INTELLIGENCE BRIEFS

Zero‑Day Local Privilege Escalation (CVE‑2026‑118602) in Alpine iLX‑F511 Exposes Dangerous Method

Hard‑coded SSH Credentials Enable Unauthenticated RCE in Alpine iLX‑F511 (CVE‑2026‑118601)

Critical Path Traversal RCE in Ultralytics Google Drive Integration (CVE‑2026‑118619) Enables Remote Code Execution

Zero‑Day Remote Code Execution in Ultralytics parse_model (CVE‑2026‑118618) Enables Arbitrary Code Execution

Critical Remote Code Execution in Ultralytics torch_safe_load (CVE‑2026‑118615)

(0Day) Ultralytics check_det_dataset Code Injection Remote Code Execution (CVE‑2026‑118614)

Zero‑Day RCE in Ultralytics torch_load (CVE‑2026‑118613) Enables Remote Code Execution via Untrusted Deserialization

GitHub Launches npm Package Firewall to Block Malicious and Unvetted New Versions Before Install

Compromised Camera Management Software Used as Initial Access Vector into Corporate Networks

345,000 Email Addresses Exposed in Cyberattack on Germany’s AfD Party

Tailscale Patches SSH Flaws That Enabled Lateral Movement Within Tailnets

CISA Adds Two Actively Exploited Vulnerabilities (CVE‑2026‑41709, CVE‑2026‑46300) to KEV Catalog

Defenders Struggle to Keep Up with Accelerating Patch Cadence Across Operations

ClickFix Phishing Campaign Uses Malicious Download Links to Target Corporate Users

Google Enables One‑Tap Installs from Approved Third‑Party Android Stores, Raising Supply‑Chain Risk

Logic Flaw Chain Bypasses Microsoft Edge Sandbox, Enables Code Execution – $175K Pwn2Own Reveal

PHP2Shell Exploits Root 25 Servers in U.S. Government‑Affiliated Network

Researchers Expose Fraudulent North Korean IT Workers Through Fake Startup Study

Hive Ransomware Affiliate Sentenced After FBI Infiltration Saves Victims $130M

Attacker Impersonates AI Bots to Harvest Credentials Across Cloud Services