Security news.
Critical remote code execution and server-side request forgery flaws are facing active, in-the-wild exploitation across enterprise appliances and web infrastructure. Law enforcement operations also intensified today, yielding high-profile arrests tied to the ShinyHunters extortion group alongside major cybercrime plea deals. Meanwhile, supply chain and infrastructure threats continue to escalate, highlighted by physical cryptocurrency wallet tampering and mass credential-stealing campaigns.
SonicWall SMA 1000 Flaw Under Rapid Active Exploitation
Attackers are aggressively targeting CVE-2026-102255, a maximum-severity (CVSS 10.0) pre-authenticated SSRF vulnerability in SonicWall Secure Mobile Access appliances, just days after patches were issued.
CVSS 10.0 Bricksforge WordPress Plugin Flaw Exploited for RCE
Threat actors are actively exploiting CVE-2026-85097 in the Bricksforge WordPress plugin, allowing unauthenticated attackers to execute arbitrary PHP code and seize control of affected sites.
Cybersecurity Executive Arrested in ShinyHunters FBI Probe
Canadian ransomware response executive Edward Dubrovsky was taken into custody in the United States in connection with the FBI's ongoing investigation into the ShinyHunters extortion group.
Ledger Detects Hardware Implants in Reseller Wallets
Ledger has suspended device sales through reseller CryptoBilis after identifying unauthorized hardware tampering that resulted in over $86,000 in cryptocurrency theft across Southeast Asia.
Compromised Maintainers Push Malicious GitHub Actions to 340+ Repos
Threat actors hijacked prominent open-source maintainer accounts to deploy credential-harvesting GitHub Actions workflows across hundreds of repositories.
CyberXero AI Campaign Siphons 628,000 Ukrainian Records
Researchers uncovered an initial access campaign pairing Cobalt Strike with an AI orchestration layer powered by Claude Code to breach Ukrainian WordPress sites and critical infrastructure.
iRhythm Data Breach Affects 360,000 Patients
Digital healthcare provider iRhythm confirmed an intrusion where attackers stole sensitive personal information belonging to at least 360,000 individuals.