Show Notes - 2026-07-28
Stories Covered
Today:Arista VeloCloud Orchestrator Zero-Day (CVE-2026-16812) [Critical Alerts]PTC Windchill Exploited by Cl0p Ransomware (CVE-2026-12569) [Critical Alerts]Check Point SmartConsole Authentication Bypass (CVE-2026-16232) [Critical Alerts]Microsoft SharePoint On-Prem RCE Under Attack (CVE-2026-50522) [Critical Alerts]Fortinet FortiOS SSL-VPN Patch Bypass (CVE-2025-68686) [Critical Alerts]Coca-Cola Fairlife Data Breach After Anubis Ransomware Attack [Ransomware & Extortion]Nichirei Ransomware Attack Disrupts Japan Food Supply [Ransomware & Extortion]Stadler Rail Supplier Breach [Ransomware & Extortion]Origin Energy Customer Data Breach [Ransomware & Extortion]Operation BlueDash: RMM Abuse via Fake Microsoft Teams [Business & Infrastructure Threats]Cisco Talos IR Q2 2026: Phishing and RMM Tool Weaponization [Business & Infrastructure Threats]ARToken PhaaS Platform [Business & Infrastructure Threats]UAT-11764: QR Phishing Campaign Targeting Australia [Business & Infrastructure Threats]AI Agent-Driven Espionage: Thailand Ministry of Finance [Business & Infrastructure Threats]Cruciferra Crypter Service [Business & Infrastructure Threats]Indirect Prompt Injection Tooling Emerging [Windows / AD Security]Microsoft Defender for Endpoint Linux Update Issue [Windows / AD Security]OpenAI AI Models Escaped Evaluation Environment [General Security News]JadeProx China-Nexus Campaign [General Security News]FBI: Breaking Affiliate Trust Sped LockBit Takedown [General Security News]NVIDIA Forms Open Secure AI Alliance [General Security News]Microsoft Project Perception [General Security News]vBulletin Pre-Auth RCE (CVE-2026-61511) [Vulnerability Disclosures]Fastjson RCE Under Active Exploitation (CVE-2026-16723) [Vulnerability Disclosures]Linux Kernel Use-After-Free Race (CVE-2026-53264) [Vulnerability Disclosures]n8n Sandbox Escape (GHSA-gv7g-jm28-cr3m) [Vulnerability Disclosures]JetBrains TeamCity RCE (CVE-2026-63077) [Vulnerability Disclosures]Dysphoria IoT Botnet Evolution [Vulnerability Disclosures]AutoIT Payload Injector Wave [Vulnerability Disclosures]MedusaHVNC RAT [Vulnerability Disclosures]Mirage Kitten NightLedger Backdoor [Vulnerability Disclosures]Spring Boot Heapdump Scans [Vulnerability Disclosures]CVEs Referenced
CVE-2022-42475, CVE-2023-27997, CVE-2024-21762, CVE-2025-68686, CVE-2025-9528, CVE-2026-12569, CVE-2026-16232, CVE-2026-16723, CVE-2026-16812, CVE-2026-50522, CVE-2026-53264, CVE-2026-61511, CVE-2026-63077
Indicators of Compromise
teamvem[.]com, support[.]berrydev, m3rnbvs5d[.]eth, burrberry[.]eth, 24carnforth2merseyside[.]sol, realhealthshop[.]com, tjconsultingservices[.]com
5.2.3.14, 6.1.3.4, 6.4.2.4, 7.0.0.1, 8.19.75.217, 206.72.242.124, 206.72.242.162, 51.89.204.28