DEV Community: BeyondMachines

CISA Issues Urgent Warning on SharePoint Server Exploitation

BeyondMachines — Wed, 15 Jul 2026 12:01:30 +0000

Summary

CISA warns of active exploitation of three SharePoint Server vulnerabilities (CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164) used by threat actors to deploy malware and steal IIS machine keys. The agency also reports two additional critical flaws (CVE-2026-55040 and CVE-2026-58644) that pose a high risk for remote code execution and authentication bypass.

Take Action:

If you run on-premise SharePoint Server (2016, 2019, or Subscription Edition), apply the latest Microsoft security updates immediately. Three of these flaws are being actively exploited to deploy ransomware. Then check your servers for signs of breach before rotating your IIS machine keys, and block direct internet access to SharePoint (especially the Central Administration interface) by placing it behind a reverse proxy.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Broadcom Patches Seven Critical and High-Severity Flaws in VMware Avi Load Balancer

BeyondMachines — Wed, 15 Jul 2026 11:01:29 +0000

Summary

Broadcom patched seven vulnerabilities in VMware Avi Load Balancer, including a critical authentication bypass (CVE-2026-47865) that allows unauthenticated network attackers to take over the control plane. The updates also fix flaws enabling remote code execution, privilege escalation, and directory traversal across multiple software versions.

Take Action:

If you use VMware Avi Load Balancer, make sure its management interface is isolated from the internet and reachable only from trusted admin networks. A flaw lets attackers take it over without any password. Then update ASAP to the patched versions (32.1.2, 31.2.2-2p3, or 30.2.7).

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

SonicWall Patches SMA1000 Zero-Day Vulnerabilities Under Active Attack

BeyondMachines — Wed, 15 Jul 2026 10:01:29 +0000

Summary

SonicWall disclosed two zero-day vulnerabilities in SMA1000 appliances, including a critical CVSS 10.0 SSRF flaw, that are currently being exploited in the wild. CISA has mandated federal agencies to patch these systems by July 17, 2026, to prevent unauthorized network access and command execution.

Take Action:

If you are using SonicWall SMA1000 appliances, this is urgent. Patch immediately because attackers are already using these flaws to break into networks. If you find any signs of a breach, you must wipe the device and reset all credentials to ensure the attackers are gone.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Adobe releases July 2026 patches for multiple products

BeyondMachines — Wed, 15 Jul 2026 09:01:29 +0000

Summary

Adobe's July 2026 security updates patch dozens of vulnerabilities, including numerous critical flaws (some with CVSS scores up to 9.9) enabling arbitrary code execution and privilege escalation across 11 product families. Major impacted products are ColdFusion, Commerce/Magento, and Experience Manager.

Take Action:

If you use any Adobe products, prioritize updating ColdFusion immediately, as it received Adobe's highest priority rating and contains critical vulnerabilities that could lead to arbitrary code execution, privilege escalation, and arbitrary file system read. Next, update Adobe Commerce and Magento Open Source. Then update the rest of your Adobe software, especially Adobe Experience Manager and Creative Cloud applications (Audition, Premiere Pro, After Effects, Illustrator, Bridge, Animate, and the Creative Cloud Desktop app itself), which contain critical code execution flaws. If you can't update right away, consider restricting network access to ColdFusion, Commerce, and AEM servers, and avoid opening untrusted files in affected desktop applications until patches are applied.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Microsoft July 2026 Patch Tuesday Fixes Record 570 Vulnerabilities and Three Zero-Days

BeyondMachines — Wed, 15 Jul 2026 08:01:30 +0000

Summary

Microsoft's July 2026 Patch Tuesday fixes a record 570 vulnerabilities, including three zero-days and 59 critical flaws. The release addresses actively exploited elevation of privilege vulnerabilities in SharePoint and Active Directory Federation Services.

Take Action:

This month prioritize patching of Windows and Microsoft Office, then SharePoint Server. Then work through the rest of the products. This is a huge list of patches, and a lot of them will be exploited soon.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Hackers claim breach of Inter-Con Security Systems

BeyondMachines — Tue, 14 Jul 2026 16:01:49 +0000

Summary

ShinyHunters claim that they have breached Inter-Con Security Systems and allegedly stole approximately 2.7 million records. There is no confirmation of the breach nor comment from Inter-Con.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Blank Rome Data Breach Exposes Sensitive Information of More Than 57,000 Individuals

BeyondMachines — Tue, 14 Jul 2026 14:01:50 +0000

Summary

Blank Rome LLP disclosed a data breach affecting over 57,000 individuals after a threat actor used social engineering to trick an attorney into uploading sensitive files to an external account. The exposed data may include Social Security numbers, financial information, government identification numbers, and medical or health insurance information. The firm is offering complimentary credit monitoring and identity protection services to affected individuals.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

LIA Insurance Data Breach Exposes Financial Account Information

BeyondMachines — Tue, 14 Jul 2026 13:01:49 +0000

Summary

LIA Insurance Administrators Inc. reports a data breach to the Vermont Attorney General involving unauthorized access to consumer financial account codes and credit/debit information.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

PennyMac Group Health Plan Data Breach Impacts Nearly 4,000 Individuals

BeyondMachines — Tue, 14 Jul 2026 12:01:50 +0000

Summary

PennyMac disclosed a hacking incident involving its Group Health Plan that compromised the protected health information of 3,972 individuals. The breach was reported to federal regulators in June 2026.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

TriWest Healthcare Alliance Reports Data Breach Affecting 11,844 Military Beneficiaries

BeyondMachines — Tue, 14 Jul 2026 11:01:48 +0000

Summary

TriWest Healthcare Alliance reports a security breach where an unauthorized actor accessed and downloaded the personal health information of 11,844 military beneficiaries. The company has implemented new security controls and is offering credit monitoring services to the affected individuals.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Estée Lauder Companies Reports Data Breach Exposing Health Records and SSNs

BeyondMachines — Tue, 14 Jul 2026 10:01:49 +0000

Summary

The Estée Lauder Companies Inc. disclosed a data breach on July 10, 2026, exposing Social Security numbers, health records, and financial data. The company is working with law enforcement to investigate the breach and has begun notifying affected individuals.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Blue Fish Pediatrics Reports Data Breach Affecting Over 62,000 Patients

BeyondMachines — Tue, 14 Jul 2026 09:01:48 +0000

Summary

Blue Fish Pediatrics disclosed a data breach exposing sensitive medical and personal data for 62,150 individuals.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines