Security & Trust

CVE-2026-10702, a patched Firefox JIT flaw, gave attackers code execution from one webpage visit — no clicks, downloads, or plugins required.

A backdoor called OWAReaper is keeping mailbox access alive on on-premises Exchange servers long after CVE-2026-42897 was fixed and federally flagged.

Minnesota's coordinated water-utility cyberattack didn't exploit a misconfiguration. It exploited a design — internet-facing PLCs with a vulnerability the vendor cannot patch.

Zero trust assumed the accessor was human, the pace was human, and the app was the atom. AI agents broke all three.

The fortress assumed threats were exceptional events. The immune system assumes threat pressure is ambient and constant.

OpenWrt's DHCPv6 flaw grants unauthenticated root access over UDP — only federal agencies face a patching deadline.

Docker, nginx, PHP and MySQL — the stack behind millions of sites — now ships as a packaged Android spying kit.

Between 'yes' and 'no' lives an entire spectrum of 'convince me.' Security stops being a wall and becomes a conversation.

A canonical-name-with-aliases system consolidates the post-Mandiant/TAG merger. WebPulse reads this as infrastructure for machine-speed triage.

CVE-2026-16723 lets attackers run code without authentication in any Java app using Fastjson 1.x — and the library has no patch to ship.

Hermes Agent's 'YOLO mode' ran privilege-escalation scans and file cataloging without a human approving any step.

A CVSS 9.9 flaw in Azure Automation shows how a single default configuration can cross a cloud trust boundary

A misleading metric is worse than no metric. It manufactures confidence exactly where scrutiny should be.

There is no such thing as a perfectly secure system. Resilience means asking how fast you recover, not whether you can prevent every bad thing.

SSRFs, denial-of-service, cache confusion, auth bypass, and endpoint disclosure — all targeting Server Actions and App Router, the features driving Next.js adoption.

CVE-2026-63030 and CVE-2026-60137 are being exploited to install persistent webshells through WordPress Core's plugin installer.

Two chained CVEs enable pre-authenticated code execution on standard WordPress installs. Patches shipped July 17 — sites that haven't applied them are exposed.

CVE-2026-50522 let attackers forge authentication tokens before Microsoft's fix shipped — and those forged tokens don't expire when the vulnerability does

A new report finds 95% of organizations discover high-severity flaws between scheduled security assessments, not during them.

Two SonicWall SMA1000 vulnerabilities were exploited as zero-days for weeks. Attackers installed custom malware on the devices that protect your network perimeter.

A critical pre-authentication vulnerability in the ServiceNow AI Platform is under active exploitation. No credentials required.

A crafted HTTP request can trigger a heap buffer overflow in NGINX worker processes. The patch is out. The install base is enormous.

Astro was the poster child for zero-CVE modern frameworks. Three cross-site scripting advisories just changed that math.

A crafted XZ archive can trigger a heap buffer overflow in 7-Zip during extraction. The tool runs on hundreds of millions of machines.

Mandiant's 2026 data puts mean time-to-exploit at -7 days — patches now arrive after attackers already have a foothold.

The rendering engine serving human visitors also powers AI browsing agents, and the exploit code is already public.

A single wiki import auto-executes embedded JavaScript on TidGi Desktop, with no patched version currently available.

Two flaws, CVSS 10.0 and 7.2, were exploited in the wild before a patch existed for either one.

LegacyHive works on fully patched July 2026 systems and has no CVE number yet — the eighth such disclosure from the same researcher since April.

CVE-2026-39831 (CVSS 9.1): the Verify() method for FIDO/U2F key types in golang.org/x/crypto/ssh never checked the User Presence flag. An attacker with agent access could authenticate silently, defeating the one guarantee hardware keys exist to enforce.

Automated Frequency Coordination systems accept the GPS coordinates an access point reports about itself, unverified.

CVE-2026-56291 lets unauthenticated attackers upload executable files to sites running Balbooa Forms.

A national cyber agency named CMS plugins as the entry point. Catalog data shows what that exposure looks like in practice.

431 wallets, five blockchains, one root cause: recovery phrases generated from a keyspace small enough to brute-force.

Ubiquiti's July 8 advisory patches seven critical and eighteen high-severity UniFi OS vulnerabilities — against a backdrop of 100,000 previously indexed internet-facing instances.

A suspected China-aligned campaign chained an XSS flaw patched in August 2024 with an RCE patched in mid-2025 to compromise physics and engineering departments at U.S. and Canadian universities. The gap is not disclosure — it is deployment.

Two critical authentication bypasses in BeyondTrust RS and PRA join a cPanel/WHM KEV entry from the same month — both granting privileged infrastructure control via a web-accessible login.

Langflow, a visual builder for AI agents, joins CISA's KEV catalog after attackers used a broken authorization flaw to harvest LLM credentials and hijack compute.

CVE-2026-56290 allows unauthenticated file uploads on Joomla sites — CISA confirms active exploitation.

A CVSS 9.8 authentication bypass in Gitea Docker images was under active probing within 13 days of disclosure. The flaw requires a non-default configuration — but the Docker image ships with that configuration enabled.

A maximum-severity, actively exploited ColdFusion flaw triggered the harshest tier of CISA's new standing directive — on a platform most monitoring tools never see coming.

Mandiant recovered active ADFS token-signing keys from Machine DPAPI without touching LSASS or the live service process. The forged SAML token granted Global Administrator access to a federated Microsoft 365 tenant. MFA, Conditional Access, and all identity controls were bypassed.

NetNut enrolled smart TVs and streaming boxes into a residential proxy network via pre-installed SDKs. 316 distinct threat clusters used it in a single week. Google disabled the C2 infrastructure. The supply chain was the infection vector.

A new cross-platform infostealer deployed through a SimpleHelp authentication bypass explicitly targets AI development assistant tokens, cloud platform credentials, and package registry keys. The attack surface is not the code — it is the developer.

CVE-2026-50548 and CVE-2026-50549 — dubbed DuneSlide — let a prompt injection escape Cursor's sandbox and execute arbitrary commands with developer privileges. More than half the Fortune 500 use Cursor. Every version before 3.0 was vulnerable.

Anthropic's Claude Code has accumulated 28 CVEs in its first year, including two CVSS 10.0 critical sandbox escapes. CVE-2026-46406, the latest, let any local user read secrets from a predictable temp file path. When the security tool becomes the attack surface, every assumption changes.

Frameworks with zero or near-zero critical CVEs hold 3.5% of the Tranco top 10K — and all of them are growing. Hugo, Astro, and HTMX share a trait: minimal attack surface by design.

Google Threat Intelligence Group documents a modular .NET implant that Turla has been developing since 2022 — one more tool in an apparatus that has compromised victims across 50+ countries.

ORAS Go and Java SDKs — used by Azure ACR, AWS ECR, Docker Hub, Helm, and Notation — disclosed symlink and hardlink escape flaws that let a malicious artifact write files outside the extraction directory.

CVE-2026-50138 reveals that goshs --read-only, --upload-only, and --no-delete flags are silently ignored when WebDAV is enabled. Configuration theater in a tool used by developers and red teamers.

A Mandiant breach response finds ViewState deserialization actively exploited in enterprise learning systems.

In gonic's Subsonic API, any authenticated user can read or delete any other user's data — BOLA confirmed as API risk #1

GHSA-cjhr-43r9-cfmw catalogs how repository .npmrc redirects developer credentials to attacker-controlled registries.

GHSA-gj8w-mvpf-x27x: Repository-level settings can redirect pnpm to a native install engine without contributor awareness

GHSA-w466-c33r-3gjp: a crafted lockfile can redirect which pnpm binary runs before a dependency is installed

A config-phase flaw expands environment secrets into registry requests — before any lifecycle script runs

Techniques that rebuilt GameCube games from binary are now trained on the web's encrypted plugin ecosystem

CVE-2026-48930: embedded nul-bytes in hostnames cause silent authority rebinding via C-string truncation. Node.js 22, 24, and 26 affected. The severity dispute exposes a scoring system failure.

CVE-2026-53519 (CVSS 9.1) leaks jwt_secret_key via path traversal. A second flaw (CVSS 9.9) lets any authenticated user hijack another's live terminal. 10K-star self-hosted monitoring platform.

Authentication passed. Authorization was absent. How a gonic Subsonic API flaw illustrates the gap AI agents exploit at scale.

semantic-router pulled a compromised wheel via its AI dependency chain. A .pth file executed on Python startup — no import needed — exfiltrating AWS, GCP, Azure creds, SSH keys, and Kubernetes configs.

Path traversal, manifest spoofing, hoisted alias escapes, arbitrary deletion — 8 distinct vulnerabilities in the package manager that Next.js, Nuxt, and Astro depend on. The supply chain attack surface just moved from packages to package managers.

Attackers compromised Klue's Salesforce integration using a legacy credential, harvested OAuth tokens, and exfiltrated data from HackerOne, Snyk, Huntress, Recorded Future, BeyondTrust, and LastPass in 15 minutes.

CVE-2026-48713 and CVE-2026-48714 hit the npm ecosystem's dominant internationalisation library. Both scored CVSS 9.1. The second vulnerability bypassed the fix for the first using dotted __proto__ variants. Every Next.js, React, Angular, and Vue app using i18next was exposed.

CVE-2026-46595 bypasses public key authentication entirely. CVE-2026-39831 defeats hardware security keys without physical touch. Go was supposed to be the memory-safe alternative. Its cryptographic foundation just cracked in ten places at once.

Akamai's 2026 study of 1,840 security leaders reveals that only 23% know which APIs return sensitive data — down from 40% in 2022. Organisations are spending more on API security and understanding less. AI is accelerating the gap.

34 packages across npm, PyPI, and Crates.io hide zero-width Unicode instructions in .cursorrules and CLAUDE.md files. When Cursor or Claude Code opens the project, the AI runs a fake security scan that exfiltrates your secrets.

TOTP brute-force compromised ~20 Dashlane vaults. 1M combinations per 30-second window is a ceiling, not a wall.

GHSA-mxjx-28vx-xjjj: anyone on the network can approve AI agent actions. The approval layer is the gap.

CVE-2026-48019 allows email header manipulation via unsanitized CRLF sequences. A second CVE compounds the risk.

ReversingLabs' 2026 Software Supply Chain Security Report documents a 73% increase in malicious packages across npm, PyPI, and other registries. Frameworks with 1,000+ transitive dependencies face exponential exposure. Minimal-dependency stacks avoid this risk entirely.

A new malware family harvests complete conversation histories from Claude, ChatGPT, Gemini, Copilot, and Perplexity by hooking browser API calls. Unlike keyloggers, PromptSnatcher captures the AI's responses too — including code reviews, security analyses, and strategic recommendations. The intellectual property loss is exponential.

June 2026 Patch Tuesday delivered 208 CVEs (571 with Chromium bundled), 37 Critical. CVE-2026-45657 (CVSS 9.8) is a use-after-free in Windows Kernel TCP/IP that requires no authentication and can self-propagate. CVE-2026-47291 (CVSS 9.8) hits HTTP.sys directly — a web server RCE. CISA's 3-day mandate means patching is no longer optional.

Binding Operational Directive 26-04 replaces the old 30-day patch window with risk-based timelines. Publicly exposed, auto-exploitable vulnerabilities in the KEV catalog get a 3-day deadline. The directive cites AI-accelerated exploitation as the reason. WordPress sites with 18,005 CVEs just became a compliance crisis.

Specially crafted query parameters alter dynamic route values while leaving the visible URL path unchanged, bypassing middleware-based authorization in Next.js 13.0 through 15.5.15 and 16.x before 16.2.5. A separate CVE-2026-23869 enables memory exhaustion DoS via React Server Components. Astro, Svelte, and Hugo are not affected.

Tenet Security disclosed a new attack class on June 12. Attackers inject prompts into Sentry error events using publicly discoverable DSNs. AI coding agents retrieve the events via MCP and execute attacker-controlled code. Sentry called it 'technically not defensible.'

CVE-2026-48019 lets attackers inject headers into outbound emails — no authentication required. Laravel patched it in days. WordPress plugins with similar flaws take months.

The Mini Shai-Hulud worm compromised TanStack, Mistral AI, and 160+ packages. It steals tokens, publishes poisoned versions of more packages, and can wipe developer machines. OpenAI confirmed 2 employee devices were compromised.

CVE-2026-11645 is an out-of-bounds read/write in Chrome's JavaScript engine. Astro ships 9KB of JS. Next.js ships 463KB. The attack surface isn't equal.

A critical RCE chain in protobuf.js — used across Node.js frameworks — turns schema definitions into arbitrary code execution. Exploit code is public.

A new denial-of-service technique exploits how every major web server handles HTTP/2 headers. Legacy CMS servers running on tight memory budgets are the easiest targets.

The Hades variant of the Shai-Hulud worm family includes adversarial prompt injection in its payload — fake JavaScript comments designed to confuse AI-powered security tools. Supply chain malware is now attacking the scanners, not just the developers.

An attacker purchased 30+ WordPress plugins with 400,000 combined installations on a digital marketplace. Dormant for 8 months. Activated April 2026. WordPress has no mechanism to review plugin ownership transfers.

CVSS 9.8. Unauthenticated SQL injection in Drupal Core. Added to CISA KEV two days after disclosure. 15,000 attacks across 65 countries. The CMS governments chose for security just got its own critical core flaw.

WordPress 7.0 'Armstrong' added a Connectors API that stores Anthropic, Google, and OpenAI keys in wp_options. Patchstack's founder called it 'free AI tokens for hackers.' AI scanning found 300+ zero-days at $20 each in 72 hours. SiteGround pushed 1M+ installs automatically.

Six critical vulnerabilities actively exploited at the same time. 29,300+ attacks per day on one plugin alone. A premium plugin supply-chain compromised. The WordPress security model hit a wall.

June 1: npm packages. June 3: new evasion technique. June 5: IDE config poisoning. June 7: PyPI. The Shai-Hulud supply chain worm crossed three attack surfaces in nine days. 448 artifacts. The security industry couldn't keep up.

TrustFall: one-click RCE. SymJack: symlink hijack installs attacker MCP servers. Clinejection: a GitHub issue title compromised 4,000 developers. Claude Code leaked its source — three CVEs fell out. The tools building the web are its newest attack surface.

One supply chain attack is an incident. Thirty in six months is a market condition. The worm crossed to PyPI. The source code went public. Here's the timeline.

WordPress has 18,005 catalogued CVEs and six CVSS 9.8 vulnerabilities exploited simultaneously. The npm ecosystem had 30+ supply chain attacks in 6 months — and the worm jumped to PyPI. Neither is safe. The difference is how the risk kills you.

MCP — the Model Context Protocol — is the TCP/IP of agentic AI. 200,000+ vulnerable instances. 150 million package downloads. The Pentagon designated its creator a supply chain risk. The NSA published an advisory. The infrastructure of the machine web is wide open.

SLSA provenance was supposed to be the answer to supply chain attacks. Miasma forged it. 32 Red Hat packages, 90+ malicious versions, perfect provenance attestations. The trust framework is broken.

A single compromised npm package gave attackers AWS admin access in three days. The deployment pipeline that makes modern frameworks possible is the attack surface nobody secured.

North Korean group UNC1069 compromised Axios — downloaded 40 million times per week. When intelligence agencies target your build pipeline, npm audit is not a security strategy.

WordPress: 60,000 plugins, ~40% abandoned. npm (React/Next.js): millions of packages but lockfile-controlled and auditable. The supply chain model is fundamentally different — and our country data shows who bears the deepest exposure.

GDPR fines: EUR4.5B+ cumulative. Healthcare breach cost: $10.9M average. The sectors with the highest fines are the sectors with the most legacy infrastructure. Correlation isn't causation — but the pattern demands attention.

How many of the 7.4M WordPress sites are for businesses that no longer exist? Domains persist, plugins accumulate CVEs, and nobody patches. The web's biggest security problem isn't active sites — it's ghost sites.

.ru: 238,055 detected. WordPress 68%, Joomla 11.5% (27,374 sites), Drupal 5.9%, Next.js 5.7%, Angular 3.3%, Vue 1.4%. Russia's Joomla count alone exceeds most countries' total detections.

Brazil 86% WP, Argentina 86% WP, Colombia 55% WP. Uruguay breaks the LATAM WordPress pattern with 21% Drupal — the development funding corridor extends to Latin America.

Croatia 9%, Serbia 9%, Slovenia 7%, North Macedonia 6%, Bosnia 3%. While Western Europe moved past Joomla years ago, the Balkans still carry significant Joomla infrastructure.

Kenya: 1,849 detected, WP 82%, Shopify 7.5%. Nigeria: 2,954 detected, WP 97%. Same continent, opposite digital paths.

Nepal 64% Drupal. Bangladesh 63%. Libya 42%. Ecuador 40%. Ivory Coast 37%. Uganda 31%. The framework map is the aid map.

India is 83% WordPress. Pakistan is 63% WordPress. Nepal chose Drupal. 351 Drupal sites vs 165 WordPress. Something institutional happened here.

Africa's largest economy, 220 million people, the continent's biggest tech ecosystem. 97% of detected sites run WordPress. Not 93% like Turkey. Near-total monoculture at scale.

The largest .edu dataset ever published. Education remains the most framework-diverse sector. Rails at 16.4% — 9,568 sites — is the finding nobody expected.

The most comprehensive .gov framework survey ever. Drupal dominates at 49%. WordPress is 24%. Rails is 11%. Next.js is emerging at 6%.

174 detected .ir sites. 93% WordPress. Isolation — economic and technological — produces digital monoculture.

Among 10M+ sites scanned, the 'dead' framework has more detections than four of the most-hyped modern alternatives combined.

176,344 Joomla sites vs 20,338 Astro + SvelteKit combined. Developer Twitter doesn't reflect the actual web.

58,182 .edu domains analyzed. WordPress leads at 38.5% but Drupal (35.7%) and Rails (16.4%) make education the most diverse sector.

In our Common Crawl scan of 61,005 detected .ru sites, Joomla concentrates heavily in Russian domains. The rest of the world moved on. Russia didn't.

Among 17 healthcare sites we scanned: Drupal, WordPress, Next.js, Vue, Angular — no dominant framework. A small sample, but the fragmentation pattern is the finding.

Among 49 government sites we scanned across 6 regions, Drupal dominates — not WordPress. A directional finding from a small but curated sample.

ACLU on WordPress. EFF on Drupal. The organizations defending digital rights are running on legacy infrastructure.

Southeast Asia's largest super-app — ride-hailing, food delivery, payments — has a marketing site on legacy CMS. The infrastructure divide runs inside companies too.

Europe's data protection regulation is forcing infrastructure decisions. Legacy CMS was never built for data subject rights at scale.

Australia's prudential regulator requires financial entities to maintain security capability commensurate with threats. Legacy infrastructure makes that harder every year.

Thousands of US medical practices run patient-facing services on WordPress. The OCR is increasing enforcement. The math doesn't work.

The 2016 census failure cost A$30M+ and damaged public trust. It was a legacy infrastructure event with national consequences.

Three technology generations that still run critical infrastructure. One has no new developers. One stopped receiving updates. One was officially sunset in 2020.

Medical practices, hospitals, and health systems running patient-facing services on the web's most-attacked framework.

The White House runs WordPress. So do thousands of government agencies worldwide. Public infrastructure on a legacy foundation.

The average WordPress site runs 27 plugins. Each one is an independent attack surface with its own update cycle, its own maintainer, and its own risk profile.

The compounding cost of staying on legacy frameworks. A timeline of escalating risk.

The most widely deployed framework (W3Techs) is also one of its most vulnerable. Here's what the data says.