Archive snapshot

Fri, Jul 10 · 12:00 PM CDT

Archived briefing content rendered inside the ACSP site experience.

Back to archive

Archived briefing

Snapshot overview

Generated Fri, Jul 10 · 12:00 PM CDTWindow last 6 hours

Top line

Coverage now updates on a rolling 6-hour window, while NVD entries come from the live API using a last-24-hours modified window and are sorted by severity.

Fast take

News stays on the current 6-hour slice, videos now use the last 24 hours, and NVD uses the API instead of the traditional feed to better match the live site behavior.

Top stories

5

Worth skimming

5

Tracked videos

3

NVD vulnerabilities

25

Top stories

Fri, Jul 10 · 12:00 PM CDT

Microsoft Warns New 'GigaWiper' Malware Combines Espionage and Destructive Capabilities

9.8/10 · Must read/watch

Infosecurity Magazinemalware

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗

Fri, Jul 10 · 12:00 PM CDT

Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn

9.8/10 · Must read/watch

Infosecurity Magazineai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗

Fri, Jul 10 · 12:00 PM CDT

New Ransomware Exploits Malicious Driver to Remove Cybersecurity Protections

9.8/10 · Must read/watch

Infosecurity Magazinevulnmalware

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗

Fri, 10 Jul 2026 19:49:50 +0530

Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws

9.4/10 · Must read/watch

The Hacker Newsvulnaiidentity

Summary
Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that, if successfully exploited, could enable credential theft, privilege escalation, and arbitrary code execution on the host. A brief

Open article ↗

Fri, Jul 10 · 07:00 AM CDT

EU Commission: addictive design Instagram and Facebook in breach of the DSA

8.8/10 · Worth your time

Hacker Newsgeneral

Summary
Surfaced from Hacker News front page during collection run. Freshness on HN: 5 hours ago.

Open article ↗

Worth skimming

Fri, Jul 10 · 12:00 PM CDT

CISA Details Incident Response to Exposed AWS GovCloud Keys

8.7/10 · Worth your time

Infosecurity Magazineai

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗

Fri, 10 Jul 2026 20:21:49 +0530

Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched

8.7/10 · Worth your time

The Hacker Newsvulnai

Summary
Researchers at Ledger's Donjon security team have shown that a precisely timed laser pulse, aimed at the chip inside a Tangem crypto wallet card, can reset the card's password to anything the attacker picks. No old password. No backup card. Once it i

Open article ↗

Fri, 10 Jul 2026 17:17:43 +0530

Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers

8.7/10 · Worth your time

The Hacker Newsvuln

Summary
A single wrong variable on one line in XQUIC, Alibaba's QUIC and HTTP/3 library, lets any remote client crash the server with a short burst of completely legal traffic. There is no patch. FoxIO researcher Sébastien Féry disclosed the flaw on July 8 a

Open article ↗

Fri, 10 Jul 2026 18:45:23 +0530

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

8.1/10 · Worth your time

The Hacker Newsai

Summary
The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called MODBEACON. Chinese cybersecurity company QiAnXin said that while the threat cluster may appear like a low-sophistication, high-activ

Open article ↗

Fri, 10 Jul 2026 17:09:40 +0530

From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale

8.1/10 · Worth your time

The Hacker Newsgeneral

Summary
Most enterprises assume their asset inventory is close enough to accurate. The evidence suggests otherwise. According to a survey of over 600 security leaders in the 2026 Axonius Actionability Report, only 45% of organizations consolidate their asset and expos

Open article ↗

Videos worth watching

Fri, Jul 10 · 10:01 AM CDT

Fake Microsoft Installer

8.2/10 · Worth your time

YouTube / John Hammondgeneral

Why it matters
Recent creator upload with some page-level evidence. Better than raw feed discovery, but still not a full content review.

Worth watching?Maybe — good candidate if the title matches your interests, but confidence is still moderate.

Confidencelow

Open article ↗

Fri, Jul 10 · 09:00 AM CDT

Inside the Cisco Live 2026 NOC (exclusive tour)

7.8/10 · Worth your time

YouTube / David Bombalgeneral

Why it matters
Recent creator upload with some page-level evidence. Better than raw feed discovery, but still not a full content review.

Worth watching?Maybe — good candidate if the title matches your interests, but confidence is still moderate.

Confidencelow

Open article ↗

Thu, Jul 09 · 12:30 PM CDT

See you at Black Hat USA 2026!

7.6/10 · Worth your time

YouTube / John Hammondgeneral

Why it matters
Recent creator upload with some page-level evidence. Better than raw feed discovery, but still not a full content review.

Worth watching?Maybe — good candidate if the title matches your interests, but confidence is still moderate.

Confidencelow

Open article ↗

NVD vulnerabilities

Fri, May 22 · 04:16 AM CDT

CVE-2026-46595

10.0/10 · Must read/watch

NVDvuln

Summary
Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.

CVECVE-2026-46595

SeverityCRITICAL

TypeUPDATED

PublishedFri, May 22 · 04:16 AM CDT

ModifiedThu, Jul 09 · 01:17 PM CDT

Open article ↗

Thu, Apr 09 · 03:16 PM CDT

CVE-2025-62718

9.9/10 · Must read/watch

NVDvuln

Summary
Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.0 and 0.31.0, Axios does not correctly handle hostname normalization when checking NO_PROXY rules. Requests to loopback addresses like localhost. (with a trailing dot) or [::1] (IPv6 literal) skip NO_PROXY matching and go through the config

CVECVE-2025-62718

SeverityCRITICAL

TypeUPDATED

PublishedThu, Apr 09 · 03:16 PM CDT

ModifiedThu, Jul 09 · 01:16 PM CDT

Open article ↗

Fri, May 15 · 05:16 PM CDT

CVE-2026-44774

9.9/10 · Must read/watch

NVDvuln

Summary
Traefik is an HTTP reverse proxy and load balancer. Prior to 2.11.46, 3.6.17, and 3.7.1, Traefik's Kubernetes Gateway API provider allows a tenant with HTTPRoute creation permissions to expose the REST provider handler, bypassing the providers.rest.insecure=false setting. The Gateway provider accepts any TraefikService

CVECVE-2026-44774

SeverityCRITICAL

TypeUPDATED

PublishedFri, May 15 · 05:16 PM CDT

ModifiedThu, Jul 09 · 01:17 PM CDT

Open article ↗

Mon, Oct 12 · 02:15 PM CDT

CVE-2020-26867

9.8/10 · Must read/watch

NVDvuln

Summary
ARC Informatique PcVue prior to version 12.0.17 is vulnerable due to the deserialization of untrusted data, which may allow an attacker to remotely execute arbitrary code on the web and mobile back-end server.

CVECVE-2020-26867

SeverityCRITICAL

TypeUPDATED

PublishedMon, Oct 12 · 02:15 PM CDT

ModifiedThu, Jul 09 · 06:32 PM CDT

Open article ↗

Fri, Nov 05 · 10:15 AM CDT

CVE-2021-42237

9.8/10 · Must read/watch

NVDvuln

Summary
Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required to exploit this vulnerability.

CVECVE-2021-42237

SeverityCRITICAL

TypeUPDATED

PublishedFri, Nov 05 · 10:15 AM CDT

ModifiedThu, Jul 09 · 01:57 PM CDT

Open article ↗

Mon, Mar 28 · 12:15 AM CDT

CVE-2022-26258

9.8/10 · Must read/watch

NVDvuln

Summary
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.

CVECVE-2022-26258

SeverityCRITICAL

TypeUPDATED

PublishedMon, Mar 28 · 12:15 AM CDT

ModifiedThu, Jul 09 · 01:57 PM CDT

Open article ↗

Mon, May 04 · 05:16 PM CDT

CVE-2026-24781

9.8/10 · Must read/watch

NVDvuln

Summary
vm2 is an open source vm/sandbox for Node.js. Prior to version 3.11.0, VM2 suffers from a sandbox breakout vulnerability through the inspect function. This allows attackers to write code which can escape from the VM2 sandbox and execute arbitrary commands on the host system. This issue has been patched in version 3.11.

CVECVE-2026-24781

SeverityCRITICAL

TypeUPDATED

PublishedMon, May 04 · 05:16 PM CDT

ModifiedThu, Jul 09 · 01:16 PM CDT

Open article ↗

Tue, May 05 · 10:16 PM CDT

CVE-2026-28780

9.8/10 · Must read/watch

NVDvuln

Summary
Heap-based Buffer Overflow vulnerability in mod_proxy_ajp of Apache HTTP Server. If mod_proxy_ajp connects to a malicious AJP server this AJP server can send a malicious AJP message back to mod_proxy_ajp and cause it to write 4 attacker controlled bytes after the end of a heap based buffer. This issue affects Apache HT

CVECVE-2026-28780

SeverityCRITICAL

TypeUPDATED

PublishedTue, May 05 · 10:16 PM CDT

ModifiedThu, Jul 09 · 01:16 PM CDT

Open article ↗

Fri, Mar 06 · 07:16 PM CST

CVE-2026-29063

9.8/10 · Must read/watch

NVDvuln

Summary
Immutable.js provides many Persistent Immutable data structures. Prior to versions 3.8.3, 4.3.7, and 5.1.5, Prototype Pollution is possible in immutable via the mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject() APIs. This issue has been patched in versions 3.8.3, 4.3.7, and 5.1.5.

CVECVE-2026-29063

SeverityCRITICAL

TypeUPDATED

PublishedFri, Mar 06 · 07:16 PM CST

ModifiedThu, Jul 09 · 01:16 PM CDT

Open article ↗

Tue, Apr 07 · 04:16 PM CDT

CVE-2026-33815

9.8/10 · Must read/watch

NVDvuln

Summary
Memory-safety vulnerability in github.com/jackc/pgx/v5.

CVECVE-2026-33815

SeverityCRITICAL

TypeUPDATED

PublishedTue, Apr 07 · 04:16 PM CDT

ModifiedThu, Jul 09 · 01:17 PM CDT

Open article ↗

Tue, Apr 07 · 04:16 PM CDT

CVE-2026-33816

9.8/10 · Must read/watch

NVDvuln

Summary
Memory-safety vulnerability in github.com/jackc/pgx/v5.

CVECVE-2026-33816

SeverityCRITICAL

TypeUPDATED

PublishedTue, Apr 07 · 04:16 PM CDT

ModifiedThu, Jul 09 · 01:17 PM CDT

Open article ↗

Wed, May 06 · 12:16 PM CDT

CVE-2026-43125

9.8/10 · Must read/watch

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: dlm: validate length in dlm_search_rsb_tree The len parameter in dlm_dump_rsb_name() is not validated and comes from network messages. When it exceeds DLM_RESNAME_MAXLEN, it can cause out-of-bounds write in dlm_search_rsb_tree(). Add length validation

CVECVE-2026-43125

SeverityCRITICAL

TypeUPDATED

PublishedWed, May 06 · 12:16 PM CDT

ModifiedThu, Jul 09 · 01:17 PM CDT

Open article ↗

Tue, Mar 24 · 12:16 AM CDT

CVE-2026-33211

9.6/10 · Must read/watch

NVDvuln

Summary
Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, the Tekton Pipelines git resolver is vulnerable to path traversal via the `pathInRepo` parameter. A tenant with permission to create `Resolut

CVECVE-2026-33211

SeverityCRITICAL

TypeUPDATED

PublishedTue, Mar 24 · 12:16 AM CDT

ModifiedThu, Jul 09 · 01:16 PM CDT

Open article ↗

Fri, May 22 · 04:16 PM CDT

CVE-2026-39821

9.6/10 · Must read/watch

NVDvuln

Summary
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a

CVECVE-2026-39821

SeverityCRITICAL

TypeUPDATED

PublishedFri, May 22 · 04:16 PM CDT

ModifiedThu, Jul 09 · 01:17 PM CDT

Open article ↗

Fri, Mar 20 · 11:16 PM CDT

CVE-2026-33186

9.1/10 · Must read/watch

NVDvuln

Summary
gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g.,

CVECVE-2026-33186

SeverityCRITICAL

TypeUPDATED

PublishedFri, Mar 20 · 11:16 PM CDT

ModifiedThu, Jul 09 · 01:16 PM CDT

Open article ↗

Fri, May 22 · 04:16 AM CDT

CVE-2026-39830

9.1/10 · Must read/watch

NVDvuln

Summary
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.

CVECVE-2026-39830

SeverityCRITICAL

TypeUPDATED

PublishedFri, May 22 · 04:16 AM CDT

ModifiedThu, Jul 09 · 01:17 PM CDT

Open article ↗

Fri, May 22 · 04:16 AM CDT

CVE-2026-39832

9.1/10 · Must read/watch

NVDvuln

Summary
When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. A

CVECVE-2026-39832

SeverityCRITICAL

TypeUPDATED

PublishedFri, May 22 · 04:16 AM CDT

ModifiedThu, Jul 09 · 01:17 PM CDT

Open article ↗

Fri, May 22 · 04:16 AM CDT

CVE-2026-42508

9.1/10 · Must read/watch

NVDvuln

Summary
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

CVECVE-2026-42508

SeverityCRITICAL

TypeUPDATED

PublishedFri, May 22 · 04:16 AM CDT

ModifiedThu, Jul 09 · 01:17 PM CDT

Open article ↗

Tue, Mar 17 · 03:16 PM CDT

CVE-2026-3564

9.0/10 · Must read/watch

NVDvuln

Summary
A condition in the ScreenConnect server component may allow an actor with access to server-level cryptographic material used for authentication to obtain unauthorized access, including elevated privileges, in certain scenarios. ScreenConnect host and guest client agents are not independently affected by this CVE.

CVECVE-2026-3564

SeverityCRITICAL

TypeUPDATED

PublishedTue, Mar 17 · 03:16 PM CDT

ModifiedThu, Jul 09 · 06:16 PM CDT

Open article ↗

Tue, Apr 03 · 03:44 AM CDT

CVE-2011-4042

9.3/10 · Must read/watch

NVDvuln

Summary
An unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code by using a crafted HTML document to obtain control of a function pointer.

CVECVE-2011-4042

SeverityHIGH

TypeUPDATED

PublishedTue, Apr 03 · 03:44 AM CDT

ModifiedThu, Jul 09 · 06:33 PM CDT

Open article ↗

Tue, Apr 03 · 03:44 AM CDT

CVE-2011-4043

9.3/10 · Must read/watch

NVDvuln

Summary
Integer overflow in an unspecified ActiveX control in SVUIGrd.ocx in ARC Informatique PcVue 6.0 through 10.0, FrontVue, and PlantVue allows remote attackers to execute arbitrary code via a large value for an integer parameter, leading to a buffer overflow.

CVECVE-2011-4043

SeverityHIGH

TypeUPDATED

PublishedTue, Apr 03 · 03:44 AM CDT

ModifiedThu, Jul 09 · 06:33 PM CDT

Open article ↗

Mon, Feb 15 · 01:15 PM CST

CVE-2021-25296

8.8/10 · Worth your time

NVDvuln

Summary
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the N

CVECVE-2021-25296

SeverityHIGH

TypeUPDATED

PublishedMon, Feb 15 · 01:15 PM CST

ModifiedThu, Jul 09 · 01:39 PM CDT

Open article ↗

Mon, Feb 15 · 01:15 PM CST

CVE-2021-25297

8.8/10 · Worth your time

NVDvuln

Summary
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI

CVECVE-2021-25297

SeverityHIGH

TypeUPDATED

PublishedMon, Feb 15 · 01:15 PM CST

ModifiedThu, Jul 09 · 01:39 PM CDT

Open article ↗

Mon, Feb 15 · 01:15 PM CST

CVE-2021-25298

8.8/10 · Worth your time

NVDvuln

Summary
Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagio

CVECVE-2021-25298

SeverityHIGH

TypeUPDATED

PublishedMon, Feb 15 · 01:15 PM CST

ModifiedThu, Jul 09 · 01:39 PM CDT

Open article ↗

Wed, Apr 08 · 02:16 AM CDT

CVE-2026-27140

8.8/10 · Worth your time

NVDvuln

Summary
SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass.

CVECVE-2026-27140

SeverityHIGH

TypeUPDATED

PublishedWed, Apr 08 · 02:16 AM CDT

ModifiedThu, Jul 09 · 01:16 PM CDT

Open article ↗

Ignore today

Generic low-detail roundups without primary reporting.
HN items that are interesting but not clearly security or AI relevant.
Creator videos that look more like promotion, podcast chatter, or evergreen content than time-sensitive signal outside the rolling window.