InfoSecBulletin Cybersecurity for mankind
During the past seven days (week) , security researchers and organizations tracked a total of 1,615 vulnerabilities requiring immediate triage and context. The severity distribution for these threats highlights a significant volume of high-risk entries that security teams must prioritize.
.
Vulnerability Severity Breakdown:
The following breakdown categorizes the week‘s vulnerabilities according to their CVSS scores:
Hackers deploy Casbaneiro Trojan that activates on bank websites
German police read Signal, Telegram, WhatsApp messages without breaking encryption
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
Palo Alto PAN-OS Flaw Enables Root Arbitrary Code Execution
Critical Check Point VPN flaws allow remote code execution attacks
Cisco confirms CVE-2026-20079 flaw in Secure FMC is exploited in attacks
Hackers exploit PaperCut flaws using hundreds of AI agents, compromising 440 servers globally
CISA Says Chinese Firms Extracted Billions of Tokens From Frontier AI Models
Nightmare Eclipse Drops New Microsoft Defender ‘ShieldCrash’ zero-day
cPanel Flaw Lets Hosting Accounts With Mail Privileges Execute Code as Root
Critical (CVSS 9.0–10.0): 130 vulnerabilities
High (CVSS 7.0–8.9): 515 vulnerabilities
Medium (CVSS 4.0–6.9): 530 vulnerabilities
Low (CVSS 0.1–3.9): 44 vulnerabilities
Unknown/Pending: 395 vulnerabilities currently awaiting final classification
The data indicates that over 40% of the triaged vulnerabilities this week are classified as either High or Critical severity, necessitating robust patching and mitigation strategies.
