#meta · kyber.today

June 30, 2026

Edge Appliances Bleed: watchTowr Drops Kemp LoadMaster Pre-Auth RCE as Oracle EBS Joins the Exploited List

watchTowr published a critical pre-auth RCE exploit for Progress Kemp LoadMaster (CVE-2026-8037), a network-edge appliance commonly fronting enterprise services. Oracle E-Business Suite (CVE-2026-46817) and SimpleHelp (CVE-2026-48558) vulnerabilities are being actively exploited in the wild; the latter drops Djinn Stealer, a new cross-platform infostealer targeting cloud and AI credentials. Microsoft removed 119 malicious Edge extensions in the StegoAd campaign (2.6M installs) that used steganography to hide credential-stealing and ad-fraud payloads, while Mustang Panda exploits Zoho WorkDrive against Indian government targets and ShinyHunters breaches Oracle PeopleSoft systems affecting NAIC and Nissan. Coinbase and other major tech companies are shifting internal AI workloads to Chinese open-weight models (GLM 5.2, Kimi 2.7, DeepSeek V4) to reduce costs, raising supply-chain and data-leakage concerns.

June 23, 2026

Five Eyes Warns Frontier AI Will Reshape Offensive Cyber Ops as a New Entra ID Conditional Access Bypass Surfaces

The Five Eyes intelligence alliance warns that frontier AI models could reshape offensive cyber operations within months, lowering barriers to high-impact attacks. Meanwhile, dirkjanm disclosed a critical Entra ID Conditional Access bypass via resource exclusion, and researchers demonstrated multiple AI security flaws including DifyTap vulnerabilities in the Dify platform and AutoGen Studio RCE. The Klue data breach fallout expanded to include major security vendors like HackerOne, Huntress, Recorded Future, and Snyk, while a decade-old infostealer credential was used to hijack Brazil's Emergency Alert System at national scale.