[nextcloud]

July 21, 2026

• Nextcloud confirmed its website was compromised, per early reporting on the open-source Microsoft 365 rival. IntCyberDigest via @Dinosn. · Data Breaches

in Microsoft Graph Becomes a Spy's Dead Drop as WordPress "wp2shell" Exploitation Goes Live

June 24, 2026

• PixelSmash, a critical RCE in FFmpeg's MagicYUV decoder, lets a crafted media file execute code in any app using libavcodec — RCE on Jellyfin under certain conditions, and DoS in Kodi, Emby, Nextcloud, PhotoPrism, and OBS. Now patched. JFrog, BleepingComputer. · Vulnerabilities & Exploits

in Two Netlogon Flaws Hit Domain Controllers as FortiBleed Lands in Finland