ServiceNow AI Platform Just Got Pre-Auth RCE’d, Wild Exploits Started Friday
ServiceNow AI Platform pre-auth RCE (CVE-2026-6875, CVSS 9.5) hit 85% of Fortune 500. Wild exploits started July 18. ServiceNow still won’t confirm it.
Cybersecurity
SharePoint Zero-Day CVE-2026-58644, Why CISA Set a July 19 Deadline
SharePoint zero-day CVE-2026-58644 (CVSS 9.8) was exploited before Microsoft’s July 14 patch shipped. CISA deadline hits July 19. What admins need to do.
JadePuffer AI Ransomware Ran a Full Attack Without a Human
JadePuffer AI Ransomware ran a full attack with no human at keyboard. Sysdig details Langflow CVE-2025-3248, 31s self-correction, 1,342 configs hit.
Nissan Just Lost Employee SSNs to Oracle’s PeopleSoft Zero-Day
Nissan employee SSNs, banking data, tax records exposed via Oracle PeopleSoft zero-day CVE-2026-35273. ShinyHunters hit 300+ servers across 100 orgs May 27-Jun 9, 2026.
ShareFile Vulnerability Just Forced Progress to Kill Every Storage Zone
ShareFile vulnerability: Progress ordered customers to shut down Storage Zone Controllers over a credible threat, with no patch and no CVE.
Accenture Data Breach, 35GB of Source Code and Azure Keys Gone
Accenture data breach: ‘888’ claims 35GB of source code, RSA keys, and Azure tokens stolen. Accenture confirms an isolated incident on July 8, 2026.
AirDrop Just Left 5 Billion iPhones and Androids Wide Open
AirDrop vulnerability: CISPA researchers found 6 flaws in AirDrop and Quick Share affecting 5 billion iPhones and Androids. Zero-click crashes, sharingd takedowns, and what to change now.
How Mercor Lost 4TB of Biometrics, Then Waited 3 Months
Mercor 4TB breach: $10B AI startup Mercor hid a LiteLLM supply chain hack for 3 months. Passport scans, SSNs, biometrics, and Meta contract fallout, all in one timeline.
Gaslight Malware, the macOS Bug Trying to Trick AI Itself
Gaslight malware doesn’t just hide from antivirus software, it tries to convince AI analysis tools the investigation itself is broken. Here’s how it works.
LastPass Data Breach Again, What the Klue Hack Actually Exposed
LastPass data breach via the Klue hack exposed CRM data, not vaults. Here’s exactly what happened, who’s affected, and what to do next.