July 2026

Healthcare Software Provider Craneware Announces Data Breach 2026-07-21 at 18:05 By A software provider for the healthcare sector revealed it experienced a data breach.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC 2026-07-21 at 17:57 By A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr. The vulnerability in question is CVE-2026-50522 (CVSS score: 9.8), a critical deserialization of untrusted data in

Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities 2026-07-21 at 17:47 By Zimbra has rolled out fixes to address multiple critical security issues, including a command injection flaw in the Simple Network Management Protocol (SNMP) monitoring component. As many as nine security vulnerabilities have been patched in Zimbra 10.1.20. Topping the list is

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access 2026-07-21 at 17:04 By Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began with

N-day is Becoming N-Hour. Patching Faster Won’t Save You. 2026-07-21 at 16:30 By Every patch is a confession. The moment a vendor ships a security fix, the diff between the old code and the new code tells anyone watching exactly what was broken and where. Turn that diff back into a working exploit, and you

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit 2026-07-21 at 16:30 By A cloud tenant using nothing but ordinary GPU access can push a data center’s power draw up and down fast enough to threaten the grid it runs on, with no exploit and no break-in. That is the claim

79% of Ransomware Attacks Start with Compromised Identities 2026-07-21 at 16:00 By The most common method used to enact ransomware is the abuse of compromised credentials.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source