🚨 EUVD-2026-41681

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: Ecommerce-CodeIgniter-Bootstrap
🏢 Vendor: kirilkirkov
📅 Updated: 2026-07-04

📝 A security flaw has been discovered in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 222ff31c06687b1c6d0e1ab63953f82c3674c52b. This issue affects some unknown processing of the file application/modules/vendor/controllers/AddPr...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41681

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-41680

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Ecommerce-CodeIgniter-Bootstrap
🏢 Vendor: kirilkirkov
📅 Updated: 2026-07-04

📝 A vulnerability was identified in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 213babdbaa949e94557246414db0130e01394517. This vulnerability affects the function checkForPostRequests of the file application/core/MY_Controller....

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41680

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//amazon-ui-clone-pi[.]vercel[.]app
🧬 Analysis at: https://urldna.io/scan/6a48cb943b7750000956cedf
#cybersecurity #phishing #infosec #urldna #scam #infosec

Apple Pay now lets you pay using American Express points

American Express has announced a new way for cardholders to redeem their rewards points: they can be used to pay for Apple Pay transactions. Here are the details.

https://9to5mac.com/2026/06/30/apple-pay-now-lets-you-pay-using-american-express-points/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Supreme Court agrees to hear Apple appeal over Epic Games ruling

The US Supreme Court has agreed to hear Apple’s appeal over a lower court ruling that held the company in contempt related to its Epic Games case and app fees. Update: Apple has shared a statement with 9to5Mac about the…

https://9to5mac.com/2026/06/30/supreme-court-agrees-to-hear-apple-appeal-over-epic-games-ruling/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxps[:]//inner[.]website/476f7088fwcf6e4a115bc8eceadb20162a48[.]html
🧬 Analysis at: https://urldna.io/scan/6a492e153b775000061bac78
#cybersecurity #phishing #infosec #urldna #scam #infosec

Cibby is a beautifully designed iOS app for physical video game collectors

Here’s a cool new thing coming son: Cibby, a beautifully designed iOS app for physical video game collectors.

https://9to5mac.com/2026/06/30/cibby-is-a-beautifully-designed-ios-app-for-physical-video-game-collectors/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Anthropic just released a brand-new Claude Science app for Mac

Anthropic just launched a brand-new desktop app called Claude Science. The new app joins the main Claude app on the Mac, which includes Claude AI, Cowork, and Code.

https://9to5mac.com/2026/06/30/anthropic-just-released-a-brand-new-claude-science-app-for-mac/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxps[:]//loginacnancymetzfridpprofileoidcauthorexecutione1s333[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a4919a53b77500003e572ec
#cybersecurity #phishing #infosec #urldna #scam #infosec

🚨 EUVD-2026-41683

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Ecommerce Website
🏢 Vendor: CodeAstro
📅 Updated: 2026-07-04

📝 A vulnerability has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /ecommerce-website-php/customer/my_account.php?edit_account. Such manipulation of the argument c_name leads to sql injection. The atta...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41683

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-41687

📊 Score: n/a
📦 Product: Plack::Middleware::OAuth
🏢 Vendor: CORNELIUS
📅 Updated: 2026-07-04

📝 Plack::Middleware::OAuth versions through 0.10 for Perl do not support the OAuth 2.0 state parameter.

RequestTokenV2 builds the provider authorization redirect without issuing a state value, and AccessTokenV2 exchanges the callback code and registers th...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41687

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-41686

📊 Score: n/a
📦 Product: Dancer2::Plugin::Auth::OAuth::Provider
🏢 Vendor: BIAFRA
📅 Updated: 2026-07-04

📝 Dancer2::Plugin::Auth::OAuth::Provider versions before 0.23 for Perl do not support the OAuth 2.0 state parameter.

The authentication_url method builds the provider authorization redirect without issuing a state value, and the callback method...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41686

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-41685

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: Hospital Management System
🏢 Vendor: itsourcecode
📅 Updated: 2026-07-04

📝 A flaw has been found in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /patient.php. This manipulation of the argument editid causes sql injection. The attack may be initiated remotely. The ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41685

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-41684

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: Ecommerce-CodeIgniter-Bootstrap
🏢 Vendor: kirilkirkov
📅 Updated: 2026-07-04

📝 A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 13fd582aaf49aeab7438acc0fc3eb973a1f5e6a7. The affected element is the function getCartItems in the library application/libraries/Shopp...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41684

#cybersecurity #infosec #euvd #cve #vulnerability

Nagios: 135 CVEs, 97% unpatched. Trust Score: D. 57 XSS flaws (CWE-79). Avg CVSS 8.0. Open-source monitoring ≠ secure by default. Patch your Nagios NOW. #Nagios #infosec #cybersecurity

https://www.valtersit.com/vendors/nagios/

🚨New ransom group blog posts!🚨

Group name: qilin
Post title: TQ Financial Services
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Sisint
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Sitmatic
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Goodwill Manasota
Info: https://cti.fyi/groups/qilin.html

Group name: qilin
Post title: Md Lewis
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

NASA launched an emergency mission to stop the Swift Observatory from crashing to Earth

Engineers from Katalyst Space Technologies testing Link. | Image: NASA/Scott Wiessinger The Swift Observatory was launched in 2004, but recent solar storms have pushed its orbit lower, and it's in danger of burning up i…

https://www.theverge.com/science/961459/nasa-emergency-save-swift-observatory-katalyst-space-technologies

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

The Dark Web wasn't created by hackers—it was built by the US government for spy communications. Tor hides your identity with three layers of encryption. Learn how it works and why most of it is perfectly legal. #CyberSecurity #Privacy #Tor

https://www.valtersit.com/who-created-and-what-is-the-dark-web-hidden-web-and-how-does-it-work/

Memory price surge begins to cool as consumers hit affordability limit — AI demand still keeps DRAM and NAND prices climbing through Q3 2026

TrendForce says DRAM and NAND prices will continue to rise through Q3 2026, but AI-driven gains are slowing as PC and smartphone makers reach their affordability limits.

https://www.tomshardware.com/pc-components/ram/memory-price-surge-begins-to-cool-as-consumers-hit-affordability-limit-ai-demand-still-keeps-dram-and-nand-prices-climbing-through-q3-2026

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

So, Agentic ransomware are now a thing huh? I still a bit skeptic though, but I am very welcome to any crazy shits that happen in infosecverse.

Via Bleeping Computer

https://www.sysdig.com/blog/jadepuffer-agentic-ransomware-for-automated-database-extortion#automation-assessment

#cybersecurity #infosec #ai #ransomware

Possible Phishing 🎣
on: ⚠️hxxp[:]//instagram-2-0-4p6f5s6nd-chibokaxavier[.]vercel[.]app
🧬 Analysis at: https://urldna.io/scan/6a48c55f3b77500003e56b67
#cybersecurity #phishing #infosec #urldna #scam #infosec

AOC U27G4XM 27-inch 4K 160 Hz Dual-Refresh Gaming Monitor Review: Speed, Flexibility And Value

AOC brings speed, flexibility, and value in its U27G4XM. It’s a 27-inch dual-mode IPS panel with 4K resolution at 160 Hz, FHD resolution at 320 Hz and Adaptive-Sync. It also has a Mini LED backlight with 1,000 nits for …

https://www.tomshardware.com/monitors/gaming-monitors/aoc-u27g4xm-27-inch-4k-160-hz-dual-refresh-gaming-monitor-review

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Beijing Plane Crash Tests China's Security State – FP

https://foreignpolicy.com/2026/06/30/china-plane-crash-beijing-citic-tower-security/

― The highlights this week: Fallout from a fatal plane crash in Beijing ripples through the security state, a Chinese billionaire is sentenced to 30 years in U.S. prison, and Chinese artificial intelligence models close the U.S. lead on cybersecurity. …

#AI #China #US #cybersecurity #aviation #security

Meta data center water discharges suspended after contaminating the city's water supply with bacterium — closed-loop cooling system purge spread rare metal-resistant bacterium in…

Fill-and-flush is a commissioning step whereby crews fill a cooling loop's piping with water and flush it to clear debris before the system is run.

https://www.tomshardware.com/tech-industry/data-centers/cheyenne-suspends-data-center-fill-and-flush-and-closed-loop-discharges-after-meta-contractor-contaminated-its-reuse-water-system

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

🟠 CVE-2026-14535 - High (8.8)

In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless of whether the import is flagged as unsafe. This...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14535/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-14535

Possible Phishing 🎣
on: ⚠️hxxps[:]//www[.]robiox[.]com[.]ps/users/4233503025/profile
🧬 Analysis at: https://urldna.io/scan/6a48b7343b77500003e56a38
#cybersecurity #phishing #infosec #urldna #scam #infosec

🟠 CVE-2026-14534 - High (8.8)

Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because these modules are absent from the denylist, fickli...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-14534/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-14534

🚨 EUVD-2026-41676

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: fickling
🏢 Vendor: trailofbits
📅 Updated: 2026-07-04

📝 In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless of whether the import is flagged as unsafe. This call ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41676

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-41675

📊 Score: 8.8/10 (CVSS v3.1)
📦 Product: fickling
🏢 Vendor: trailofbits
📅 Updated: 2026-07-04

📝 Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because these modules are absent from the denylist, fickling's c...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41675

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-41674

📊 Score: 5.3/10 (CVSS v3.1)
📦 Product: RT-Thread, RT-Thread, RT-Thread
📅 Updated: 2026-07-04

📝 A flaw has been found in RT-Thread up to 5.2.2. Affected is the function read/write/sys_ioctl of the file components/lwp/lwp_syscall.c of the component Parameter Handler. Executing a manipulation can lead to divide by zero. The attack may be launched r...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41674

#cybersecurity #infosec #euvd #cve #vulnerability

🟠 CVE-2025-71343 - High (8.1)

picklescan before 0.0.30 fails to detect malicious pickle files that exploit lib2to3.pgen2.pgen.ParserGenerator.make_label function in the reduce method. Attackers can craft malicious pickle files with embedded code that evades detection but execu...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71343/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2025-71343

🟠 CVE-2025-71345 - High (8.1)

picklescan before 0.0.30 fails to detect malicious pickle files that invoke torch.utils.bottleneck.__main__.run_autograd_prof function. Attackers can embed undetected code in pickle files that executes during deserialization, enabling remote code ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71345/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2025-71345

🟠 CVE-2025-71347 - High (8.1)

picklescan before 0.0.33 fails to detect malicious pickle files using numpy.f2py.crackfortran.param_eval function in reduce methods, allowing attackers to bypass security checks. Remote attackers can embed undetected code in pickle files that exec...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-71347/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2025-71347

JadePuffer: The First Agentic Ransomware — AI Automates the Entire Kill Chain https://deafnews.it/en/article/jadepuffer-the-first-agentic-ransomware-ai-automates-the-entire-kill-chain #Cybersecurity

Flatbush Zombies’ Erick the Architect misses his BlackBerry keyboard

That is the face of a man who enjoys what he does. | Image: Reato Morris Erick the Architect is a founding member of, and the primary producer for, the legendary Flatbush Zombies. He's toured the world, performed on Kim…

https://www.theverge.com/entertainment/960958/flatbush-zombies-erick-the-architect-interview

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ Crafty Phishing Campaigns Auto-Adapt to Victim's Device, OS
🔗 https://www.darkreading.com/application-security/phishing-campaigns-auto-adapt-victims-device-os

Attackers fingerprint victims through user-agent data to deliver OS-specific payloads, increasing compromise rates and campaign profitability.

🎣 Phishing Spotlight

login[.]microsoftsupport[.]cloud

🔗 https://beesint.com/pulse/a72e0ea3-627c-41b0-8f95-71c1b4cc0078

#OSINT #Phishing #ThreatIntel #CyberSecurity

💾 🟠 Moody Bible Institute (moody.edu)
✓ Verified
📊 ~2.3M records compromised
📂 Dates of birth, Email addresses, Genders, Marital statuses +3 more
📅 2026-06-15 · disclosed 18d after incident
🌐 cloudflare
⚠️ No SPF/DMARC configured

🔗 https://beesint.com/pulse/3a83792c-2031-4565-9708-cd24eabb8602

#OSINT #DataBreach #HaveIBeenPwned #InfoSec #CyberSecurity

IBM Patches High-Severity XSS Flaws in WebSphere Application Server

IBM released security updates for WebSphere Application Server to fix three cross-site scripting vulnerabilities, including a high-severity flaw on the login page that allows attackers to hijack administrative sessions.

**Restrict access to your WebSphere administrative console so it's only reachable from trusted internal networks, and enable multi-factor authentication on all admin accounts. Then apply IBM's interim fix for APAR PH71757 ASAP, and plan to upgrade to Fix Pack 9.0.5.29 (for version 9.0) or 8.5.5.30 (for version 8.5) as soon as they're released.**
#cybersecurity #infosec #advisory #vulnerability
https://beyondmachines.net/event_details/ibm-patches-high-severity-xss-flaws-in-websphere-application-server-a-s-e-6-q/gD2P6Ple2L

Cacti: 45 CVEs, avg CVSS 7.19, max 10. 100% unpatched. 1 CISA KEV exploited. Trust Score: D. Open-source network monitor needs urgent patching. #Cacti #infosec #cybersecurity

https://www.valtersit.com/vendors/cacti/

5 Android phones you should buy instead of the Moto G Power (2026)

It's not the only option for $400.

https://www.androidauthority.com/motorola-moto-g-power-2026-alternatives-3682487/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

#chrome extension kakgeonhimhojdncehlopejkfaapboeo seems malicious. Its #cybersecurity badness score is 92/100!

```json
{"id": "kakgeonhimhojdncehlopejkfaapboeo", "score": 92, "platform": "chrome", "name": "kakgeonhimhojdncehlopejkfaapboeo"}
```

Jak szybko przejść od rzucania oskarżeń do zablokowania rozmówcy? Krótka historia mojej dyskusji z profilem @czynna.

Wszystko zaczęło się od ich głośnych zapowiedzi o masowej inwigilacji. Z czystej ciekawości zacząłem dopytywać w komentarzach o techniczne szczegóły i dowody. Druga strona przy każdym pytaniu regularnie stosowała klasyczne „przesuwanie bramki". Uciekali od konkretów i serwowali wyłącznie ogólniki, linki promocyjne czy screeny z darmowych wtyczek do przeglądarki.

Gdy nadal czekałem na jakiekolwiek konkrety, wrzuciłem u siebie luźny wpis o Open’erze. Pokazałem w nim ludziom, że przed opisywanym profilowaniem można obronić się samemu w ustawieniach telefonu, i oznaczyłem w tym poście drugą stronę. Efekt? Zamiast odpowiedzi na techniczne pytania, dostałem po prostu natychmiastową blokadę konta.

Szkoda, bo liczyłem na poważną debatę o prywatności. Okazało się jednak, że chęć kręcenia dramy wygrała z otwartością na merytoryczne pytania. Mam mimo wszystko nadzieję, że kiedyś jeszcze doczekam się konkretnej odpowiedzi na moje pytania.

#Infosec #Privacy #Prywatnosc #Cybersecurity #OSINT #MastodonPl #MovingTheGoalposts #Opener #Opener2026

Alt...

Rozmowa ze Stroną Czynną