Ruby on Rails released fixes for CVE-2026-66066, a critical flaw that could let unauthenticated attackers read arbitrary files and potentially reach remote code execution. The issue affects Active Storage with libvips-based image processing and may expose secrets such as secret_key_base, so users should upgrade immediately and rotate any exposed credentials. #RubyonRails…
Balance Theory raised $19 million in Series A funding to expand its platform that helps CISOs evaluate and manage cybersecurity spending. The company says its system combines investment planning, market intelligence, and AI-driven workflows to track more than $1 billion in security spend and improve purchasing decisions. #BalanceTheory #SYNVentures #DanBurns…
ANADOLU S, İGORTA in Turkey reported a CRPxO ransomware attack in the insurance sector, resulting in 1.2 GB of data being leaked. The incident has impacted Turkey #Turkey
CRPxO ransomware reportedly targeted DO,ĞAN HOLDİNG in Turkey, impacting the Media / Energy Conglomerate sector with 3.1 GB of data leaked. The incident is attributed to CRPxO and affected #Turkey
Gammax ransomware has been claimed targeting MTCO (Mahmoud Altaheni & Partners Trading Co), a Saudi Arabia (KSA) and GCC-focused trading company with 15+ years of industry experience, operating in the region under the threat actor Gammax. The impacted country(s): #SaudiArabia,GCC
Oldelval, which operates Argentina’s main pipeline network, reported a cybersecurity incident that affected its administrative systems during a period of expansion. The company said crude oil transport was not disrupted, highlighting the growing exposure of critical energy infrastructure to cyberattacks. #Oldelval #Argentina
A threat actor posting as bytetobreach claims to have compromised Magyar Államkincstár, Hungary’s State Treasury, and says the intrusion reached Oracle Identity Manager vaults and VMware vCenter. The claim is unverified and is supported only by 13 screenshots, with no data sample, no ransom demand, and no open sale. #MagyarÁllamkincstár #bytetobreach…
A threat actor claiming to be WInQ7wk9sA3a says they breached Baltas Online and exfiltrated more than 500GB of data affecting 750+ Turkish company clients. The alleged leak includes executive psychometric profiles, candidate records, interview audio/video, exam materials, and source code, but the claim remains unverified. #BaltasOnline #WInQ7wk9sA3a #Turkey…
Bacoor City Government in the Philippines was allegedly breached, with attackers claiming access to more than 57,000 business permit records. The threat actor dopePanda and a collective said only a partial leak was released and warned of escalation within one week if policy changes are not made. #BacoorCityGovernment #dopePanda…
A buyer posting as umbreon is seeking exclusive corporate network access to large Western firms with verified annual revenue above $350 million, using flat-rate terms and escrow. The solicitation targets VPN, RDP, Citrix, VDI, RMM, Active Directory, Entra, AWS, Okta, and Oracle Identity Manager access while explicitly excluding CIS-region targets, schools,…
Microsoft says hijacked hotel Wi-Fi captive portals were used to push a fake browser or OS update that delivered CornFlake, a RAT capable of stealing webcam images, microphone audio, keystrokes, cookies, and passwords. The activity, tracked as CaptiveCrunch and attributed by Microsoft to Storm-2945, also used device code phishing and ChocoShell…
Adobe has released critical security updates for Campaign Classic and Adobe Bridge to fix flaws that could lead to arbitrary code execution, privilege escalation, and file reads. The company said it is not aware of active exploitation, and users should update to the latest versions promptly. #Adobe #CampaignClassic #AdobeBridge #CVE-2026-48449 #CVE-2026-48448…
Attackers compromised Adform’s trackpoint-async.js and turned it into a browser-side tool that rewrites Bitcoin, Ethereum, and Tron wallet addresses on affected pages. Adform removed the malicious code on July 27, 2026, notified customers, and advised users to clear browser cache and verify wallet addresses before sending funds. #Adform #trackpoint-async.js #Bitcoin #Ethereum…
CRPxO ransomware impacted healthcare and pharmaceutical operations at Johnson & Johnson in the US, leaking 1.9 GB of data. The incident highlights a significant breach targeting sensitive healthcare information in the United States. #UnitedStates
In Turkey (THY), the CRPxO ransomware group claimed it encrypted systems and leaked 4.2 GB of data from an aviation organization. The reported impacted country is Turkey #Turkey