DEV Community: BeyondMachines

Oracle Releases Massive August 2026 Security Update Fixing 943 Vulnerabilities

BeyondMachines — Wed, 19 Aug 2026 20:01:23 +0000

Summary

Oracle's August 2026 update patches 943 vulnerabilities, including critical remote code execution flaws in WebLogic and E-Business Suite that allow unauthenticated attackers to take over systems.

Take Action:

If you are using Oracle products, review this advisory in detail. Prioritize patching of internet-facing systems, as more than 650 vulnerabilities allow remote attackers to compromise your systems without any authentication. Patch Oracle Fusion Middleware first: it accounts for nine of the flaws scored CVSS 10.0 and 219 network-accessible vulnerabilities requiring no credentials. Oracle Communications should follow, where 122 of 168 patches address unauthenticated remote issues.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Researcher Reports ClarityCheck Data Leak Exposing 9 Million Biometric Facial Images

BeyondMachines — Wed, 19 Aug 2026 17:01:23 +0000

Summary

ClarityCheck, a U.S. reverse image search service, exposed over 9 million biometric facial images due to an unsecured and unencrypted cloud database. The leak included photos of adults and children, raising significant concerns about the long-term privacy risks of persistent biometric data.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Quest Apartment Hotels Data Breach Reportedly Exposes 1.7 Million Guest Records

BeyondMachines — Wed, 19 Aug 2026 15:01:23 +0000

Summary

Quest Apartment Hotels disclosed a data breach involving unauthorized access to a historical customer database through a vulnerability involving a third-party service provider. The incident reportedly affected approximately 1.7 million guests, the company has contained the breach and notified Australian cybersecurity and privacy authorities.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Cameron Regional Medical Center Disclosed Ransomware Attack

BeyondMachines — Wed, 19 Aug 2026 14:01:23 +0000

Summary

Cameron Regional Medical Center disclosed a ransomware attack involving potential unauthorized access to sensitive patient information. The Anubis ransomware group claimed responsibility and alleged it stole patient and employee data. CRMC continues to investigate the scope of the incident.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Forrestall CPAs LLC Notifies Clients of Network Intrusion and Data Exfiltration

BeyondMachines — Wed, 19 Aug 2026 13:01:24 +0000

Summary

Forrestall CPAs LLC suffered a data breach where an unauthorized person accessed and stole client files between December 22 and December 30, 2025. The is providing identity monitoring services to affected individuals and has reported the incident to law enforcement.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Arkansas Oral Surgery Practice Suffers Ransomware Attack

BeyondMachines — Wed, 19 Aug 2026 12:01:23 +0000

Summary

Arkansas Oral & Maxillofacial Surgeons suffered a ransomware attack claimed by the PEAR group, resulting in the alleged theft of 2.1 terabytes of sensitive patient and corporate data. The breach exposed Social Security numbers, medical records, and financial information. The practice is offering credit monitoring services to affected individuals.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Lennar Mortgage Discloses Data Breach Following Social Engineering Attack

BeyondMachines — Wed, 19 Aug 2026 11:01:24 +0000

Summary

Lennar Mortgage and Lennar Corporation suffered a data breach after attackers used social engineering tactics to access internal systems between May and June 2026. The incident exposed sensitive personal and financial information, including Social Security numbers and government IDs, affecting over 60,000 individuals in Texas alone.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

RansomHub Group Claims 100GB Data Theft in 3C Care Systems Ransomware Attack

BeyondMachines — Wed, 19 Aug 2026 10:01:23 +0000

Summary

3C Care Systems, a healthcare IT provider, was targeted by the RansomHub ransomware group in an attack that compromised 100GB of sensitive patient data. The breach affected multiple healthcare clients, including the Midwest Spine and Brain Institute, leading to the exposure of PII and PHI.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Unauthenticated RCE Vulnerability Patched in Forminator Forms Plugin

BeyondMachines — Wed, 19 Aug 2026 09:01:23 +0000

Summary

WPMU DEV patched a critical vulnerability (CVE-2026-15748) in the Forminator Forms plugin that allowed unauthenticated attackers to upload and execute PHP files. The flaw can lead to full remote code execution and site compromise.

Take Action:

If you use the Forminator Forms plugin on your WordPress site, update it to version 1.56.2 or later ASAP away: attackers can take over the whole site without logging in. After updating, check your upload folders for any unfamiliar PHP files. If you can't update yet, delete any forms that use both File Upload and Select fields.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Attackers Exploit a Critical MLflow Vulnerability

BeyondMachines — Wed, 19 Aug 2026 08:01:24 +0000

Summary

Attackers are actively exploiting a critical flaw in MLflow (CVE-2026-64849) to steal cloud credentials and gain remote code execution.

Take Action:

If you run MLflow, update it to version 3.15.0 or later ASAP, and make sure the server is not reachable from the internet. Then check your audit logs for any odd requests to cloud metadata services. If you see any (or aren't sure), rotate your cloud credentials and keys as a precaution.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

Hacker Claims Large-Scale Azure Exfiltration Campaign Exposing 3.6 Million Records From Global Enterprises

BeyondMachines — Tue, 18 Aug 2026 12:01:46 +0000

Summary

A threat actor known as "TheHatman" is selling 3.6 million employee records allegedly stolen from the Azure tenants of several Fortune 500 companies, including McDonald's and Vodafone. The breach likely involved compromised credentials from infostealer infections and techniques like MFA fatigue to exfiltrate internal corporate directories.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines

GitLab Issues Emergency Patch for Critical GraphQL Flaw Allowing Remote Project Deletion

BeyondMachines — Tue, 18 Aug 2026 11:01:46 +0000

Summary

GitLab issued an emergency security update to fix a critical GraphQL code injection vulnerability (CVE-2026-19478) that allows unauthenticated attackers to remotely delete or modify public projects and user data.

Take Action:

If you run a self-managed GitLab server (version 18.2 through 19.2.3), update it ASAP to 19.2.4, 19.1.6, 19.0.8, or 18.11.11. The patch is quick and won't take your system offline. Before you patch, check your logs for unusual GraphQL activity so you know nobody has already deleted or altered your projects or user data.

Read the full article on BeyondMachines

This article was originally published on BeyondMachines