Today's cybersecurity landscape highlights critical vulnerabilities in widely used software and significant data breaches impacting millions. Urgent updates are required for various platforms to mitigate risks from unauthenticated access to sophisticated nation-state attacks.
Critical Vulnerabilities in GitLab and WordPress PluginVulnerability
GitLab has addressed a severe vulnerability (CVE-2026-19478) in its Community and Enterprise Editions, which could allow unauthenticated attackers to delete public projects and user data. Separately, a critical flaw (CVE-2026-15748) in the popular Forminator Forms WordPress plugin enables unauthenticated remote code execution through malicious file uploads, affecting over 600,000 installations.
Why it matters: Website owners using GitLab or the Forminator WordPress plugin must apply the latest security updates immediately to prevent data loss or complete compromise of their sites.
Read more at The Hacker News ↗
VMware vCenter Flaw Exploited by Suspected China-Nexus GroupVulnerability
A newly patched critical directory-traversal vulnerability (CVE-2026-59310) in Broadcom VMware vCenter has been actively exploited by a suspected Chinese state-sponsored threat group. The attackers are leveraging this flaw to execute arbitrary code and deploy Babuk-derived ransomware on compromised systems.
Why it matters: Organizations running VMware vCenter servers must prioritize patching CVE-2026-59310 to protect against advanced persistent threats and ransomware attacks.
Read more at The Hacker News ↗
Major Azure Account Records Stolen, Affecting Fortune 500 CompaniesBreach
A threat actor is claiming to have stolen 3.6 million employee records from the Microsoft Azure infrastructure of several Fortune 500 companies. The breach allegedly occurred due to compromised credentials, leading to the exfiltration of sensitive internal databases.
Why it matters: Businesses utilizing Azure should reinforce credential security and implement multi-factor authentication to prevent unauthorized access to their cloud environments.
Read more at BleepingComputer ↗
French Tax Authority Data Breach Impacts 678,000 IndividualsBreach
The French Ministry of the Economy and Finance has disclosed a data breach affecting 678,000 individuals after an attacker gained access to the General Directorate of Public Finances (DGFiP) systems. The breach involved the theft of personal and tax-related information.
Why it matters: This incident highlights the importance of robust access controls and continuous monitoring for any organization handling sensitive customer or citizen data.
Read more at BleepingComputer ↗
Clop Ransomware Claims Data Theft from Philips and GERansomware
Tech giants General Electric (GE) and Philips are investigating claims by the Clop ransomware gang that they breached their systems and stole data. This follows a pattern of high-profile attacks by the Clop group targeting large organizations.
Why it matters: Even large corporations are targets. Small businesses must maintain strong backup strategies, keep systems patched, and educate employees on phishing to defend against ransomware.
Read more at BleepingComputer ↗
New Linux Botnet Evooo1Bot Expands Mirai CapabilitiesThreat
A previously undocumented Linux botnet, Evooo1Bot, has been identified, leveraging Mirai botnet source code while adding advanced features. This botnet can exploit known flaws, steal credentials, and transform compromised internet-facing devices into SOCKS5 proxies for persistent attacker infrastructure.
Why it matters: Secure all edge devices, including IoT, routers, and servers, by regularly patching known vulnerabilities and using strong, unique credentials to prevent them from becoming part of botnets.
Read more at The Hacker News ↗
Unisoc VoLTE Video Call Exploit Gains Android Kernel AccessVulnerability
Security researchers have detailed a two-stage exploit chain that achieves full Android kernel access on devices using Unisoc modem firmware. This exploit can be triggered remotely through a VoLTE video call, with no current fix available from the chipset manufacturer.
Why it matters: Individuals and businesses using Android devices with Unisoc modems should be aware of this unpatched threat and exercise caution with unknown video calls, as it could lead to full device compromise.
Read more at The Hacker News ↗
MyDr Healthcare Software Breach Affects 19 Million in PolandBreach
MyDr, a private Polish company providing software to healthcare providers, experienced a data breach potentially impacting 19 million individuals. The company has identified and addressed the root cause, implementing additional security measures.
Why it matters: Healthcare providers must rigorously secure third-party software and vendors, as breaches in their supply chain can expose vast amounts of sensitive patient data, leading to severe regulatory and reputational damage.
Windows Server 2022 Nearing Mainstream End of SupportPolicy
Microsoft has issued a reminder that Windows Server 2022 will reach its mainstream end of support in October 2026, transitioning to extended support. This change means that new feature development and non-security updates will cease.
Why it matters: Businesses relying on Windows Server 2022 should plan for updates or migration to a newer, fully supported version to ensure they continue to receive critical security patches and support.
Read more at BleepingComputer ↗
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.