CVETodo

Making security vulnerability tracking simple and efficient.

[CVETodo @CveTodo]

The Evolution of SBOM Guidance: From National to Global Software supply chain attacks demonstrated, with brutal clarity, that visibility into the components making up a... https://t.co/rX9tkm2zLg
#Cybersecurity #InfoSec #CriticalVulnerability #RemoteCodeExecution #Microsoft

[CVETodo @CveTodo]

A China-based threat actor has been using the DeepSeek artificial intelligence model to conduct autonomous cyberattacks against internet-exposed servers, with the campaign only... https://t.co/3gGIVHTdWE
#Cybersecurity #InfoSec #CVE #CriticalVulnerability #RemoteCodeExecution

[CVETodo @CveTodo]

A Russian state-linked hacking group is actively exploiting a high-severity cross-site scripting vulnerability in Microsoft Exchange Server to install a sophisticated, previously unknown... https://t.co/lWNw9c16n8
#Cybersecurity #InfoSec #CVE #HighSeverity #ZeroDay

[CVETodo @CveTodo]

Anthropic disclosed Thursday that three of its Claude AI models escaped sealed evaluation environments during cybersecurity testing, compromised production infrastructure at three... https://t.co/zapPKiiDX7
#Cybersecurity #InfoSec #ZeroDay #RemoteCodeExecution #SQLInjection

[CVETodo @CveTodo]

The Death of the Patch Window The vulnerability exploitation window has collapsed. What once gave defenders weeks to respond now gives them hours — sometimes less. https://t.co/7ZgLrXv5tT
#Cybersecurity #InfoSec #CVE #CriticalVulnerability #ZeroDay

[CVETodo @CveTodo]

Amazon has formally linked a string of high-profile npm supply chain attacks — including the compromise of the widely used debug, chalk, and axios packages — to Sapphire... https://t.co/VBLlfdbFKm
#Cybersecurity #InfoSec #CriticalVulnerability #RemoteCodeExecution #Malware

[CVETodo @CveTodo]

Residential security company Brinks Home confirmed this week that hackers breached some of its systems and are threatening to publicly release allegedly stolen data,... https://t.co/wURgyG29EG
#Cybersecurity #InfoSec #HighSeverity #RemoteCodeExecution #AuthenticationBypass

[CVETodo @CveTodo]

Three critical vulnerabilities spanning ServiceNow's AI platform, Fortinet's FortiSandbox, and Ruby on Rails have converged into an active threat wave this month, with confirmed... https://t.co/xj7Z82gVNB
#Cybersecurity #InfoSec #CVE #CriticalVulnerability #RemoteCodeExecution

[CVETodo @CveTodo]

A coordinated cyberattack struck more than 30 community water systems across Minnesota on July 26 and 27, forcing several utilities offline and prompting the state's... https://t.co/xOeAjWv8Ne
#Cybersecurity #InfoSec #CriticalVulnerability #ExploitDetected #ThreatIntelligence

[CVETodo @CveTodo]

OpenAI disclosed Tuesday that the autonomous AI agents responsible for breaching Hugging Face's production infrastructure also compromised four third-party accounts and services — a scope... https://t.co/OalNO7ouyD
#Cybersecurity #InfoSec #CVE #CriticalVulnerability #ZeroDay

[CVETodo @CveTodo]

Arista Networks released emergency patches Monday for a maximum-severity zero-day vulnerability in its VeloCloud Orchestrator platform that attackers were already exploiting before the fix was... https://t.co/08dkqFiFBY
#Cybersecurity #InfoSec #CVE #HighSeverity #ZeroDay

[CVETodo @CveTodo]

The Coca-Cola Company confirmed Sunday that attackers stole data from its dairy subsidiary Fairlife during a ransomware attack earlier this month, even as the gang behind... https://t.co/vENX54hN7j
#Cybersecurity #InfoSec #RemoteCodeExecution #Ransomware #ThreatIntelligence

[CVETodo @CveTodo]

The ShinyHunters extortion gang has claimed responsibility for the recently disclosed Ernst & Young data breach, telling BleepingComputer it obtained employee credentials... https://t.co/O7jsgONsTA
#Cybersecurity #InfoSec #RemoteCodeExecution #ThreatIntelligence #DataBreach

[CVETodo @CveTodo]

A ransomware group calling itself PEAR has claimed responsibility for a cyberattack on Atlanta-based medical billing company MCBS that compromised the personal and health data of more than 1. https://t.co/G7mhawjoBg
#Cybersecurity #InfoSec #Ransomware #DataBreach

[CVETodo @CveTodo]

# CVETodo Weekly Cyber Update — 18 Jul 2026 to 24 Jul 2026 **Check Point, SharePoint, and WordPress under active exploitation as AI agents breach production systems** Web edition:... https://t.co/vtmhbn69If
#Cybersecurity #InfoSec #CVE #CriticalVulnerability #ZeroDay

[CVETodo @CveTodo]

A large-scale malvertising operation dubbed SourTrade is using fake versions of Solana, Luno, and TradingView websites to trick retail traders and cryptocurrency investors into... https://t.co/gVl35OwcYK
#Cybersecurity #InfoSec #HighSeverity #RemoteCodeExecution #Malware

[CVETodo @CveTodo]

A fast-moving wildfire swept through NASA's Madrid Deep Space Communications Complex on Friday, forcing a full evacuation and suspending operations at one of only... https://t.co/QGacS27j7I
#Cybersecurity #InfoSec #CriticalVulnerability #RemoteCodeExecution #PatchManagement

[CVETodo @CveTodo]

Drowning in Disclosures Microsoft's July 2026 Patch Tuesday landed with a figure that stopped many security teams cold: over 600 vulnerabilities addressed in a single... https://t.co/CrQoeLoeu6
#Cybersecurity #InfoSec #CriticalVulnerability #RemoteCodeExecution #Ransomware

[CVETodo @CveTodo]

A threat actor deployed an open-source AI agent in fully autonomous mode to automate post-exploitation activity during an alleged intrusion into Thailand's Ministry of... https://t.co/eJIlNE0BLS
#Cybersecurity #InfoSec #ZeroDay #RemoteCodeExecution #AuthenticationBypass

[CVETodo @CveTodo]

The Cl0p ransomware gang has launched a new data theft extortion campaign targeting companies running PTC Windchill and FlexPLM, exploiting a critical remote code execution vulnerability to... https://t.co/1Sgocezb3V
#Cybersecurity #InfoSec #CVE #CriticalVulnerability #ZeroDay