pwnspectrum | Daily Cybersecurity Intelligence

[CVE] CVE SPOTLIGHT

CVE-2026-7473 CVSS 9.0 Patch Now Arista Extensible Operating System

Arista Extensible Operating System (EOS) contains an incomplete comparison with missing factors vulnerability when the switch incorrectly decapsulate and forwards other unexpected tunneled packet with a destination IP matching its configured decapsulation IP.

CISA KEV

CVE-2026-20245 CVSS 9.0 Patch Now Cisco Catalyst SD-WAN Manager

Cisco Catalyst SD-WAN Manager formerly SD-WAN vManage contains an improper encoding or escaping of output vulnerability. This vulnerability could allow an authenticated, local attacker to execute arbitrary commands as root by supplying a crafted file to the affected system.

CISA KEV

CVE-2026-11645 CVSS 9.0 Patch Now Google Chromium V8

Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CISA KEV

CVE-2026-46442 CVSS 9.9 Patch Now Flowiseai Flowise

Flowise is a drag & drop user interface to build a customized large language model flow. Prior to version 3.1.2, POST /api/v1/node-custom-function lacks route-level authorization, allowing any auth...

CVE-2026-44748 CVSS 9.9 Patch Now Multiple Products

SAP NetWeaver Application Server ABAP and ABAP Platform allows an authenticated attacker with normal privileges to obtain a valid signed message and send modified signed XML documents to the verifi...

[0x01] 🚨 ACTIVE THREATS & VULNERABILITY DISCLOSURES

Critical CVE-2026-5027 https://feeds.feedburner.com/TheHackersNews 10 Jun 2026

Langflow Unpatched Flaw (CVE-2026-5027) Allows Remote Code Execution

A high-severity flaw exists in Langflow, an open-source low-code platform for AI application building. Active exploitation has been observed in the wild through CVE-2026-5027 (CVSS: 8.8). Users must immediately patch or restrict access to all systems utilizing this framework.

Critical CVE-2024-57727 https://www.cisa.gov/uscert/ncas/alerts.xml 11 Jun 2026

Ransomware Actors Exploit SimpleHelp RMM Vulnerability Against Utility Sector

Threat actors are leveraging an unpatched vulnerability in SimpleHelp Remote Monitoring and Management (RMM) tools. This tactic has been used to compromise customers of utility billing software providers. Organizations managing critical infrastructure must verify the patch status of all remote management systems.

Critical CVE-2022-0492 https://www.cisa.gov/uscert/ncas/current-activity.xml 11 Jun 2026

CISA Adds Two New Vulnerabilities to Known Exploited Catalog (KEV)

CISA has updated its KEV Catalog by adding two new vulnerabilities based on confirmed evidence of active exploitation. These additions represent immediate risks requiring prompt mitigation efforts. Asset owners should verify patch status for all listed components.

Critical https://feeds.feedburner.com/TheHackersNews 10 Jun 2026

Microsoft Reaches Record Fix Deployment with 206 Vulnerability Patches

Microsoft released a substantial update cycle addressing 206 vulnerabilities, including three publicly disclosed zero-day flaws. While patching is necessary, teams must prioritize applying patches for critical and high-severity issues first to maintain system integrity.

Critical https://krebsonsecurity.com/feed/ 09 Jun 2026

June Patch Tuesday Delivers Record Software Updates for Microsoft Ecosystem

Microsoft issued software updates addressing nearly 200 security flaws across its portfolio during June's Patch Tuesday. Of these, a significant number were rated as 'Critical.' Organizations must ensure patch management processes are rigorous and fully implemented.

Critical https://www.bleepingcomputer.com/feed/ 09 Jun 2026

Microsoft Defender Zero-Day Exploit ('RoguePlanet') Reported

A security researcher released a zero-day exploit named 'RoguePlanet' targeting Microsoft Defender. This report emerged shortly after major Microsoft patch releases for June 2026. Defenders must maintain vigilance regarding newly disclosed vendor flaws and apply timely mitigations.

Critical CVE-2026-45586 https://www.gbhackers.com/feed/ 10 Jun 2026

New Windows CTF Zero-Day Vulnerability Allows Privilege Escalation

Microsoft disclosed a zero-day vulnerability in the Windows Collaborative Translation Framework (CTFMON). Exploitation could enable attackers to gain elevated privileges on affected machines. Implement configuration hardening and apply pending vendor patches immediately.

Critical CVE-2026-50507 https://www.gbhackers.com/feed/ 10 Jun 2026

Windows BitLocker Zero-Day Flaw Enables Core Disk Encryption Bypass

Microsoft disclosed a zero-day vulnerability in Windows BitLocker. This flaw could allow attackers to bypass core disk encryption protections on affected systems. Review system hardening policies and monitor for suspicious activity related to endpoint data access.

Critical CVE-2026-53693 NVD 11 Jun 2026

Stored XSS Vulnerability Identified in MISPBSimVis Tag Rendering Code

A stored cross-site scripting vulnerability was found in the tag rendering code of a specific application. This flaw allows improper handling of client-side inputs into HTML elements and JavaScript handlers. Input validation and output encoding must be strictly enforced across all web components.

Critical https://www.darkreading.com/rss.xml 11 Jun 2026

'Hades' Campaign Against PyPI Highlights Persistent Supply Chain Risk

Recent attacks targeting numerous PyPI packages demonstrate a continued and evolving software supply chain threat. Organizations utilizing open-source components must vet dependencies rigorously and scan for known compromised package versions.

[0x02] 💻 SOFTWARE SUPPLY CHAIN & DEVELOPMENT RISKS

Critical CVE-2026-48027 https://www.cisa.gov/uscert/ncas/current-activity.xml 11 Jun 2026

Supply Chain Compromises Impact Developer Ecosystems (CI/CD Pipelines)

CISA is prioritizing response to multiple supply chain campaigns targeting developer environments and CI/CD pipelines. Recent incidents involved malicious compromises within tools like Nx Console on GitHub. Organizations must audit third-party developer tooling access and enforce least privilege principles.

Critical https://news.sophos.com/en-us/category/security-operations/feed/ 11 Jun 2026

Integration of Sophos Threat Intelligence into Microsoft 365 Copilot

Sophos is enhancing security by embedding its threat intelligence directly into the Microsoft 365 Copilot ecosystem. This integration improves contextual protection for advanced user workflows. Security teams should evaluate how such integrated tools can enhance their current detection capabilities.

[0x03] 🌍 GEOPOLITICAL & ADVANCED PERSISTENT THREATS

High https://www.bleepingcomputer.com/feed/ 10 Jun 2026

China-Linked JDY Botnet Expands Targeting Scope Toward U.S. Military Networks

The JDY botnet, linked to Chinese threat actors like Volt Typhoon, has expanded its reconnaissance efforts and targeting scope. Entities in the defense or critical infrastructure sectors must enhance monitoring for lateral movement and communication with suspicious foreign IPs.

Critical https://www.cisa.gov/uscert/ncas/alerts.xml 11 Jun 2026

Defensive Strategies Against China-Nexus Covert Networks

This advisory provides guidance on defending against complex covert network infrastructures potentially linked to state actors. Organizations should implement network segmentation and deep packet inspection (DPI) to detect anomalous communication patterns.

Critical https://news.sophos.com/en-us/category/security-operations/feed/ 11 Jun 2026

Guidance for Detecting North Korean Threat Actor Recruitment

This playbook provides a framework for CISOs to identify potential risks associated with state-sponsored threat actors seeking employment. HR and security teams should integrate intelligence into pre-employment vetting protocols.

Critical https://www.nist.gov/news-events/news/rss.xml 09 Jun 2026

NIST Supports Transition to Continuous Monitoring for AI Systems

A mathematical proof supports the application of continuous monitor and update security models specifically for Artificial Intelligence systems. This suggests a required paradigm shift toward dynamic risk management in AI deployments.

[0x04] ⚙️ TECHNICAL ADVISORIES & SECURITY STRATEGY

Critical CVE-2026-50571 https://www.csoonline.com/feed 09 Jun 2026

Check Point Advisory on Ransomware-Linked Exploitation of Outdated VPN Protocols

Check Point warned of ongoing ransomware attacks exploiting vulnerabilities in outdated VPN protocols. All external access points must immediately update to the latest secure versions and enforce multi-factor authentication (MFA) for remote connections.

Critical CVE-2026-46612 NVD 11 Jun 2026

Fission Component Vulnerability Identified in Kubernetes Serverless Framework

A flaw was found in the Fission storagesvc component prior to version 1.23.0, allowing unauthorized CRUD handlers access. Users deploying serverless functions on Kubernetes must ensure they are running updated versions of the Fission framework.

Critical https://news.sophos.com/en-us/category/threat-research/feed/ 11 Jun 2026

Analysis of AMOS: Data Theft Capabilities in macOS Malware

This research details the capabilities and detection methods for the Atomic macOS Stealer (AMOS). Defenses must include endpoint detection and response (EDR) systems capable of monitoring and blocking known data exfiltration techniques specific to macOS.

Critical https://www.itsecurityguru.org/feed/ 09 Jun 2026

AI Agents for Automated Continuous Threat Exposure Management (CTEM)

Filigran unveiled XTM One, an AI-native orchestration layer designed to automate CTEM workflows. Security teams should explore adopting AI tools to manage the growing volume of threat intelligence and vulnerability data more efficiently.

[0x05] CYBERSECURITY VIDEOS

📰 News

Wordfence Security News #10 - WPMaps Pro Exploited, Palo Alto VPN Bug, and AI Agent-Driven Intrusion

Wordfence ↗

🔬 Exploit POC

Worst Month Ever for Linux? PinTheft Zero-Day Drops With a Public PoC CVE-2026-43494 #cybersecurity

Cybertech ↗

🎯 CTF Solve

Payload Podcast 008 - Ryan Hausknecht

John Hammond ↗

📰 News

AgentGG Found 5 Zero-Days in OpenClaw

Medusa ↗

[0x06] TRENDING SECURITY TOOLS

★ 27298 TypeScript

Infisical is the open-source platform for secrets, certificates, and privileged access management.

Infisical/infisical

Find, verify, and analyze leaked credentials

trufflesecurity/trufflehog

★ 25933 Python

Open-source AI hackers to find and fix your app’s vulnerabilities.

★ 22094 TypeScript

Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, C...

promptfoo/promptfoo

⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡

[0x07] BUG BOUNTY HIGHLIGHTS

View latest public disclosures on HackerOne Hacktivity

[0x08] EXPLOIT-DB FRESH DROPS

WebApps Multiple

[webapps] OpenEMR 7.0.2 - Arbitrary File Read

WebApps Multiple

[webapps] WordPress Contest Gallery 28.1.4 - Unauthenticated Blind SQL Injection

WebApps Multiple

[webapps] Drupal Core 10.5.5 - Error-Based SQL Injection

WebApps Multiple

[webapps] WordPress OrderConvo 14 - Path Traversal

Remote Multiple

[remote] Notepad++ 8.9.6 - Arbitrary Code Execution

[0x09] UPCOMING CTFs

Jeopardy Weight: 0.0

boroCTF 2026

Jun 12, 20:00 UTC 3 days

CTFTime ↗ Register ↗

Jeopardy Weight: 0.0

Anti-Slop CTF 2026

Jun 13, 01:00 UTC 2 days

CTFTime ↗ Register ↗

Jeopardy Weight: 0.0

CyberSci Nationals 2025-2026

Jun 13, 13:00 UTC 1 days

CTFTime ↗ Register ↗

Jeopardy Weight: 91.0

Crypto CTF 2026

Jun 13, 14:00 UTC 1 days

CTFTime ↗ Register ↗

Jeopardy Weight: 0.0

Operation Heist CTF 2026

Jun 13, 14:00 UTC 1 days

CTFTime ↗ Register ↗

[0x0a] SECURITY PODCASTS

Darknet Diaries

175: Bayrob

01:36:35

Listen ↗

Risky Business

Risky Business #841 -- Microsoft gets owned and 0day'd

3782

Listen ↗

Security Now

SN 1082: The Malicious Use of AI - Anthropic's Red Team Report

2:37:27

Listen ↗

Malicious Life

Weev, Part 2

1729

Listen ↗

[0x0c] THIS DAY IN HACKING HISTORY

2013

Snowden Revelations Begin

Edward Snowden's NSA surveillance documents began being published by The Guardian.

[0xff] ARCHIVE

Keyboard Shortcuts

Focus search/

Next articlej

Previous articlek

Open article linkEnter

Toggle TL;DR modet

Toggle themed

Listen to briefinga

Close overlayEsc

Show shortcuts?