This brief covers the trailing ~48 hours (August 5–7, 2026). Every item below was verified against its primary source — vendor advisory, CISA KEV entry, or original research — before inclusion.

Hackers begin exploiting JetBrains TeamCity RCE (CVE-2026-63077); CISA adds it to KEV

CISA / JetBrains · August 5, 2026

Threat actors are actively exploiting CVE-2026-63077 (CVSS 9.8), a deserialization-of-untrusted-data flaw in JetBrains TeamCity On-Premises that allows unauthenticated remote code execution via HTTP/S requests. CISA added the bug to its Known Exploited Vulnerabilities catalog on Wednesday, roughly a week after disclosure, giving federal agencies three days to patch under BOD 26-04. Fixes are available in TeamCity 2025.11.7 and 2026.1.3, plus a security patch plugin for 2017.1+.

“An unauthenticated attacker could exploit the vulnerability via the TeamCity agent polling protocol.” — JetBrains

Source: CISA KEV catalog · SecurityWeek

CISA flags exploited Langflow, Apache Tomcat, and N-able N-central flaws; Tomcat attacks tied to AI-driven campaign

CISA / Palo Alto Networks Unit 42 · August 5, 2026

CISA added three actively exploited vulnerabilities to the KEV catalog: CVE-2026-9198 (CVSS 9.8), an unauthenticated code-injection RCE in Langflow fixed in version 1.10.1; CVE-2026-34486 (CVSS 7.5), an EncryptInterceptor bypass in Apache Tomcat fixed in 11.0.21, 10.1.54, and 9.0.117; and CVE-2026-18556 (CVSS 8.2), an authentication bypass in N-able N-central whose incomplete fix spawned CVE-2026-18577, itself added to KEV earlier in the week. Unit 42 attributes exploitation of the Tomcat flaw to a Zhuhai-based, Chinese-speaking actor using DeepSeek via the Hermes Agent framework as an autonomous offensive operator. Federal agencies have until August 7 to remediate.

“This actor attempted to exploit over 460 targets, leveraging a mix of autonomous and manual techniques.” — Palo Alto Networks Unit 42

Source: CISA alert · The Hacker News

ChainDrop supply-chain attack infects 440 npm packages with Mini Shai-Hulud worm

Microsoft / JFrog / Socket · August 5, 2026

More than 2,200 malicious versions of 440 npm packages were published in the ChainDrop campaign, which began with the compromise of a maintainer account in the keyv and cacheable namespaces — packages with a combined 500+ million weekly downloads. The self-propagating worm, a descendant of Shai-Hulud 2.0, steals npm, GitHub, cloud, and Vault credentials, republishes poisoned package versions, uses Ethereum-based C2 (EtherHiding), and installs a dead-man’s switch that wipes itself if the stolen GitHub token is revoked. Affected developers should treat machines as compromised, rebuild CI runners, and rotate credentials.

“Once executed, the malware searches developer workstations and continuous integration and continuous delivery (CI/CD) environments for NPM, GitHub, cloud, and infrastructure credentials.” — Microsoft

Source: Microsoft · JFrog · SecurityWeek

Cisco ships critical Catalyst SD-WAN hardening release: three CVSS 9.9 flaws, no workarounds

Cisco PSIRT · August 5, 2026

Cisco’s August 5 advisory bundle addresses five vulnerability classes in Catalyst SD-WAN Software, three rated CVSS 9.9: CVE-2026-20303 (improper input validation/path traversal), CVE-2026-20304 (improper access control), and CVE-2026-20310 (improper link resolution), plus CVE-2026-20312 (8.8) and CVE-2026-20313 (7.7). All deployment types are affected, there are no workarounds, and fixed releases start at 20.9.10 through 26.1.2. The flaws were found internally and are not known to be exploited; the same publication window also included critical IOS XE and FMC fixes.

“These vulnerabilities were found during internal security testing using existing testing processes as well as frontier AI models.” — Cisco PSIRT advisory

Source: Cisco advisory · SecurityWeek

CVSS 10.0 authorization bypass in Paperclip AI agent platform allowed unauthenticated RCE (CVE-2026-41679)

Oasis Security · August 6, 2026

Oasis Security disclosed CVE-2026-41679 (CVSS 10.0), a missing authorization check in Paperclip, an AI agent orchestration platform. On default authenticated-mode deployments, a remote attacker could self-register without email verification, self-approve a CLI authorization challenge for board-level API access, then import a crafted company bundle whose .paperclip.yaml deploys an agent that executes host commands as the server process. Patched in v2026.416.0 along with two related bugs, including a DNS-rebinding-on-loopback flaw enabling code execution on developer machines; no exploitation in the wild has been reported.

“A network attacker could create an account and sign in immediately, without an invitation or control of a verified mailbox.” — Oasis Security

Source: Oasis Security technical report (PDF) · SecurityWeek

This brief covers the trailing ~48 hours (August 5–7, 2026). Primary sources: CISA KEV catalog, CISA KEV alert, Cisco PSIRT, Microsoft Security Blog, JFrog Research, Socket, Unit 42, Oasis Security.

This brief covers cyber security developments from the trailing ~48 hours (July 30 – August 1, 2026). Every item below was verified against its primary source — vendor advisory, government alert, or original research — before inclusion.

CosmosEscape: Wiz researchers could have taken over every Azure Cosmos DB database

Wiz Research · July 30, 2026

Wiz Research disclosed CosmosEscape, a critical vulnerability chain in Azure Cosmos DB’s Gremlin API. By escaping the Gremlin query sandbox via .NET reflection, researchers gained code execution on the multi-tenant DB Gateway and extracted a platform-wide signing secret they dubbed the “Cosmos Master Key” — capable of retrieving the primary key of any Cosmos DB account across all tenants, regions, and API flavors. No CVE ID or CVSS score was assigned to this cloud-service flaw. Microsoft deployed a hotfix within 48 hours of the November 2025 report, completed a permanent architectural fix across all regions in July 2026, and found no evidence of exploitation or customer data access. No customer action is required.

“It was a platform-wide key that could retrieve the primary key for any Cosmos DB account on the service, all through publicly accessible endpoints.” — Wiz Research

Source: Wiz Research blog · SecurityWeek

CISA urges water utilities to pull exposed PLCs offline after coordinated attacks on 30+ Minnesota systems

CISA · July 30, 2026

CISA issued an alert warning of a significant increase in threat activity targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector. The alert follows a coordinated cyberattack on more than 30 Minnesota community water systems that state officials suspect may be linked to Iran; attackers changed PLC passwords to lock out operators, modified IP addresses to disconnect devices, and disrupted operations, forcing some utilities to switch to manual operation. CISA specifically flagged undocumented cellular modems as a common blind spot and pointed Rockwell Automation MicroLogix 1400 owners to vendor recovery guidance. Censys estimates more than 4,100 Rockwell/Allen-Bradley hosts, 4,100 Siemens hosts, and over 2,000 Schneider Electric hosts are currently reachable from the public internet.

“CISA urges critical infrastructure owners, operators, and integrators to remove publicly exposed PLCs and other operational technology (OT) from the internet as soon as possible.” — CISA alert, July 30, 2026

Source: CISA alert · BleepingComputer

Sophos: Microsoft Teams vishing campaign STAC4749 deployed Chaos ransomware in under 17 hours

Sophos · July 30, 2026

Sophos detailed STAC4749, a Teams voice-phishing campaign that targeted dozens of North American organizations between February and June 2026 — roughly 95% in Canada (50%) and the U.S. (44%). Operators posed as IT helpdesk staff from “.top” domains like info-secure[.]top, talked victims into Quick Assist or RemSupp remote sessions, then deployed a custom loader, a Python backdoor, and Golang C2 implants with pinned certificates. At least three intrusions ended in Chaos ransomware deployment; in one case, initial access to encryption took less than 17 hours. Most scam calls lasted just two to two-and-a-half minutes.

“Given the short interval between initial access and encryption, Sophos analysts assess with high confidence that STAC4749 was a financially motivated operation that either directly deployed ransomware or coordinated with affiliates.” — Sophos

Source: Sophos threat research · BleepingComputer

Still developing

Cisco patches actively exploited Secure FMC zero-day CVE-2026-20316; KEV deadline was August 1

Cisco / CISA · July 29, 2026

Cisco released patches for CVE-2026-20316, a static-credential vulnerability in Secure Firewall Management Center that lets a remote, unauthenticated attacker log into devices using default credentials for a low-privilege account and access sensitive data. Cisco rates it high severity, confirmed active exploitation observed in July, and published indicators of compromise; the flaw can be chained with other FMC bugs to escalate privileges. CISA added it to the Known Exploited Vulnerabilities catalog on July 29 with a remediation deadline of August 1 for federal agencies. Discovery is credited to a Horizon3.ai researcher.

“If the FMC management interface does not have public internet access, the attack surface that is associated with this vulnerability is reduced.” — Cisco security advisory

Source: Cisco advisory · CISA KEV alert · SecurityWeek

Russian group TA488 exploits Exchange OWA flaw CVE-2026-42897 to plant OWAReaper implant

Proofpoint · July 29, 2026

Proofpoint reported that Russia-aligned TA488 (Void Blizzard / Laundry Bear) began a campaign on July 22 exploiting CVE-2026-42897, a cross-site scripting flaw in Outlook Web Access that Microsoft patched in June 2026, against US and European government entities plus telecom, financial, hospitality, and aerospace targets. Opening a crafted email is enough to execute OWAReaper, a browser-resident JavaScript implant that steals autofill credentials and OAuth tokens, grants mailbox-wide folder permissions to the tenant’s “Default” user, and persists in OWA settings and the offline message cache. Campaign infrastructure dates to March 2026 — two months before Microsoft’s out-of-band patch — suggesting possible zero-day use.

“This persistent access lives on the server-side and requires deliberate removal from the Exchange server; credential rotation and even full re-imaging of the targeted user’s device will not evict the actor.” — Proofpoint Threat Research

Source: Proofpoint threat research · NVD entry · BleepingComputer

This brief covers the trailing ~48 hours (July 30 – August 1, 2026). Primary sources: Wiz Research, CISA Alert (Jul 30), Sophos, Cisco PSIRT, CISA KEV (Jul 29), Proofpoint.

This brief covers the trailing ~48 hours (July 24–26, 2026). Every item below was checked against its primary advisory, vendor PSIRT, original research write-up, or the CISA KEV catalog, and the disclosure or publication date was confirmed to fall within (or, for the “Still developing” section, just outside) the window.

Researchers publish working GitLab RCE chain from two five-year-old Oj memory-corruption bugs

depthfirst · July 24, 2026

depthfirst detailed — and released proof-of-concept code for — a remote code execution chain against default self-managed GitLab, built by combining two memory-safety flaws in Oj, the native-C Ruby JSON parser used by GitLab’s Jupyter notebook diff renderer. An authenticated user who can push to a project commits a crafted .ipynb file and opens its commit diff, driving repository-controlled bytes into Oj inside a Puma worker; an out-of-bounds write plus a heap-pointer disclosure are chained to hijack a callback pointer and reach system(), executing commands as the git account. The chain affects GitLab CE/EE 15.2.0 through 18.10.7, 18.11.0 through 18.11.4, and 19.0.0 through 19.0.1 (fixed in 18.10.8, 18.11.5, and 19.0.2 by upgrading to Oj 3.17.3, shipped June 10). GitLab did not file the underlying fix as a security fix, so there is no CVE or CVSS for the chain itself; the broader Oj review produced nine published advisories including CVE-2026-54502, CVE-2026-54896, and CVE-2026-54903. No in-the-wild exploitation was reported at publication.

“A normal authenticated user who could push to a project and view its commit diff could reach this path from their own project. Exploitation required no administrator privileges, CI or runner access, victim interaction, or access to another user’s project.” — Yuhang Wu, depthfirst

Source: depthfirst research · GitLab 19.0.2 patch release · The Hacker News

“Certighost” exploit lets a low-privileged AD user impersonate a Domain Controller (CVE-2026-54121)

Microsoft MSRC / independent researchers · July 24, 2026

Researchers H0j3n and Aniq Fakhrul published a working exploit for an Active Directory Certificate Services flaw they codenamed Certighost, tracked as CVE-2026-54121 (CVSS 8.8, improper authorization), which Microsoft patched on July 14. The bug lives in the AD CS enrollment “chase” fallback: an Enterprise CA follows a requester-supplied Domain Controller host over SMB and LDAP without first proving it is a real DC, letting a normal domain account obtain a certificate for a Domain Controller and authenticate as that machine via PKINIT. Because DC accounts carry directory-replication rights, the resulting Kerberos credential can retrieve the krbtgt secret through DCSync. Exploitation needs only network access and a domain account (no admin rights, no user interaction), and the full PoC is public. The flaw was not on CISA’s KEV catalog as of July 24, and no primary source reviewed reported in-the-wild exploitation.

“As of July 24, no primary source reviewed by The Hacker News reported exploitation in the wild, but the full proof-of-concept was public. That absence of reporting does not prove that exploitation has not occurred.” — The Hacker News

Source: Microsoft MSRC advisory · NVD · The Hacker News

Fastjson 1.x RCE (CVE-2026-16723) reported under active attack with no 1.x patch available

Alibaba advisory / ThreatBook / Imperva · advisory July 21, exploitation reported July 22–25, 2026

Alibaba published an advisory for CVE-2026-16723 (Alibaba-assigned CVSS 9.0), a critical RCE in the Fastjson 1.x Java JSON library affecting versions 1.2.68 through 1.2.83. In a Spring Boot executable fat-JAR application, an attacker-controlled @type value can be turned into a class-resource lookup that fetches attacker-controlled bytecode, yielding unauthenticated code execution with the privileges of the Java process; the maintainers confirmed the chain requires no AutoType enablement and no classpath gadget. ThreatBook reported capturing in-the-wild exploitation on July 22, and Imperva reported activity against U.S. financial-services, healthcare, and retail organizations. As of July 25 no fixed Fastjson 1.x artifact was available — mitigations are enabling SafeMode (-Dfastjson.parser.safeMode=true) or using the 1.2.83_noneautotype build, with migration to Fastjson2 as the long-term fix. Note: a July 23 CISA-ADP assessment marked exploitation as “none,” and the flaw was absent from CISA’s KEV catalog on July 25.

“As of July 25, Alibaba had not released a fixed Fastjson 1.x version.” — The Hacker News

Source: Alibaba advisory · NVD · The Hacker News

Still developing

Cl0p-linked actors chain unauthenticated RCE against internet-exposed PTC Windchill / FlexPLM (CVE-2026-12569)

Ransom-ISAC / PTC · July 25, 2026

A coordinated advisory from Ransom-ISAC, eCrime.ch, and DEFUSED describes a data-extortion campaign, with tradecraft attributed to Cl0p (aka FIN11 / Graceful Spider / Lace Tempest), against internet-exposed PTC Windchill and FlexPLM. Attackers chain a pre-authentication information disclosure in the FlexPLM WSDL endpoint (CVSS 7.5) with a server-side flaw in the Windchill login servlet, CVE-2026-12569 (CVSS 9.3), which CISA added to its KEV catalog in late June. Successful exploitation yields unauthenticated RCE and hex-named JSP web shells under /Windchill/login/, followed by staging and double-extortion theft of engineering and design data across manufacturing, automotive, aerospace, and retail targets.

“Attackers chain a pre-authentication information disclosure in the FlexPLM WSDL endpoint with a server-side flaw in the Windchill login servlet, enabling unauthenticated remote code execution and deployment of hex-named JSP web shells under /Windchill/login/.” — Ransom-ISAC / eCrime.ch / DEFUSED advisory

Source: Ransom-ISAC advisory · The Hacker News

This brief covers the trailing ~48 hours (July 24–26, 2026).

Primary sources:

• depthfirst — GitLab RCE via two Ruby memory-corruption vulnerabilities
• GitLab — June 10 patch release (19.0.2 / 18.11.5 / 18.10.8)
• Microsoft MSRC — CVE-2026-54121
• NVD — CVE-2026-54121
• Alibaba — Fastjson 1.x RCE advisory (CVE-2026-16723)
• NVD — CVE-2026-16723
• Ransom-ISAC — Cl0p Windchill/FlexPLM exploitation advisory
• CISA — Known Exploited Vulnerabilities Catalog