Escape) Under Active Exploitation
A ServiceNow AI Platform sandbox escape under active attack — defender teams accelerate patch verification this week.
Vulnerabilities
F5 Publishes Critical NGINX Patch for Heap Buffer Overflow (CVE-2026-42533) That Could Enable Denial of Service or RCE
A critical NGINX flaw with remote-unauthenticated attack surface — defender verification across NGINX and NGINX Plus deployments this week.