INTELLIGENCE BRIEFS

Attackers Exploit Exposed RDP and BitLocker to Extort Small Ransoms via Office Printers

Project CAV3RN Uses Outlook Calendar Events for C2 and DNS AAAA Records for Configuration Recovery

Zimbra Patches Critical SNMP Command Injection and Multiple XSS Vulnerabilities

Open‑Source Android AI Agent Frameworks Enable Invisible Screen Text to Execute Code on Host PCs

N‑Day Exploits Accelerating to N‑Hour: Patch Speed No Longer Sufficient

Critical Authentication Bypass (CVE‑2026‑61884) in Tycon TPDIN‑Monitor‑WEB2 Exposes Critical Manufacturing Controls

New “Bit2Watt” Attack Lets Cloud Tenants Modulate Data‑Center Power Draw, Threatening Grid Stability

Critical CVE‑2022‑23303 & CVE‑2019‑9494 Flaws in Siemens SIDIS Secured SmartPlug Expose Industrial Control Systems

Critical Unauthenticated RCE in WordPress (CVE‑2026‑63030 & CVE‑2026‑60137) Powers wp2shell Exploits

Critical DoS Vulnerability (CVE‑2026‑9140) in Rockwell Automation 1718‑AENTR/1719‑AENTR I/O Modules

ENCFORGE Ransomware Encrypts AI Model Files via Langflow RCE Attack

CISA Adds Four Actively Exploited CVEs to KEV Catalog, Raising SOC 2 Vulnerability‑Management Stakes

Unquoted Search‑Path Vulnerability in Siemens IAM Client Enables Privilege Escalation (CVSS 6.7)

Cross‑Site Scripting & OS Command Injection in Siemens RUGGEDCOM APE1808 (CVE‑2026‑0266) Threatens Industrial NGFW Deployments

Denial‑of‑Service Vulnerability (CVE‑2026‑10573) in Rockwell Automation 1734 POINT I/O Threatens Critical Manufacturing Operations

Spain Fines 23andMe €2.4 M for Credential‑Stuffing Breach Exposing 6.9 M Genetic Profiles

Taiwan to Throttle 4G/5G Mobile Data for Half an Hour During National Resilience Drills

Kenya President’s Website Defaced in Bitcoin Ransom Demand

High‑Severity Path Traversal & Code Execution Flaws (CVE‑2026‑9108/9127/9128) in Rockwell Automation Studio 5000 Logix Designer

Critical Buffer Overflow (CVE-2005-2096) in Siemens CADRA Threatens Industrial Control Systems