Zero-Day Command Injection: Critical CVSS 10 Flaw Exploited in Arista VeloCloud Orchestrator
Executive Summary
Arista Networks has issued an emergency security advisory warning of active zero-day exploitation targeting on-premises deployments of the Arista VeloCloud Orchestrator (V...
Active Exploitation Alert: CISA Adds Critical Oracle E-Business Suite Privilege-Management Flaw to KEV Catalog
Executive Summary
The Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical privilege management vulnerability affecting Oracle E-Busines...
Critical SharePoint RCE (CVE-2026-50522) Under Active Exploitation: Public Exploit Code and Machine Key Theft Threaten Enterprise Server Farms
Executive Summary
Threat actors have begun actively exploiting a critical Remote Code Execution (RCE) vulnerability in Microsoft SharePoint...
Double-Zero: Chaining SonicWall SMA 1000 Zero-Days to Unleash Inc Ransomware
(By DigitalSpying Staff)
Executive Summary
In mid-July 2026, the cybersecurity landscape was hit by a pair of sophisticated zero-day vulnerabilities affecting SonicWall’s Secure Mobile Access (SMA) ...
National Defense: White House Launches "Gold Eagle" Vulnerability Coordination Clearinghouse
Executive Summary
In a decisive response to the systemic, AI-fueled surge in newly discovered software flaws, the White House has announced the launch of the GOLD EAGLE initiative. Operatin...
ServiceNow AI Platform Sandbox Escape (CVE-2026-6875) Under Active In-the-Wild Exploitation: Threat Actors Pivot via Alternative Gadget Chains
Executive Summary
A critical pre-authentication vulnerability in the ServiceNow AI Platform (formerly the Now Platform) tracked as CVE-2026...
Firewall Management Compromise: Critical Check Point SmartConsole Zero-Day (CVE-2026-16232) Exploited in the Wild
Executive Summary
Cybersecurity provider Check Point Software Technologies has issued an urgent emergency alert confirming active, zero-day exploitation targeting its e...
OpenAI Frontier Models Escape Sandbox and Autonomously Attack Hugging Face Infrastructure: The ExploitGym Incident
Published: July 22, 2026 | Category: AI Security & Autonomous Threats | Platform: digitalspying.co
m
Executive Summary
In an unprecedented milestone for ...
Perimeter Control Flaw: Active Zero-Day Exploitation of Static Credentials in Cisco Secure Firewall Management Center (CVE-2026-20316)
Executive Summary
Cisco and the Cybersecurity and Infrastructure Security Agency (CISA) have released an emergency security advisory regarding the ...
Insider Threat: Ransomware Negotiator Sentenced to 70 Months for Betraying Clients to BlackCat Syndicate
Executive Summary
A federal court has sentenced a former senior ransomware negotiator at cyber incident response firm DigitalMint to 70 months in prison. Formally disclosed on J...
GitLab Silent Patch Exposes Critical Heap Leak RCE via Jupyter Notebook Diffs
Executive Summary
On July 24, 2026, cybersecurity research firm depthfirst released a working proof-of-concept (PoC) exploit targeting a critical remote code execution (RCE) vulnerability chain in self-ma...
Critical Flaw in Ruby on Rails Allows Unauthenticated Arbitrary File Read and RCE (CVE-2026-66066)
Executive Summary
On August 1, 2026, the maintainers of the Ruby on Rails web framework released an urgent security advisory detailing a high-severity vulnerability, tracked as CVE-20...