Breaking News – Cyber Threats (last 6h)
Generated: 2026-07-15 03:00 PDT
- CISA warns admins to patch actively exploited SharePoint flaws
BleepingComputer • 2026-07-15 02:44 • www.bleepingcomputer.com
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned Tuesday that attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances. […]
https://www.bleepingcomputer.com/news/security/cisa-warns-admins-to-patch-actively-exploited-sharepoint-flaws/ - Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware
The Hacker News • 2026-07-15 02:16 • thehackernews.com
Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, SafeDep, Socket, and StepSecurity.The affected packages are listed below –
@asyncapi/generator-helpers@1.1.1
@asyncapi/generator-components@0.7.1
@asyncapi/generator@3.3.1
@asyncapi/specs(v6.11.2, v6.11.2-alpha.1)“The
https://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.html - Microsoft: Some Dell PCs shut down after recent Windows updates
BleepingComputer • 2026-07-15 01:26 • www.bleepingcomputer.com
Microsoft is blocking this month’s Windows 11 security updates on some Dell devices because they are causing shutdowns and performance issues. […]
https://www.bleepingcomputer.com/news/microsoft/microsoft-some-dell-devices-shut-down-after-windows-update/ - US charges alleged operators of Russian bulletproof hosting service
BleepingComputer • 2026-07-15 00:45 • www.bleepingcomputer.com
U.S. federal prosecutors have unsealed charges against three Russian nationals, accusing them of providing bulletproof hosting (BPH) services to ransomware gangs that caused over $62 million in damages to victims worldwide. […]
https://www.bleepingcomputer.com/news/security/us-charges-alleged-russian-bulletproof-hosting-service-operators/ - Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands
The Hacker News • 2026-07-14 22:30 • thehackernews.com
SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appliances, one of which could be exploited to achieve arbitrary command execution.The vulnerabilities are listed below –
CVE-2026-15409 (CVSS score: 10.0) – A Server-side request forgery (SSRF) vulnerability that a remote unauthenticated attacker could exploit to
https://thehackernews.com/2026/07/two-sonicwall-sma-1000-zero-days.html
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
