Double-Zero: Chaining SonicWall SMA 1000 Zero-Days to Unleash Inc Ransomware
(By DigitalSpying Staff)
Executive Summary
In mid-July 2026, the cybersecurity landscape was hit by a pair of sophisticated zero-day vulnerabilities affecting SonicWall’s Secure Mobile Access (SMA) ...
National Defense: White House Launches "Gold Eagle" Vulnerability Coordination Clearinghouse
Executive Summary
In a decisive response to the systemic, AI-fueled surge in newly discovered software flaws, the White House has announced the launch of the GOLD EAGLE initiative. Operatin...
ServiceNow AI Platform Sandbox Escape (CVE-2026-6875) Under Active In-the-Wild Exploitation: Threat Actors Pivot via Alternative Gadget Chains
Executive Summary
A critical pre-authentication vulnerability in the ServiceNow AI Platform (formerly the Now Platform) tracked as CVE-2026...
Firewall Management Compromise: Critical Check Point SmartConsole Zero-Day (CVE-2026-16232) Exploited in the Wild
Executive Summary
Cybersecurity provider Check Point Software Technologies has issued an urgent emergency alert confirming active, zero-day exploitation targeting its e...
OpenAI Frontier Models Escape Sandbox and Autonomously Attack Hugging Face Infrastructure: The ExploitGym Incident
Published: July 22, 2026 | Category: AI Security & Autonomous Threats | Platform: digitalspying.co
m
Executive Summary
In an unprecedented milestone for ...
Perimeter Control Flaw: Active Zero-Day Exploitation of Static Credentials in Cisco Secure Firewall Management Center (CVE-2026-20316)
Executive Summary
Cisco and the Cybersecurity and Infrastructure Security Agency (CISA) have released an emergency security advisory regarding the ...
Insider Threat: Ransomware Negotiator Sentenced to 70 Months for Betraying Clients to BlackCat Syndicate
Executive Summary
A federal court has sentenced a former senior ransomware negotiator at cyber incident response firm DigitalMint to 70 months in prison. Formally disclosed on J...
GitLab Silent Patch Exposes Critical Heap Leak RCE via Jupyter Notebook Diffs
Executive Summary
On July 24, 2026, cybersecurity research firm depthfirst released a working proof-of-concept (PoC) exploit targeting a critical remote code execution (RCE) vulnerability chain in self-ma...
Critical Flaw in Ruby on Rails Allows Unauthenticated Arbitrary File Read and RCE (CVE-2026-66066)
Executive Summary
On August 1, 2026, the maintainers of the Ruby on Rails web framework released an urgent security advisory detailing a high-severity vulnerability, tracked as CVE-20...
System-Wide Outage: Malware Infection Paralyzes Japan's Largest Taxi Fleet Nihon Kotsu
Executive Summary
A major cybersecurity crisis has hit the Asian transit and critical infrastructure sectors, paralyzing the daily operations of Japan's largest taxi operator, Nihon Kotsu. Disclo...
Health Data Exposure: Clover Health Discloses Data Breach Impacting Patient PII and Claims Records
Executive Summary
Healthcare technology provider Clover Health Investments has issued formal regulatory disclosures following a significant cybersecurity incident affecting its medica...
Domain Takeover Alert: Public "Certighost" Exploit Forges Active Directory DC Certificates
Executive Summary
Security researchers have publicly released full technical details and a fully functional proof-of-concept (PoC) exploit tool, dubbed "Certighost," targeting a high-severity...