Breaking News – Cyber Threats (last 6h)
Generated: 2026-07-13 03:00 PDT
- US and allies warn of Russian critical infrastructure attacks
BleepingComputer • 2026-07-13 02:32 • www.bleepingcomputer.com
Cybersecurity agencies from the United States and eight other countries have issued a joint warning that Russian state hackers are targeting vulnerable and poorly configured routers to infiltrate critical infrastructure networks. […]
https://www.bleepingcomputer.com/news/security/us-and-allies-share-defense-tips-against-russian-hackers-targeting-critical-infrastructure/ - Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365
The Hacker News • 2026-07-13 00:30 • thehackernews.com
An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with directory listing switched on. The command that did it: python3 -m http.server 8080, was still sitting in the readable .bash_history.From that one lapse, French security firm Lexfo lifted the operator’s entire toolkit and pivoted through it to two more
https://thehackernews.com/2026/07/misconfigured-server-reveals-three.html - iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
The Hacker News • 2026-07-12 22:36 • thehackernews.com
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation in the wild.The vulnerabilities, both rated 10.0 on the CVSS scoring system, are below –
CVE-2026-48939 – A vulnerability in the
https://thehackernews.com/2026/07/icagenda-and-balbooa-forms-joomla-flaws.html - Someone Is Scanning for Your MCP Servers and AI Assistant Credentials, (Mon, Jul 13th)
SANS ISC Diary (full) • 2026-07-12 21:22 • isc.sans.edu
The setup
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
