Cybersecurity Trends

A new vulnerability in WordPress core, CVE-2026-63030, is actively exploited, allowing SQL injection and remote code execution. Details remain developing.

• CipherDot Team
• July 21, 2026

Sophos’ media mentions surge 21-fold, indicating increased international attention. This development impacts cybersecurity awareness and company visibility.

• CipherDot Team
• July 21, 2026

A hacker has reportedly wiped Romania’s land registry database, causing significant disruptions. Authorities confirm the breach, but details remain unclear.

• CipherDot Team
• July 20, 2026

Exploit brokers are reportedly paying up to $500,000 for remote code execution vulnerabilities in WordPress, with claims of a GPT5.6-based exploit available for $25.

• CipherDot Team
• July 20, 2026

Recent disclosures confirm vulnerabilities in Qubes OS security, raising concerns about its use for sensitive data. Details remain under investigation.

• CipherDot Team
• July 18, 2026

In-toto is a new framework designed to verify and secure the integrity of software supply chains, addressing rising concerns over supply chain attacks.

• CipherDot Team
• July 18, 2026

Security flaw in TP-Link Kasa cameras exposed home GPS coordinates through unauthenticated UDP packets for six years, raising privacy concerns.

• CipherDot Team
• July 18, 2026

CISA has added CVE-2026-25089, a critical unauthenticated command injection vulnerability in FortiSandbox, to its Known Exploited Vulnerabilities catalog.

• CipherDot Team
• July 17, 2026

CVE-2026-39808, a critical OS command injection flaw in Fortinet FortiSandbox, is actively exploited, posing serious security risks. Apply mitigation now.

• CipherDot Team
• July 16, 2026

A critical vulnerability in Microsoft SharePoint, CVE-2026-58644, is actively exploited, allowing remote code execution through deserialization of untrusted data.

• CipherDot Team
• July 16, 2026