GoKawiil - Tech News

121.

'Certighost' Flaw Haunts Microsoft Active Directory Certificates (darkreading.com)

2026-07-28 | tags: microsoft, active directory, certighost

122.

vBulletin fixes critical pre-auth RCE flaw with public exploit (bleepingcomputer.com)

2026-07-28 | tags: vbulletin, cve-2026-61511, egidio romano

123.

Over 24,000 exposed server BMCs leak password hash via decades-old flaw (bleepingcomputer.com)

2026-07-28 | tags: bmc, cve-2013-4786, ipmi 2.0

124.

Agentic Browsers Rewind Web Security by 20 Years (darkreading.com)

2026-07-27 | tags: agentic browsers, web security, social engineering

125.

'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure (darkreading.com)

2026-07-27 | tags: google cloud, microsoft azure, confused deputy

126.

Security flaw in Vatican’s ‘Click to Pray’ app leaves over 700,000 global users exposed — app has been leaking user data for over six months and still does (tomshardware.com)

2026-07-25 | by Jowi Morales | tags: click to pray, vatican, api security

127.

Samsung keeps ignoring a hardware flaw with its foldables, and I’m sick of it (androidauthority.com)

2026-07-25 | tags: samsung, galaxy z fold 6, foldable phones

128.

Russian hackers exploit Zimbra zero-click flaw for email theft (bleepingcomputer.com)

2026-07-23 | tags: zimbra, laundry bear, cisa

129.

GoPro Wireless Mic System review: An audio upgrade with fixable flaws (engadget.com)

2026-07-23 | by James Trew | tags: gopro, wireless mic system, hero 12

130.

New RefluXFS Linux flaw lets attackers gain root privileges (bleepingcomputer.com)

2026-07-23 | tags: xfs filesystem, linux kernel, cve-2026-64600

131.

Flaws in Passkey Implementation Show Old Attacks Still Work (darkreading.com)

2026-07-22 | tags: passkey, microsoft, black hat usa

132.

New InfraTrust report reveals infrastructure flaws admins should patch first (bleepingcomputer.com)

2026-07-22 | tags: eclypsium, infratrust, cisa

133.

The Pixel Watch 5 could be perfect if Google just fixes one major flaw (androidauthority.com)

2026-07-22 | tags: pixel watch, google, android authority

134.

Adobe Chrome extension flaw let sites access private WhatsApp chats (bleepingcomputer.com)

2026-07-22 | tags: adobe, chrome, whatsapp

135.

CISA orders urgent action on actively exploited Langflow RCE flaw (bleepingcomputer.com)

2026-07-22 | tags: cisa, langflow, cve-2026-0770

136.

Critical SharePoint RCE flaw exploited to steal machine keys (bleepingcomputer.com)

2026-07-21 | tags: sharepoint, cve-2026-50522, machine keys

137.

Critical wp2shell WordPress flaws exploited to install webshells (bleepingcomputer.com)

2026-07-21 | tags: wordpress, wp2shell, webshells

138.

Windows LegacyHive zero-day flaw gets free, unofficial patches (bleepingcomputer.com)

2026-07-21 | tags: windows, legacyhive, microsoft defender

139.

Estée Lauder discloses data breach via Oracle E-Business flaw (bleepingcomputer.com)

2026-07-20 | tags: oracle e-business suite, estée lauder, data breach

140.

SonicWall SMA1000 flaws exploited as zero-days to push custom malware (bleepingcomputer.com)

2026-07-20 | tags: sonicwall, sma1000, cve-2026-15409

141.

7-Zip patches a flaw that could run malware just from opening a bad file (techspot.com)

2026-07-20 | by Alfonso Maruccia | tags: 7-zip, cve-2026-14266, xz data

142.

Critical ServiceNow code execution flaw now exploited in attacks (bleepingcomputer.com)

2026-07-20 | tags: servicenow, cve-2026-6875, defused

143.

Update now: 7-Zip fixes RCE flaw exploitable with malicious archives (bleepingcomputer.com)

2026-07-18 | tags: 7-zip, rce flaw, zero day initiative

144.

WordPress Core "wp2shell" RCE flaws get public exploits, patch now (bleepingcomputer.com)

2026-07-18 | tags: wordpress, wp2shell, cve-2026-63030

145.

Capital One releases VulnHunter, an open-source AI tool that finds software flaws before hackers do (venturebeat.com)

2026-07-17 | tags: capital one, vulnhunter, github

146.

HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload (bleepingcomputer.com)

2026-07-17 | tags: openssl, hollowbyte, ddos

147.

Robot vacuum flaw lets one stolen certificate run root commands on other Shark robovacs in the same AWS region — unpatched flaw exposes live camera feeds, stored home maps, and Wi-Fi credentials (tomshardware.com)

2026-07-17 | by Luke James | tags: shark iq robot vacuum, aws iot policy, sharkninja

148.

CISA urges immediate action on actively exploited Fortinet flaws (bleepingcomputer.com)

2026-07-17 | tags: fortinet, fortisandbox, cve-2026-39808

149.

Class action accuses Apple of misleading users about Hide My Email’s privacy protections (9to5mac.com)

2026-07-16 | by Marcus Mendes | tags: apple, hide my email, icloud+

150.

Claude Chrome extension flaw lets malicious extensions trigger AI actions (bleepingcomputer.com)

2026-07-16 | tags: claude, chrome extension, google docs