https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/#new_tab 2026-07-31T20:40:35Z Security Risk Advisors en Unit 42 Finds Threat Actor Using AI Agents to Automate Vulnerability Discovery and Exploitation Attempts. 2026-07-31T20:40:35Z Blog https://labs.sra.io/posts/switchvox/#new_tab 2026-07-31T20:39:30Z Security Risk Advisors en SRA Discloses Critical RCE and Additional Web Vulnerabilities in Sangoma Switchvox SMB 2026-07-31T20:39:30Z Blog https://labs.sra.io/posts/ellucian/#new_tab 2026-07-31T20:37:38Z Security Risk Advisors en Ellucian Advance Authenticated SQL Injection Vulnerability CVE-2026-6881 Enables Unauthorized Database Access and Sensitive Information Extraction from Higher Education Institutions. 2026-07-31T20:37:38Z Blog https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Faws.amazon.com%2Fblogs%2Fsecurity%2Famazon-identifies-north-korean-hacker-group-behind-open-source-supply-chain-attacks%2F&data=05%7C02%7Ckimberly.kaleta%40sra.io%7Cdaa7ecc010534d87f09008deee531738%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639210237829178022%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=xJkqtAymUQlrqXszqpQxGCdswCCZaHzJniHcN3%2BKzig%3D&reserved=0#new_tab 2026-07-30T17:59:53Z Security Risk Advisors en 🚩 Amazon Links DPRK Threat Actor to Multiple NPM Supply Chain Compromises 2026-07-30T17:59:53Z Blog https://lavahq.io/research/bmc-exposure-alert#new_tab 2026-07-30T17:58:59Z Security Risk Advisors en Twenty-Year-Old IPMI Protocol Flaw Exposes 24,650 Internet-Facing BMC Interfaces to Offline Password Cracking 2026-07-30T17:58:59Z Blog https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsecurelist.com%2Fproject-cav3rn-cyberespionage-framework-using-outlook-and-dns%2F120757%2F&data=05%7C02%7Ckimberly.kaleta%40sra.io%7C366fa1ef64b443b4cf5008deee531898%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639210237815935678%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=%2BlzTmwo6hnLkz6Jc8s0iznuWKaZbx8l20QpBxbXjm0A%3D&reserved=0#new_tab 2026-07-30T17:58:03Z Security Risk Advisors en 🚩Kaspersky Identifies New Project CAV3RN Module Abusing Outlook Calendar Events and DNS For Command and Control in Active Cyberespionage Operations Targeting Israel. 2026-07-30T17:58:03Z Blog https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhunt.io%2Fblog%2Fflying-eagle-android-rat-170-servers-night-dragon&data=05%7C02%7Ckimberly.kaleta%40sra.io%7C197d4e57a99a4565fffe08deed7b06b0%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639209309831574646%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=ddr1yB2dRkoZx3aoZvMxJ0gspeTKa90%2F3EuN5J1XUGc%3D&reserved=0#new_tab 2026-07-29T19:11:07Z Security Risk Advisors en 🚩 Leaked Android RAT Framework "Flying Eagle" Powers 170 Active Servers, New Successor Tool Night Dragon Emerges 2026-07-29T19:11:07Z Blog https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fgo-gitea%2Fgitea%2Fsecurity%2Fadvisories%2FGHSA-rcr6-4jqh-j84m&data=05%7C02%7Ckimberly.kaleta%40sra.io%7Cc8477c2c0cd14020b0af08deed7b03aa%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639209309811794120%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=DixWlTaLQNjGw%2FogTGNTLokXgHJZn9JoTnuXRiOk07o%3D&reserved=0#new_tab 2026-07-29T19:10:00Z Security Risk Advisors en CVSS 9.8 Gitea Flaw Lets Repository Writers Install a Git Hook for Code Execution 2026-07-29T19:10:00Z Blog https://nam10.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.cisa.gov%2Fnews-events%2Fcybersecurity-advisories%2Faa26-204a&data=05%7C02%7Ckimberly.kaleta%40sra.io%7C78d7a38119dd4d0da09e08deed7b050f%7C9bdee6ea21c54c1ca6c941dc3d08c310%7C0%7C0%7C639209309811816384%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=WJwnMRWiMKUnZLxvVwEHBEq4rC46Aj%2FRrW1PtuP8mMw%3D&reserved=0#new_tab 2026-07-29T19:09:02Z Security Risk Advisors en 🚩 Russian APT Exploits Zimbra Zero-Day to Steal Emails, Credentials, and MFA Data through View-only Phishing. 2026-07-29T19:09:02Z Blog https://sra.io/blog/if-youre-prompting-an-agent-youve-already-lost/ 2026-07-29T14:38:17Z Security Risk Advisors en If You're Prompting an Agent, You've Already Lost 2026-07-29T14:38:07Z Blog