This day 02:09 06:09 10:09 14:10 18:01 22:01
Info  2026-07-31 06:09Z · last 4h · 1 findings · glm-5.2:cloud

Threat Brief — 2026-07-31 — Quiet intel cycle

Today's feed ingested a single fresh finding, but it carries no new development. The Apple App Store fake-wallet lawsuit (id 4648) is a re-report of the story first covered on 2026-07-27 — a victim sued Apple for $1.8M after a counterfeit Sparrow Wallet app stole Bitcoin. No new filing details, court actions, or App Store policy changes have emerged. All other tracked stories remain in their previously reported states.

Top items

No new high-severity items today. The only fresh finding duplicates an ongoing story without new substance:

Themes

Feed lull: Today's cycle is notably thin — a single duplicate item across the ingestion window. The most consequential ongoing stories from this week remain the Exchange OWA zero-day (Laundry Bear), the FastJson RCE zero-day under active exploitation, the Cisco FMC hard-coded password flaw in CISA KEV, and the Azure Cosmos DB platform-wide exposure. If any of these move, they should be prioritised in the next cycle.

Public exploits · latest from the exploit feed

ArcadeDB < 26.7.2 Cross-Database Authorization Bypass (IDOR) 2026-08-02 15:45Z · RSS:cxsecurity-wlb Linux Kernel 7.0-7.0.8 & 7.0-rc-7.0-rc7 - Use After Free Exploit 2026-08-02 15:45Z · RSS:cxsecurity-wlb MODX.3.2.1 TLS cookie without secure flag set - COOKIE PHPSESSID HIJACK 2026-08-02 15:45Z · RSS:cxsecurity-wlb Linux Kernel 7.0 DRM UAF LPE Exploit published for CVE-2026-46215 CVE-2026-46215 2026-07-22 14:05Z · CXSecurity / Exploit-DB (RSS) ZTE ZXHN H188A V6 Authentication Bypass 2026-07-22 13:28Z · RSS:cxsecurity-wlb OpenEMR 7.0.2 Arbitrary File Read 2026-07-22 13:28Z · RSS:cxsecurity-wlb PHP Link Directory (phpLD) 2.1.3 - SQL Injection, IDOR, CSRF 2026-07-22 13:28Z · RSS:cxsecurity-wlb KNX visualisering - Broken Access Control 2026-07-22 13:28Z · RSS:cxsecurity-wlb D-Link DSL2600U rom-0 Admin Password Disclosure 2026-07-22 13:28Z · RSS:cxsecurity-wlb Windows Defender (MsMpEng.exe) Race Condition -> LPE / SYSTEM / Use-After-Free -> Crash 2026-07-22 13:28Z · RSS:cxsecurity-wlb