INTELLIGENCE BRIEFS

Critical Auth‑Bypass and VM‑Escape Flaws Fixed in VMware vCenter, ESX, Workstation (CVE‑2026‑59309, CVE‑2026‑59310, CVE‑2026‑47876)

Hard‑coded RSA Key Flaw (CVE‑2026‑5846) Lets Attackers Take Over Watchfire Controller Software

Google’s Gemini AI Helps Chrome Patch 1,072 Security Bugs Across Two Releases

Multiple Web Vulnerabilities (CVE‑2026‑21662, CVE‑2026‑34495, CVE‑2026‑34497) in Johnson Controls OpenBlue Employee Enable Malicious File Upload & XSS

ShinyHunters Claims Voice‑Phishing Breach of Brinks Home, Threatens to Leak 4.9M Salesforce Records

Multiple High‑Severity DoS Vulnerabilities in MZ Automation libiec61850 Library Threaten Energy Control Systems

Vishing Attacks via Microsoft Teams Enable Chaos Ransomware Deployments Across North America

Lazarus Group Shares Tools with Gunra Ransomware, Expanding Threat to South Korean Organizations

Analog Devices Reports Unauthorized Access and Data Exfiltration; Operations Remain Unaffected

North Korean Group SapphireSleet Compromises Major NPM Packages, Threatening Thousands of Downstream Applications

CISA Issues Open Source Software Security Principles and Practices Guidance for Federal Agencies

SQL Injection Leads to Persistent Backdoors, RDP Enablement, and Defender Disablement in Real‑World Breach

Cyber Extortionists Exfiltrate Over 600,000 Records from UK Department for Education

Out‑of‑Bounds Read Vulnerabilities (CVE‑2026‑61893, CVE‑2026‑63033) in MZ Automation lib60870 Could Crash Industrial Devices

Critical Integer Underflow/Overflow Flaws in o6 Automation open62541 Library (CVE‑2026‑63362‑63559) Threaten Industrial Control Systems

Hot Wallet Compromise at Triple‑A and Verus‑Ethereum Bridge Exploit Lead to $20M Crypto Losses

Power Grid Operators Face Post‑Quantum Challenges Beyond Encryption: Need for Digital Twins, Crypto Logs, and New Protocols

Fortinet Reports On‑Prem SASE Demand Surpassing Cloud‑Only Deployments

Frontier AI Amplifies Identity‑Security Risks for Financial Services

Post‑Quantum Readiness Race: Security Leaders Urged to Accelerate Crypto Agility