Critical Vulnerabilities, Active Threats, and Global Takedowns

Here is your roundup of the most critical security developments you need to know:

Critical Vulnerabilities & Exploits

1- Oracle WebLogic Under Attack:

CISA has added a maximum-severity flaw (CVE-2026-21962, CVSS 10.0) affecting Oracle HTTP and WebLogic Servers to its Known Exploited Vulnerabilities catalog. This allows unauthenticated attackers to compromise systems and modify critical data. If you manage these servers, patch immediately!

2- NVIDIA NemoClaw Flaw:

Oasis Security disclosed a weakness allowing an attacker-controlled webpage to take unauthenticated control of a local AI model and plant hidden instructions. No active exploitation yet, but monitor closely.

Marimo Notebook Patched: A high-severity code injection flaw (CVE-2026-75149) that allowed malicious command execution via crafted notebooks opened in edit mode has been fixed.

Threats & Data Breaches

1- Mirage2FA Targets M365:

A commercial phishing-as-a-service toolkit is actively bypassing two-factor authentication (MFA). Using adversary-in-the-middle (AiTM) tactics, it steals session cookies to hijack M365 and SSO-connected accounts.

Massive DDoS in Norway: A large-scale distributed denial-of-service attack has significantly disrupted Norway's shared government infrastructure and critical public services.

2- Nutex Health Cyberattack:

The healthcare operator is actively investigating a data breach following unauthorized data exfiltration from company servers.

Minecraft Malware: Threat actors are pushing a new malware family known as "Weedhack" by disguising malicious sites as legitimate Minecraft gaming projects.

Industry Updates & Defenses

1- WhatsApp Enhances Passkeys:

Meta announced new support for multiple passkeys tied to a single WhatsApp account, enabling seamless, phishing-resistant sign-ins across iOS and Android.

2- Global Cybercrime Takedown:

Law enforcement from 22 countries collaborated in a massive operation that identified 263 suspects and arrested 58 individuals linked to international cybercrime networks.

Stay vigilant, prioritize those critical patches, and ensure your MFA is robust enough to handle AiTM attacks!

Which of these threats is the biggest priority on your radar?

#Cybersecurity #InfoSec #ThreatIntelligence #DataBreach #CISA #VulnerabilityManagement #CyberNews