News that matters, without the noise.

CVE-2026-10797

Severity Not Scored Description CVE-2026-10797 is a CVE assigned to cover a UEFI shim bootloader security feature bypass.

CVE-2026-48863

High Severity Description A flaw was found in libsolv. A stack-based buffer overflow vulnerability exists in the PGP

CVE-2026-3842

High Severity Description A flaw was found in QEMU. This vulnerability allows a local attacker within a guest

Multiple Splunk Enterprise Vulnerabilities Enable Path Traversal and Information Disclosure Attacks

Splunk has released security updates addressing multiple vulnerabilities in Splunk Enterprise and Splunk Cloud Platform. These flaws could

Old UEFI Shims Expose Systems to Secure Boot Bypass

Signed by Microsoft, the vulnerable UEFI shim bootloaders could be abused on any system, regardless of the OS.

Long before the quiet electric robot dogs of today, there was the WildCat ⤵️

Hackers Can Type a Secret Username at the Windows Login Screen to Open a SYSTEM Shell

A stealthy Windows backdoor has resurfaced alongside Daxin, a sophisticated espionage tool previously tied to China-linked activity. The

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day 

The researcher stripped the proof-of-concept (PoC) exploit to prevent immediate exploitation of the vulnerability. The post Nightmare Eclipse

Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities

The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products. The post Trend Micro, Tanium,

Police Disrupt a €140M Cyber Fraud Ring in Spain

Iberian hackers carried out a variety of cyberattacks and laundered the winnings through complex financial networks.

USN-8553-1: .NET vulnerabilities

Artur Stetsko discovered that the .NET did not properly validate authentication data. An attacker could possibly use this

ISC Stormcast For Thursday, July 16th, 2026 https://isc.sans.edu/podcastdetail/10010, (Thu, Jul 16th)