Today's cybersecurity landscape highlights critical vulnerabilities across major platforms and significant data breaches, underscoring the constant threat to digital security. Exploits are now publicly available for several Linux kernel flaws, and AI-driven attacks and new malware families continue to emerge, affecting everything from cloud services to personal devices.
Gyazo Image Sharing Platform Suffers Major Data Breach Affecting 23.6 Million UsersBreach
The Gyazo image-sharing service has confirmed a data breach resulting from a server vulnerability. This incident led to the compromise of 23.6 million user records, exposing sensitive information.
Why it matters: If you use Gyazo, assume your data may be compromised and take immediate steps to change passwords and enable multi-factor authentication on other services where you might have reused credentials.
Read more at BleepingComputer ↗
Critical Vulnerabilities in Check Point and Microsoft Azure AI Foundry PatchedVulnerability
Check Point has issued updates for a critical flaw allowing root-level code execution on management systems. Simultaneously, Microsoft addressed a maximum-severity privilege escalation vulnerability (CVE-2026-85889) in Azure AI Foundry, requiring no customer action.
Why it matters: Ensure all your security management and cloud service platforms are promptly updated to protect against attackers gaining complete control over your systems.
Read more at BleepingComputer ↗
WordPress Click2Shell Flaw Allows Unauthorised Theme InstallationVulnerability
WordPress has patched a new vulnerability, dubbed 'Click2Shell,' which could allow an attacker to install themes from the official directory without user interaction if an administrator clicks a specially crafted link. This flaw could potentially be chained with other vulnerabilities for broader impact.
Why it matters: Keep your WordPress installations updated immediately to prevent potential remote code execution and maintain control over your website's integrity.
Read more at The Hacker News ↗
Public Exploits Released for Four Linux Kernel Local Root FlawsVulnerability
Working exploit code has been released for four Linux kernel vulnerabilities that could allow a local user to gain root privileges. While these flaws have been patched in recent kernel versions, systems running older kernels are still at risk.
Why it matters: If your website or services run on Linux, ensure your kernel is fully updated to prevent local privilege escalation and maintain system security.
Read more at The Hacker News ↗
Abandoned CDN Domain Re-registered, Thousands of Sites Still Calling ItOther
A Content Delivery Network (CDN) domain that expired and was subsequently re-registered in July 2025 is still being referenced by thousands of websites, code repositories, and documentation pages. This poses a significant supply chain risk for sites that have not updated their hard-coded references.
Why it matters: Review your website's code and dependencies for any hard-coded references to external domains, especially those of defunct services, to avoid unexpected content injection or security risks.
Read more at The Hacker News ↗
New Malware Families Emerge: WeaselBiscuit, PhantomRaven, and RatHatThreat
Multiple new malware families have been identified: WeaselBiscuit, a JavaScript stealer spread via npm packages; PhantomRaven, another npm-based stealer potentially developed with AI assistance; and RatHat, an Android malware leveraging ADB to maintain persistent shell access and AI for device control.
Why it matters: Be cautious of suspicious npm packages, unexpected app installations, and text messages. Regularly audit your dependencies and educate staff on phishing to avoid these new threats.
Read more at The Hacker News ↗
AI Coding Agents Vulnerable to Plugin4Shell AttackVulnerability
A flaw, dubbed 'Plugin4Shell,' has been found in four popular AI coding agents, allowing attackers to swap a legitimate plugin for a malicious one, even if the agent was configured to use a specific, reviewed version. Anthropic and OpenAI have patched this vulnerability.
Why it matters: If you or your developers use AI coding agents, ensure they are updated to the latest versions to mitigate this supply chain risk and verify the integrity of plugins used.
Read more at The Hacker News ↗
Brevo Supply Chain Attack Injects Malware into 100,000 WebsitesBreach
Hackers compromised an API key associated with Brevo (formerly Sendinblue), a marketing automation platform, to deploy a Cloudflare worker that injected malicious scripts into approximately 100,000 websites.
Why it matters: Regularly review third-party integrations and API keys for your website. A supply chain attack through a service provider can directly compromise your site, even if your own systems are secure.
North Korean Hackers Use 'WaterPlum' Campaign to Infect Thousands of DevicesThreat
North Korean threat actors, operating under the 'WaterPlum' campaign, have infected thousands of devices across 100 countries. They achieve this by posing as AI or blockchain companies to steal cryptocurrency from job applicants.
Why it matters: Be extremely vigilant about unsolicited job offers or investment opportunities, especially those involving cryptocurrency, as they can be elaborate phishing schemes to install malware.
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.