VulnHub

A recent report from Digital.ai indicates that a staggering 87% of mobile applications faced attacks over the past year. This trend highlights the growing risks associated with mobile app security, as attackers increasingly target vulnerabilities in software builds. The findings suggest that a wide range of apps are at risk, impacting both developers and users. Companies need to prioritize securing their applications to protect sensitive data and maintain user trust. Given the frequency of these attacks, it's crucial for organizations to regularly assess and enhance their security measures.

Recent reports suggest that Iranian hackers may have accessed automatic tank gauge systems at gas stations across the United States. These systems were reportedly exposed online without proper password protection, making them vulnerable to unauthorized access. This breach raises concerns about the safety and security of fuel supplies, as attackers could potentially manipulate fuel levels or disrupt operations. The incident highlights the risks associated with inadequate cybersecurity measures in critical infrastructure. As gas stations rely on these systems for inventory management, any compromise could lead to significant operational challenges and public safety issues.

Researchers recently released a proof of concept (PoC) for a vulnerability in the Linux kernel known as DirtyDecrypt, which was patched back in April. This vulnerability allows local attackers to gain elevated privileges, potentially giving them root access to affected systems. While the vulnerability was addressed in a previous update, the release of the PoC means that those who haven't applied the patch could be at risk. It is crucial for users and administrators of Linux systems to ensure they are running the latest updates to mitigate this risk. The implications of this vulnerability are significant, especially for environments where security is paramount, such as servers and critical infrastructure.

Poland has directed its government officials to cease using the messaging app Signal for sensitive communications due to a series of cyberattacks targeting their accounts. This decision affects politicians, military personnel, and public servants who have been victims of these attacks. In response, officials will transition to a state-developed messaging alternative designed to enhance security. The move underscores the ongoing risks faced by government officials in the digital realm and highlights the need for secure communication channels. As cyber threats continue to evolve, this shift reflects Poland's commitment to protecting its officials from potential breaches.

A recent report from Bridewell has raised concerns about a new type of cyberattack known as 'fix-style' attacks, where hackers bypass traditional security tools and directly target users. This tactic allows attackers to exploit vulnerabilities by tricking individuals into making changes to their systems, often under the guise of legitimate updates or fixes. The report indicates that this method is increasingly effective, especially as more people work remotely and rely on digital tools. Organizations need to be aware of these tactics to better protect their employees and systems, as the risks associated with such direct targeting can lead to significant data breaches and financial losses. The emergence of these attacks highlights the importance of user education and robust security protocols.

A newly discovered vulnerability, identified as CVE-2026-8153, poses a significant risk to Universal Robots' PolyScope 5 software used in industrial robot fleets. This flaw allows attackers to exploit the system through OS command injection, potentially compromising the operation of robotic systems. Organizations using these robots could face unauthorized access and manipulation of their automated processes, leading to operational disruptions or safety hazards. The issue highlights the need for companies to assess their systems and take proactive measures to safeguard their robotic operations. Immediate attention to this vulnerability is crucial for maintaining security in environments that rely on industrial automation.

Recent research from the University of Texas at Arlington and Louisiana State University has revealed that attackers can use publicly available Instagram posts to craft highly personalized phishing emails. By analyzing social media activity, these attackers can create messages that seem credible and tailored to individual recipients, making them more likely to fall for the scams. This development poses a significant challenge for both security teams and users, as the need for stolen databases is diminished. Instead, attackers can exploit readily available information to enhance their phishing tactics. Users need to be more cautious about the personal information they share online, as it can be weaponized against them in increasingly sophisticated ways.

In a recent software supply chain attack, hackers have compromised a widely used GitHub Actions workflow called actions-cool/issues-helper. They redirected all the existing tags in the repository to an imposter commit, which is not part of the action's regular commit history. This malicious commit runs code designed to collect sensitive continuous integration and continuous deployment (CI/CD) credentials and sends them to a server controlled by the attackers. This incident raises major concerns for developers and organizations that rely on this workflow, as their credentials could be at risk, potentially leading to unauthorized access to their systems and data. Users of this GitHub Action should take immediate precautions to secure their credentials and monitor their systems for any suspicious activity.

Researchers have identified a software supply chain attack that has compromised several npm packages linked to the @antv ecosystem. The attack stems from a compromised maintainer account for the npm package 'atool.' Notably, this includes 'echarts-for-react,' a popular React wrapper for Apache ECharts, which has around 1.1 million weekly downloads. This incident is part of a broader campaign known as Mini Shai-Hulud and raises concerns about the security of widely used development tools. Developers and organizations using these packages should check their dependencies for any malicious changes and take appropriate actions to secure their software supply chains.

A long-term espionage campaign linked to the Malaysian government has been operating under the radar for years. Researchers discovered that the attackers have maintained a complex command and control infrastructure, utilizing advanced techniques to evade detection. This operation raises concerns about the potential for sensitive information to be compromised, affecting not only government entities but possibly private sector organizations as well. The stealthy nature of this campaign suggests that it could continue to pose risks to national security and data privacy if not addressed. As this situation unfolds, it’s crucial for organizations to remain vigilant and enhance their cybersecurity measures.

A newly discovered zero-day vulnerability in Microsoft Exchange, tracked as CVE-2026-42897, poses a significant risk as it allows attackers to exploit cross-site scripting (XSS) to compromise Outlook Web Access (OWA) mailboxes. This vulnerability is reportedly under active attack, meaning that malicious actors are currently trying to exploit it in the wild. Organizations using Microsoft Exchange should be particularly vigilant, as the absence of an available patch leaves their systems exposed. Without immediate remediation, users could face unauthorized access to sensitive email communications. Companies are advised to implement security measures, such as input validation and monitoring for suspicious activity, until an official patch is released.