Archive snapshot

Fri, Jul 24 · 12:00 PM CDT

Archived briefing content rendered inside the ACSP site experience.

Back to archive

Archived briefing

Snapshot overview

Generated Fri, Jul 24 · 12:00 PM CDTWindow last 6 hours

Top line

Coverage now updates on a rolling 6-hour window, while NVD entries come from the live API using a last-24-hours modified window and are sorted by severity.

Fast take

News stays on the current 6-hour slice, videos now use the last 24 hours, and NVD uses the API instead of the traditional feed to better match the live site behavior.

Top stories

5

Worth skimming

5

Tracked videos

1

NVD vulnerabilities

25

Top stories

Fri, 24 Jul 2026 20:42:35 +0530

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

9.8/10 · Must read/watch

The Hacker Newsmalwareai

Summary
The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate an active phishing kit to impersonate the videoconferencing platforms in social engineering campaigns design

Open article ↗

Fri, 24 Jul 2026 19:45:21 +0530

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

9.8/10 · Must read/watch

The Hacker Newsvulnaiidentity

Summary
Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine. They codenamed the flaw Certighost. Because Domain Control

Open article ↗

Fri, 24 Jul 2026 17:23:55 +0530

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

9.7/10 · Must read/watch

The Hacker Newsvulnaiidentity

Summary
Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and deploy an autonomous artificial intelligence (AI) agent inside a victim's

Open article ↗

Fri, Jul 24 · 12:00 PM CDT

ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point

9.4/10 · Must read/watch

Infosecurity Magazinegeneral

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗

Fri, Jul 24 · 12:00 PM CDT

Ransomware Attacks Targeting Universities on the Rise

9.2/10 · Must read/watch

Infosecurity Magazinemalware

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗

Worth skimming

Fri, Jul 24 · 12:00 PM CDT

Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors

9.0/10 · Must read/watch

Infosecurity Magazineidentity

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗

Fri, 24 Jul 2026 17:00:00 +0530

Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do

9.0/10 · Must read/watch

The Hacker Newsai

Summary
AI agent security is moving through a familiar maturity curve: adoption, then visibility, and finally, control. But what we've collectively discovered is that enforcing least privilege for AI agents is harder than we ever imagined. This is why there are so man

Open article ↗

Fri, Jul 24 · 07:00 AM CDT

My security camera shipped a GitHub admin token in its login page

8.4/10 · Worth your time

Hacker Newssupply-chain

Summary
Surfaced from Hacker News front page during collection run. Freshness on HN: 5 hours ago.

Open article ↗

Fri, Jul 24 · 10:00 AM CDT

Government orders GitHub to remove Bluetooth-based chat app Bitchat: Jack Dorsey

8.4/10 · Worth your time

Hacker Newssupply-chainpolicy

Summary
Surfaced from Hacker News front page during collection run. Freshness on HN: 2 hours ago.

Open article ↗

Fri, 24 Jul 2026 17:15:17 +0530

Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

8.1/10 · Worth your time

The Hacker Newsidentity

Summary
A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet. XBOW's testing got the same result on workers across different hosts and

Open article ↗

Videos worth watching

Fri, Jul 24 · 09:00 AM CDT

CCNA in 2026: Is it still worth it? (AI is not taking your job)

8.3/10 · Worth your time

YouTube / David Bombalai

Why it matters
Recent creator upload with some page-level evidence. Better than raw feed discovery, but still not a full content review.

Worth watching?Maybe — good candidate if the title matches your interests, but confidence is still moderate.

Confidencelow

Open article ↗

NVD vulnerabilities

Thu, Jun 29 · 11:29 PM CDT

CVE-2017-10684

9.8/10 · Must read/watch

NVDvuln

Summary
In ncurses 6.0, there is a stack-based buffer overflow in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

CVECVE-2017-10684

SeverityCRITICAL

TypeUPDATED

PublishedThu, Jun 29 · 11:29 PM CDT

ModifiedThu, Jul 23 · 06:58 PM CDT

Open article ↗

Thu, Jun 29 · 11:29 PM CDT

CVE-2017-10685

9.8/10 · Must read/watch

NVDvuln

Summary
In ncurses 6.0, there is a format string vulnerability in the fmt_entry function. A crafted input will lead to a remote arbitrary code execution attack.

CVECVE-2017-10685

SeverityCRITICAL

TypeUPDATED

PublishedThu, Jun 29 · 11:29 PM CDT

ModifiedThu, Jul 23 · 06:58 PM CDT

Open article ↗

Mon, Mar 31 · 11:15 PM CDT

CVE-2025-24259

9.8/10 · Must read/watch

NVDvuln

Summary
This issue was addressed with additional entitlement checks. This issue is fixed in iPadOS 17.7.7, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to retrieve Safari bookmarks without an entitlement check.

CVECVE-2025-24259

SeverityCRITICAL

TypeUPDATED

PublishedMon, Mar 31 · 11:15 PM CDT

ModifiedThu, Jul 23 · 02:16 PM CDT

Open article ↗

Wed, Apr 08 · 09:17 PM CDT

CVE-2026-39892

9.8/10 · Must read/watch

NVDvuln

Summary
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer overflows. This vulnerability is fixed in 46.0.7.

CVECVE-2026-39892

SeverityCRITICAL

TypeUPDATED

PublishedWed, Apr 08 · 09:17 PM CDT

ModifiedThu, Jul 23 · 12:17 PM CDT

Open article ↗

Wed, Jan 07 · 05:15 PM CST

CVE-2025-12543

9.6/10 · Must read/watch

NVDvuln

Summary
A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications. The Undertow library fails to properly validate the Host header in incoming HTTP requests.As a result, requests containing malformed or malicious Host headers are processed without rejection, enabling at

CVECVE-2025-12543

SeverityCRITICAL

TypeUPDATED

PublishedWed, Jan 07 · 05:15 PM CST

ModifiedFri, Jul 24 · 04:16 AM CDT

Open article ↗

Fri, Mar 20 · 11:16 PM CDT

CVE-2026-33186

9.1/10 · Must read/watch

NVDvuln

Summary
gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g.,

CVECVE-2026-33186

SeverityCRITICAL

TypeUPDATED

PublishedFri, Mar 20 · 11:16 PM CDT

ModifiedThu, Jul 23 · 12:17 PM CDT

Open article ↗

Sun, Apr 05 · 01:17 PM CDT

CVE-2026-5566

8.8/10 · Worth your time

NVDvuln

Summary
A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This affects the function strcpy of the file /goform/formNatStaticMap. Performing a manipulation of the argument NatBind results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.

CVECVE-2026-5566

SeverityHIGH

TypeUPDATED

PublishedSun, Apr 05 · 01:17 PM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Sun, Apr 05 · 01:17 PM CDT

CVE-2026-5567

8.8/10 · Worth your time

NVDvuln

Summary
A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead to buffer overflow. The attack can be executed remotely. The exploit has been publi

CVECVE-2026-5567

SeverityHIGH

TypeUPDATED

PublishedSun, Apr 05 · 01:17 PM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 12:16 AM CDT

CVE-2026-5605

8.8/10 · Worth your time

NVDvuln

Summary
A weakness has been identified in Tenda CH22 1.0.0.1. This affects the function formWrlExtraSet of the file /goform/WrlExtraSet. Executing a manipulation of the argument GO can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been made available to the public and could be used f

CVECVE-2026-5605

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 12:16 AM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 01:16 AM CDT

CVE-2026-5608

8.8/10 · Worth your time

NVDvuln

Summary
A vulnerability was detected in Belkin F9K1122 1.00.33. Affected is the function formWlanSetup of the file /goform/formWlanSetup. The manipulation of the argument webpage results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public and may be used. The vendor was contacted

CVECVE-2026-5608

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 01:16 AM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 02:16 AM CDT

CVE-2026-5609

8.8/10 · Worth your time

NVDvuln

Summary
A flaw has been found in Tenda i12 1.0.0.11(3862). Affected by this vulnerability is the function formwrlSSIDset of the file /goform/wifiSSIDset of the component Parameter Handler. This manipulation of the argument index/wl_radio causes stack-based buffer overflow. It is possible to initiate the attack remotely. The ex

CVECVE-2026-5609

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 02:16 AM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 02:16 AM CDT

CVE-2026-5610

8.8/10 · Worth your time

NVDvuln

Summary
A vulnerability has been found in Belkin F9K1015 1.00.10. Affected by this issue is the function formWISP5G of the file /goform/formWISP5G. Such manipulation of the argument webpage leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may b

CVECVE-2026-5610

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 02:16 AM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 03:16 AM CDT

CVE-2026-5613

8.8/10 · Worth your time

NVDvuln

Summary
A vulnerability was identified in Belkin F9K1015 1.00.10. This issue affects the function formReboot of the file /goform/formReboot. The manipulation of the argument webpage leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was co

CVECVE-2026-5613

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 03:16 AM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 04:16 AM CDT

CVE-2026-5614

8.8/10 · Worth your time

NVDvuln

Summary
A security flaw has been discovered in Belkin F9K1015 1.00.10. Impacted is the function formSetPassword of the file /goform/formSetPassword. The manipulation of the argument webpage results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been released to the public and may be used f

CVECVE-2026-5614

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 04:16 AM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 06:16 AM CDT

CVE-2026-5628

8.8/10 · Worth your time

NVDvuln

Summary
A security vulnerability has been detected in Belkin F9K1015 1.00.10. Impacted is the function formSetSystemSettings of the file /goform/formSetSystemSettings of the component Setting Handler. The manipulation of the argument webpage leads to stack-based buffer overflow. Remote exploitation of the attack is possible. T

CVECVE-2026-5628

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 06:16 AM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 06:16 AM CDT

CVE-2026-5629

8.8/10 · Worth your time

NVDvuln

Summary
A vulnerability was detected in Belkin F9K1015 1.00.10. The affected element is the function formSetFirewall of the file /goform/formSetFirewall. The manipulation of the argument webpage results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The vendor wa

CVECVE-2026-5629

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 06:16 AM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 10:16 PM CDT

CVE-2026-5685

8.8/10 · Worth your time

NVDvuln

Summary
A vulnerability was identified in Tenda CX12L 16.03.53.12. This affects the function fromAddressNat of the file /goform/addressNat. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used.

CVECVE-2026-5685

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 10:16 PM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 10:16 PM CDT

CVE-2026-5686

8.8/10 · Worth your time

NVDvuln

Summary
A security flaw has been discovered in Tenda CX12L 16.03.53.12. This vulnerability affects the function fromRouteStatic of the file /goform/RouteStatic. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may

CVECVE-2026-5686

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 10:16 PM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 10:16 PM CDT

CVE-2026-5687

8.8/10 · Worth your time

NVDvuln

Summary
A weakness has been identified in Tenda CX12L 16.03.53.12. This issue affects the function fromNatStaticSetting of the file /goform/NatStaticSetting. This manipulation of the argument page causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made available to the public and cou

CVECVE-2026-5687

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 10:16 PM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 10:16 PM CDT

CVE-2026-5707

8.8/10 · Worth your time

NVDvuln

Summary
Unsanitized input in an OS command in the virtual desktop session name handling in AWS Research and Engineering Studio (RES) version 2025.03 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands as root on the virtual desktop host via a crafted session name. To remediate this issue,

CVECVE-2026-5707

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 10:16 PM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 10:16 PM CDT

CVE-2026-5708

8.8/10 · Worth your time

NVDvuln

Summary
Unsanitized control of user-modifiable attributes in the session creation component in AWS Research and Engineering Studio (RES) prior to version 2026.03 could allow an authenticated remote user to escalate privileges, assume the virtual desktop host instance profile permissions, and interact with AWS resources and ser

CVECVE-2026-5708

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 10:16 PM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Mon, Apr 06 · 10:16 PM CDT

CVE-2026-5709

8.8/10 · Worth your time

NVDvuln

Summary
Unsanitized input in the FileBrowser API in AWS Research and Engineering Studio (RES) version 2024.10 through 2025.12.01 might allow a remote authenticated actor to execute arbitrary commands on the cluster-manager EC2 instance via crafted input when using the FileBrowser functionality. To remediate this issue, users a

CVECVE-2026-5709

SeverityHIGH

TypeUPDATED

PublishedMon, Apr 06 · 10:16 PM CDT

ModifiedFri, Jul 24 · 09:10 AM CDT

Open article ↗

Wed, Apr 08 · 10:16 PM CDT

CVE-2026-5858

8.8/10 · Worth your time

NVDvuln

Summary
Heap buffer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)

CVECVE-2026-5858

SeverityHIGH

TypeUPDATED

PublishedWed, Apr 08 · 10:16 PM CDT

ModifiedFri, Jul 24 · 08:10 AM CDT

Open article ↗

Wed, Apr 08 · 10:16 PM CDT

CVE-2026-5859

8.8/10 · Worth your time

NVDvuln

Summary
Integer overflow in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

CVECVE-2026-5859

SeverityHIGH

TypeUPDATED

PublishedWed, Apr 08 · 10:16 PM CDT

ModifiedFri, Jul 24 · 08:10 AM CDT

Open article ↗

Wed, Apr 08 · 10:16 PM CDT

CVE-2026-5860

8.8/10 · Worth your time

NVDvuln

Summary
Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVECVE-2026-5860

SeverityHIGH

TypeUPDATED

PublishedWed, Apr 08 · 10:16 PM CDT

ModifiedFri, Jul 24 · 08:10 AM CDT

Open article ↗

Ignore today

Generic low-detail roundups without primary reporting.
HN items that are interesting but not clearly security or AI relevant.
Creator videos that look more like promotion, podcast chatter, or evergreen content than time-sensitive signal outside the rolling window.