Cybersecurity & AI News

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install…

CVE-2026-55518

Avo: Missing Authorization in Avo Association Attach Endpoint Allows Unauthorized Relationship Manipulation and Privilege Escalation

CVE-2026-54498

view_component: around_render HTML-Safety Bypass

CVE-2026-54163

secure_headers: CSP directive injection via sandbox, plugin_types, and report_to when given untrusted input

CVE-2026-54242

Statamic: Server-Side Request Forgery via Glide (DNS rebinding)

CVE-2026-54243

Statamic: CSV formula injection in form submission exports

CVE-2026-54244

Statamic: Incorrect authorization lets view-only users submit Live Preview content reserved for editors

Third Kansas District Taps State Funds for AI Security

Third Kansas District Taps State Funds for AI Security  Campus Security Today

OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests

Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that…

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of…

HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload

HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload  BleepingComputer

Ernst & Young discloses data breach after support system hack

Ernst & Young discloses data breach after support system hack  BleepingComputer

Inside the Search for "Clean" Residential Proxies for Carding

Inside the Search for "Clean" Residential Proxies for Carding  BleepingComputer

Cloudastructure Reports 78% Q1 Revenue Growth, Expands AI Security Adoption Across Key Verticals

Cloudastructure Reports 78% Q1 Revenue Growth, Expands AI Security Adoption Across Key Verticals  Quiver Quantitative

OpenAI gets AI security boost with SoftBank Japan deployment

OpenAI gets AI security boost with SoftBank Japan deployment  SDxCentral

ISC Stormcast For Friday, July 17th, 2026

Rockwell Automation FactoryTalk DataMosaix

Rockwell Automation FactoryTalk DataMosaix  CISA (.gov)

CISA Urges SharePoint Hardening After New Exploitations

CISA Urges SharePoint Hardening After New Exploitations  CISA (.gov)

Siemens SICAM 8

Siemens SICAM 8  CISA (.gov)

ISC Stormcast For Thursday, July 16th, 2026

NYSNA Allege Montefiore Plans to Replace Some Nurses with AI Systems

The New York State Nurses Association (NYSNA) alleged Wednesday, July 1, that Montefiore Health System, a private hospital system operating…

THE BRONX NEEDS REAL NURSES, NOT AI!

Bronx, NY-- Montefiore is planning to lay off real nurses and replace them with artificial intelligence (AI)-powered software. These are…

AI-slop pages targeting the Geelong Cats, Meta asked to step in

The Cats have asked Facebook to take action against pages that are repeatedly posting false and malicious AI-generated content about…

Helping small businesses with free, hands-on cyber consultancy

Cyber Advisors are offering free 30-minute consultations to help small businesses get started with cyber security.

ISC Stormcast For Wednesday, July 15th, 2026

Microsoft Patches a Record 570 Security Flaws

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other…

Partner Portal

Partner Portal  Cyber.gov.au

Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting

Improve Router Hygiene to Protect Against Russian State-Sponsored Targeting  Cyber.gov.au

NSA, CISA, FBI, NCSC Warn Russian Hackers Are Targeting Internet-Facing Routers Worldwide

NSA, CISA, FBI, NCSC Warn Russian Hackers Are Targeting Internet-Facing Routers Worldwide  LinkedIn

NSA Warns Poorly Configured Routers Are Fueling Russian State-Sponsored Cyberattacks

NSA Warns Poorly Configured Routers Are Fueling Russian State-Sponsored Cyberattacks  cyberpress.org

Lessons Learned from CISA’s Recent GitHub Leak

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published…

UK and Allies urge critical sectors to improve defences against Russian intelligence targeting

New advisory highlights Russian state cyber actors’ global exploitation of poorly configured routers

UK and Allies urge critical sectors to improve defences against Russian intelligence targeting

UK and Allies urge critical sectors to improve defences against Russian intelligence targeting  National Cyber Security Centre

Frontier AI models and their impact on cyber security – an update on AI model harnesses

Frontier AI models and their impact on cyber security – an update on AI model harnesses  Cyber.gov.au

Cyber Essentials Pathways: from proof of concept to cyber confidence

An alternative path to Cyber Essentials Plus certification, without compromising the integrity of the scheme. 

Felons, Fraudsters Flog Offensive Cybersecurity Startup

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair…