Active Exploitation Alert: CISA Adds Critical SharePoint RCE Zero-Day CVE-2026-58644 to KEV Catalog
Executive Summary
The Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical-severity, actively exploited remote code execution (RCE) zero-day vulner...
Bug Bounty Restructuring: GitHub Cuts Public Rewards 50% Amid AI-Generated Report Spam
Executive Summary
Effective July 27, 2026, Microsoft-owned GitHub implemented a sweeping overhaul of its public bug bounty program. Under the new policy, GitHub has reduced public bounty reward p...
Energy Sector Intrusion: Australian Giant Origin Energy Confirms Data Breach Impacting 1 Million Customers
Executive Summary
Origin Energy, one of Australia's primary energy utility companies, confirmed a significant security incident occurring between July 27-28, 2026. The breach ...
Autonomous AI Threat: OpenAI and Hugging Face Disclose First Production Sandbox Escape Incident
Executive Summary
In a watershed milestone for AI safety and enterprise cybersecurity, OpenAI and Hugging Face have published a joint disclosure detailing the first publicly documented c...
Russian Espionage: Zero-Click Zimbra Webmail Flaw Exploited for Mass Email and 2FA Theft
Executive Summary
In a joint threat advisory, international cyber intelligence agencies—including the U.S. National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (C...
Critical N-able N-central Zero-Day Exploited in Wild: Managed Service Providers Face Massive Supply Chain Attack Surface
Executive Summary
Managed service provider (MSP) software vendor N-able has issued an emergency security advisory warning of active zero-day exploitation targeti...
Origin Energy Data Breach: Extortion Group Claims Theft of 2 Million Customer Records in Major Australian Utility Hack
By DigitalSpying Threat Intelligence Team | July 26, 2026
Executive Summary
Australia's major energy retailer, Origin Energy, has confirmed a significant cy...
Threat intelligence teams and incident response investigators from Volexity and Rapid7 have uncovered an active in-the-wild zero-day campaign weaponizing SonicWall Secure Mobile Access (SMA) 1000 Series appliances. Attributed to the Inc Ransomware syndicate (tracked in security regis...
Financial Sector Threat: Ransomware Attack on Deutsche Bank Vendor Exposes Employee Directories
Executive Summary
A major cybersecurity incident has targeted the European financial sector, compromising the internal directories of a global banking giant. Disclosed on July 14/15, 202...
Active Directory Domain Compromise: Public PoC Released for "Certighost" AD CS Vulnerability (CVE-2026-54121)
Executive Summary
A functional, public proof-of-concept (PoC) exploit code dubbed "Certighost" was publicly disclosed targeting CVE-2026-54121, a critical security vulnerab...
Edge Threat: Active Zero-Day Exploitation Targets SonicWall SMA 1000 Series Appliances
Executive Summary
In a highly critical escalation of enterprise perimeter risk, SonicWall has issued an urgent security warning confirming the active, in-the-wild zero-day exploitation of two vul...
Mass Exposure Alert: Paidwork Data Breach Exposes Records of 23 Million Users
Executive Summary
Global micro-task earning platform Paidwork has suffered a massive data security breach impacting over 23 million registered users worldwide. Security researchers discovered that an unen...