Archive snapshot

Thu, Jul 30 · 06:01 AM CDT

Archived briefing content rendered inside the ACSP site experience.

Back to archive

Archived briefing

Snapshot overview

Generated Thu, Jul 30 · 06:00 AM CDTWindow last 6 hours

Top line

Coverage now updates on a rolling 6-hour window, while NVD entries come from the live API using a last-24-hours modified window and are sorted by severity.

Fast take

News stays on the current 6-hour slice, videos now use the last 24 hours, and NVD uses the API instead of the traditional feed to better match the live site behavior.

Top stories

5

Worth skimming

5

Tracked videos

1

NVD vulnerabilities

25

Top stories

Thu, 30 Jul 2026 13:10:48 +0530

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

9.8/10 · Must read/watch

The Hacker Newsvulnaipolicyidentity

Summary
The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as wel

Open article ↗

Thu, 30 Jul 2026 10:38:39 +0530

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

9.8/10 · Must read/watch

The Hacker Newsvulnpolicyidentity

Summary
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero

Open article ↗

Thu, 30 Jul 2026 16:03:15 +0530

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

9.3/10 · Must read/watch

The Hacker Newsvulnaiidentity

Summary
South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIG

Open article ↗

Thu, 30 Jul 2026 11:35:17 +0530

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

9.2/10 · Must read/watch

The Hacker Newssupply-chainai

Summary
Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain and a wallet-draining script pushed into at

Open article ↗

Thu, Jul 30 · 06:00 AM CDT

Google Releases Patches for 370 Vulnerabilities in Chrome 151

8.8/10 · Worth your time

Infosecurity Magazinevuln

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗

Worth skimming

Thu, 30 Jul 2026 16:02:59 +0530

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

8.6/10 · Worth your time

The Hacker Newsai

Summary
The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (BYOVD) attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT (aka Winos

Open article ↗

Thu, Jul 30 · 06:00 AM CDT

NCSC Calls on Vendors to Embed ‘Forensic Observability’ in Network Devices

8.2/10 · Worth your time

Infosecurity Magazinepolicy

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗

Thu, Jul 30 · 06:00 AM CDT

LogoKit Phishing Kit Screenshots Victim Sites in Real Time

8.1/10 · Worth your time

Infosecurity Magazinegeneral

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗

Thu, Jul 30 · 06:00 AM CDT

The Average Cost of a Data Breach Rises to $5 Million

8.1/10 · Worth your time

Infosecurity Magazinegeneral

Summary
Collected from the Infosecurity Magazine news page during the latest run.

Open article ↗

Thu, 30 Jul 2026 12:58:43 +0530

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks

8.1/10 · Worth your time

The Hacker Newsaiidentity

Summary
The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, marketing, or

Open article ↗

Videos worth watching

Wed, Jul 29 · 10:01 AM CDT

Minecraft Security Mods

7.6/10 · Worth your time

YouTube / John Hammondgeneral

Why it matters
Recent creator upload with some page-level evidence. Better than raw feed discovery, but still not a full content review.

Summary
What if Minecraft became a cybersecurity playground?I started throwing around the idea of turning real security research into game mechanics. Think executabl...

Worth watching?Maybe — good candidate if the title matches your interests, but confidence is still moderate.

Confidencelow

Open article ↗

NVD vulnerabilities

Tue, Jan 21 · 01:15 PM CST

CVE-2025-21663

10.0/10 · Must read/watch

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: net: stmmac: dwmac-tegra: Read iommu stream id from device tree Nvidia's Tegra MGBE controllers require the IOMMU "Stream ID" (SID) to be written to the MGBE_WRAP_AXI_ASID0_CTRL register. The current driver is hard coded to use MGBE0's SID for all cont

CVECVE-2025-21663

SeverityCRITICAL

TypeUPDATED

PublishedTue, Jan 21 · 01:15 PM CST

ModifiedThu, Jul 30 · 06:18 AM CDT

Open article ↗

Thu, Jun 02 · 02:15 PM CDT

CVE-2022-31340

9.8/10 · Must read/watch

NVDvuln

Summary
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.

CVECVE-2022-31340

SeverityCRITICAL

TypeUPDATED

PublishedThu, Jun 02 · 02:15 PM CDT

ModifiedWed, Jul 29 · 05:22 PM CDT

Open article ↗

Fri, Jan 31 · 12:15 PM CST

CVE-2025-21673

9.8/10 · Must read/watch

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix double free of TCP_Server_Info::hostname When shutting down the server in cifs_put_tcp_session(), cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server->hostname can't be free

CVECVE-2025-21673

SeverityCRITICAL

TypeUPDATED

PublishedFri, Jan 31 · 12:15 PM CST

ModifiedThu, Jul 30 · 06:18 AM CDT

Open article ↗

Thu, Feb 27 · 02:15 AM CST

CVE-2025-21707

9.8/10 · Must read/watch

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: mptcp: consolidate suboption status MPTCP maintains the received sub-options status is the bitmask carrying the received suboptions and in several bitfields carrying per suboption additional info. Zeroing the bitmask before parsing is not enough to ens

CVECVE-2025-21707

SeverityCRITICAL

TypeUPDATED

PublishedThu, Feb 27 · 02:15 AM CST

ModifiedThu, Jul 30 · 06:20 AM CDT

Open article ↗

Thu, Feb 27 · 03:15 AM CST

CVE-2025-21748

9.8/10 · Must read/watch

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit systems On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.

CVECVE-2025-21748

SeverityCRITICAL

TypeUPDATED

PublishedThu, Feb 27 · 03:15 AM CST

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Thu, Feb 27 · 03:15 AM CST

CVE-2025-21796

9.8/10 · Must read/watch

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them If getting acl_default fails, acl_access and acl_default will be released simultaneously. However, acl_access will still retain a pointer pointing to the released posix_acl, which will trigger a W

CVECVE-2025-21796

SeverityCRITICAL

TypeUPDATED

PublishedThu, Feb 27 · 03:15 AM CST

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Thu, Feb 27 · 08:16 PM CST

CVE-2025-21805

9.8/10 · Must read/watch

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Add missing deinit() call A warning is triggered when repeatedly connecting and disconnecting the rnbd: list_add corruption. prev->next should be next (ffff88800b13e480), but was ffff88801ecd1338. (prev=ffff88801ecd1340). WARNING: CPU: 1 PID

CVECVE-2025-21805

SeverityCRITICAL

TypeUPDATED

PublishedThu, Feb 27 · 08:16 PM CST

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Thu, Mar 06 · 05:15 PM CST

CVE-2025-21829

9.8/10 · Must read/watch

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]" The Call Trace is as below: " ? show_regs.cold+0x1a/0x1f ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? __warn+0x84/0xd0 ? __rxe_cleanup+0x12c/0x170 [rdma_rxe] ? report_bug+0x105/0x180 ? handle

CVECVE-2025-21829

SeverityCRITICAL

TypeUPDATED

PublishedThu, Mar 06 · 05:15 PM CST

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Wed, Mar 12 · 10:15 AM CDT

CVE-2025-21850

9.8/10 · Must read/watch

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: nvmet: Fix crash when a namespace is disabled The namespace percpu counter protects pending I/O, and we can only safely diable the namespace once the counter drop to zero. Otherwise we end up with a crash when running blktests/nvme/058 (eg for loop tra

CVECVE-2025-21850

SeverityCRITICAL

TypeUPDATED

PublishedWed, Mar 12 · 10:15 AM CDT

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Tue, Apr 01 · 04:15 PM CDT

CVE-2025-21927

9.8/10 · Must read/watch

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() nvme_tcp_recv_pdu() doesn't check the validity of the header length. When header digests are enabled, a target might send a packet with an invalid header length (e.g. 255), causing nvme_t

CVECVE-2025-21927

SeverityCRITICAL

TypeUPDATED

PublishedTue, Apr 01 · 04:15 PM CDT

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Tue, Apr 01 · 04:15 PM CDT

CVE-2025-21954

9.8/10 · Must read/watch

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: netmem: prevent TX of unreadable skbs Currently on stable trees we have support for netmem/devmem RX but not TX. It is not safe to forward/redirect an RX unreadable netmem packet into the device's TX path, as the device may call dma-mapping APIs on dma

CVECVE-2025-21954

SeverityCRITICAL

TypeUPDATED

PublishedTue, Apr 01 · 04:15 PM CDT

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Thu, Oct 31 · 05:15 AM CDT

CVE-2024-21537

8.8/10 · Worth your time

NVDvuln

Summary
Versions of the package lilconfig from 3.1.0 and before 3.1.1 are vulnerable to Arbitrary Code Execution due to the insecure usage of eval in the dynamicImport function. An attacker can exploit this vulnerability by passing a malicious input through the defaultLoaders function.

CVECVE-2024-21537

SeverityHIGH

TypeUPDATED

PublishedThu, Oct 31 · 05:15 AM CDT

ModifiedWed, Jul 29 · 04:17 PM CDT

Open article ↗

Thu, Feb 27 · 03:15 AM CST

CVE-2025-21735

8.8/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in nci_hci_create_pipe() The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, nci_hci_connect_gate().

CVECVE-2025-21735

SeverityHIGH

TypeUPDATED

PublishedThu, Feb 27 · 03:15 AM CST

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Thu, Mar 06 · 04:15 PM CST

CVE-2025-21828

8.8/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't flush non-uploaded STAs If STA state is pre-moved to AUTHORIZED (such as in IBSS scenarios) and insertion fails, the station is freed. In this case, the driver never knew about the station, so trying to flush it is unexpected and

CVECVE-2025-21828

SeverityHIGH

TypeUPDATED

PublishedThu, Mar 06 · 04:15 PM CST

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Thu, Mar 27 · 03:15 PM CDT

CVE-2025-21876

8.8/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix suspicious RCU usage Commit ("iommu/vt-d: Allocate DMAR fault interrupts locally") moved the call to enable_drhd_fault_handling() to a code path that does not hold any lock while traversing the drhd list. Fix it by ensuring the dmar_glo

CVECVE-2025-21876

SeverityHIGH

TypeUPDATED

PublishedThu, Mar 27 · 03:15 PM CDT

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Tue, Apr 01 · 04:15 PM CDT

CVE-2025-21945

8.8/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in smb2_lock If smb_lock->zero_len has value, ->llist of smb_lock is not delete and flock is old one. It will cause use-after-free on error handling routine.

CVECVE-2025-21945

SeverityHIGH

TypeUPDATED

PublishedTue, Apr 01 · 04:15 PM CDT

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Tue, Apr 01 · 04:15 PM CDT

CVE-2025-21946

8.8/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds in parse_sec_desc() If osidoffset, gsidoffset and dacloffset could be greater than smb_ntsd struct size. If it is smaller, It could cause slab-out-of-bounds. And when validating sid, It need to check it included subauth array s

CVECVE-2025-21946

SeverityHIGH

TypeUPDATED

PublishedTue, Apr 01 · 04:15 PM CDT

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Tue, Apr 01 · 04:15 PM CDT

CVE-2025-21955

8.8/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: prevent connection release during oplock break notification ksmbd_work could be freed when after connection release. Increment r_count of ksmbd_conn to indicate that requests are not finished yet and to not release the connection.

CVECVE-2025-21955

SeverityHIGH

TypeUPDATED

PublishedTue, Apr 01 · 04:15 PM CDT

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Tue, Apr 01 · 04:15 PM CDT

CVE-2025-21967

8.8/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in ksmbd_free_work_struct ->interim_entry of ksmbd_work could be deleted after oplock is freed. We don't need to manage it with linked list. The interim request could be immediately sent whenever a oplock break wait is needed.

CVECVE-2025-21967

SeverityHIGH

TypeUPDATED

PublishedTue, Apr 01 · 04:15 PM CDT

ModifiedThu, Jul 30 · 06:22 AM CDT

Open article ↗

Tue, Apr 01 · 04:15 PM CDT

CVE-2025-21969

8.8/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd After the hci sync command releases l2cap_conn, the hci receive data work queue references the released l2cap_conn when sending to the upper layer. Add hci dev lock to the hci receive dat

CVECVE-2025-21969

SeverityHIGH

TypeUPDATED

PublishedTue, Apr 01 · 04:15 PM CDT

ModifiedThu, Jul 30 · 06:22 AM CDT

Open article ↗

Wed, Mar 12 · 10:15 AM CDT

CVE-2025-21855

8.6/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Don't reference skb after sending to VIOS Previously, after successfully flushing the xmit buffer to VIOS, the tx_bytes stat was incremented by the length of the skb. It is invalid to access the skb memory after sending the buffer to the VIOS

CVECVE-2025-21855

SeverityHIGH

TypeUPDATED

PublishedWed, Mar 12 · 10:15 AM CDT

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Wed, Jan 15 · 01:15 PM CST

CVE-2025-21629

8.2/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets The blamed commit disabled hardware offoad of IPv6 packets with extension headers on devices that advertise NETIF_F_IPV6_CSUM, based on the definition of that feature in skbuff.h: * * - %NETIF

CVECVE-2025-21629

SeverityHIGH

TypeUPDATED

PublishedWed, Jan 15 · 01:15 PM CST

ModifiedThu, Jul 30 · 06:16 AM CDT

Open article ↗

Thu, Feb 27 · 02:15 AM CST

CVE-2025-21710

8.2/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: tcp: correct handling of extreme memory squeeze Testing with iperf3 using the "pasta" protocol splicer has revealed a problem in the way tcp handles window advertising in extreme memory squeeze situations. Under memory pressure, a socket endpoint may t

CVECVE-2025-21710

SeverityHIGH

TypeUPDATED

PublishedThu, Feb 27 · 02:15 AM CST

ModifiedThu, Jul 30 · 06:20 AM CDT

Open article ↗

Thu, Mar 27 · 03:15 PM CDT

CVE-2025-21890

8.2/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: idpf: fix checksums set in idpf_rx_rsc() idpf_rx_rsc() uses skb_transport_offset(skb) while the transport header is not set yet. This triggers the following warning for CONFIG_DEBUG_NET=y builds. DEBUG_NET_WARN_ON_ONCE(!skb_transport_header_was_set(skb

CVECVE-2025-21890

SeverityHIGH

TypeUPDATED

PublishedThu, Mar 27 · 03:15 PM CDT

ModifiedThu, Jul 30 · 06:21 AM CDT

Open article ↗

Tue, Jan 21 · 01:15 PM CST

CVE-2025-21659

8.1/10 · Worth your time

NVDvuln

Summary
In the Linux kernel, the following vulnerability has been resolved: netdev: prevent accessing NAPI instances from another namespace The NAPI IDs were not fully exposed to user space prior to the netlink API, so they were never namespaced. The netlink API must ensure that at the very least NAPI instance belongs to the s

CVECVE-2025-21659

SeverityHIGH

TypeUPDATED

PublishedTue, Jan 21 · 01:15 PM CST

ModifiedThu, Jul 30 · 06:17 AM CDT

Open article ↗

Ignore today

Generic low-detail roundups without primary reporting.
HN items that are interesting but not clearly security or AI relevant.
Creator videos that look more like promotion, podcast chatter, or evergreen content than time-sensitive signal outside the rolling window.