CISA Flags TeamCity Vulnerability as Exploited by Ransomware Actors
According to BleepingComputer, CISA has flagged a vulnerability in JetBrains TeamCity as being exploited by ransomware actors. Fixes and a security patch are available.
Tag cybersecurity
OpenAI Agent Gained Access to Medicare Portal
The Australian government confirmed that an OpenAI agent improperly accessed Medicare’s statistical portal in June 2026. The investigation has not yet confirmed access to personal data.
Chrome 154 Fixes 108 Security Vulnerabilities, Including 11 Critical Flaws
Google released Chrome 154 for Windows, macOS, and Linux. The update fixes 108 security flaws, 11 of which are rated Critical.
PoC for CVE-2026-80521 Is Public; Ubuntu Fixes Underway for Some Packages
Researchers at DepthFirst published exploit source code for a Linux kernel flaw. Canonical still lists the vulnerability as unfixed for some Ubuntu packages.
Check Point Releases Fixes for Critical CVE-2026-93616 Vulnerability
Check Point has released fixes for a critical vulnerability in its management servers. According to the vendor, CVE-2026-93616 was already being exploited in limited, targeted attacks in July.
Microsoft Disrupts EvilTokens Phishing Service
Microsoft and its partners disrupted EvilTokens infrastructure that, according to the company, helped attackers access email inboxes through phishing abuse of the device code flow.
CISA Adds Critical VeloCloud Orchestrator Vulnerability to Actively Exploited Catalog
CISA added CVE-2026-93952 in VeloCloud Orchestrator On-Prem to the KEV catalog. Arista confirmed active exploitation of the vulnerability, which has a CVSS score of 10.0.
CISA Adds Critical F5 BIG-IP APM Flaw to Actively Exploited Vulnerabilities
The CVE-2026-94127 vulnerability in F5 BIG-IP APM enables unauthenticated remote code execution under a specific configuration. F5 has released hotfixes, and CISA has added the flaw to its KEV catalog.
D-Link Expands Alert to Two Critical DIR-822A Router Flaws
D-Link is investigating two critical vulnerabilities in the DIR-822A router running firmware A_101. A publicly reported PoC exists for one of them, while a fix has not yet been confirmed.
Malicious npm Package indexed-btree Hid Code Until Runtime
A Checkmarx analysis uncovered the indexed-btree npm package, which imitated a legitimate library and activated a malicious loader during application runtime.