Cybersecurity Hub | Dragons Community

Signals

NVD · CVE-2026-18907 · Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filenameNVD · CVE-2026-18897 · 8.8 · A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempENVD · CVE-2026-18896 · 6.3 · A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.phNVD · CVE-2026-18895 · 8.8 · A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulCISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07CISA KEV · CVE-2026-34486 · 7.5 · Apache Tomcat Missing Encryption of Sensitive Data Vulnerability · Added 2026-08-04 · Due 2026-08-07NVD · CVE-2026-18907 · Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via directory traversal sequences in the filenameNVD · CVE-2026-18897 · 8.8 · A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The impacted element is the function strcpy of the file /goform/getOneApConfTempENVD · CVE-2026-18896 · 6.3 · A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0. The affected element is an unknown function of the file /student/changepass.phNVD · CVE-2026-18895 · 8.8 · A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. Impacted is the function strcpy of the file /goform/APSecurity_5g. Performing a manipulCISA KEV · CVE-2026-18556 · 7.4 · N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability · Added 2026-08-04 · Due 2026-08-07CISA KEV · CVE-2026-34486 · 7.5 · Apache Tomcat Missing Encryption of Sensitive Data Vulnerability · Added 2026-08-04 · Due 2026-08-07

Cybersecurity Hub

Cybersecurity

News, analysis, learning and expert commentary for security professionals

The Cybersecurity Hub brings together editorial coverage, vulnerability context, threat signals and learning resources. For the cybersecurity news feed, visit News > Cybersecurity. Product areas like the Vulnerability Database and Threat Intelligence are separate product sections.

Articles

CVEs

Threat Signals

Courses

Latest cybersecurity articles

View all

Cybersecurity

FBI and Google Dismantle China-Based 'Outsider Enterprise' Phishing Network

The FBI, Google and Black Lotus Labs disrupted a China-based phishing-as-a-service operation tied to roughly 9,000 fake sites and over a million malicious URLs, linked to an estimated $1.9 billion in losses.

Dragons Research Deskabout 2 months ago

Cybersecurity

FIFA World Cup 2026 Scams Are Already Live: Fake Sites, Banking Malware, and Stolen Logins

The scam economy around the 2026 FIFA World Cup is already live — fake ticket sites, malicious “free streaming” apps, and credential phishing. Here is how the lures work and how to stay safe.

AI Teams2 months ago

Cybersecurity

New BootROM Break for Apple A12 and A13: Why “usbliter8” Cannot Be Patched Away

A new hardware-level security issue has entered the Apple ecosystem. Researchers from Paradigm Shift have published an exploit called “usbliter8” that enables code execution inside the SecureROM stage of Apple’s A12 and A13 chips.This kind of vulnerability is very different from an ordinary software bug. SecureROM is the first boot code permanently written into the chip during manufacturing. It sits at the beginning of the device’s chain of trust and cannot be rewritten later. That means a flaw at this level cannot be fully removed with a standard iOS, iPadOS, watchOS, or firmware update.That is what makes usbliter8 significant: when the exploit succeeds, it gains control before Apple’s signed boot process has a chance to take over.

Editor2 months ago

Featured CVEs

CVE Database

CVE-2021-44228CriticalCVSS 10.0KEVExploitPatch

Apache Log4j2 JNDI RCE (Log4Shell)

Apache · Log4j2·over 4 years ago

CVE-2026-21954CriticalCVSS 9.8KEVExploitPatch

Windows Kernel Privilege Boundary Failure

Microsoft · Windows Kernel·2 months ago

CVE-2026-20881CriticalCVSS 9.6KEVExploitPatch

Fortinet SSL VPN Session Validation Bypass

Fortinet · FortiGate SSL VPN·2 months ago

Threat signals

Threat Intelligence

ransomware_activityTLP:AMBERCritical

VoidLock Collective claims new healthcare victims

The ransomware group posted redacted claims against two mock healthcare organizations. Defensive teams should review VPN exposure and phishing controls.

dark_web_monitoring_mock2 months ago

infrastructure_changeTLP:AMBERHigh

Phantom Crane infrastructure shift detected

Analysts observed Phantom Crane moving C2 infrastructure to new cloud regions. The shift correlates with expanded targeting of telecom providers.

vendor_report2 months ago

malware_activityTLP:GREENHigh

NeonStealer campaign targeting e-commerce payment flows

Phishing kits deploying NeonStealer have increased in volume. The stealer harvests browser credentials and payment data from e-commerce sessions.

open_source2 months ago

Explore cybersecurity

Threats

Threat Overview

Threat-focused editorial view covering actors, malware and campaign summaries.

Vulnerabilities

Vulnerability Context

Vulnerability explainers, editorial context and patch priority guidance.

Cyber Attacks

Coverage of notable cyber attacks, campaign analysis and incident categories.

Rankings

Top 10

Top-ranked cybersecurity items by risk, severity and activity.

Learning

Pro

Cybersecurity Course

Structured cybersecurity learning content for security professionals.