InfoSecBulletin Cybersecurity for mankind

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is alerting people about a major flaw in MikroTik RouterOS. This could allow hackers to run code from afar or stop the system from working. Tracked as CVE-2026-84411, the security issue is a pre-authentication integer underflow in RouterOS’s web-management HTTP request handling. CISA …

Apple has launched iOS 26.7.1 and iPadOS 26.7.1 to fix a serious zero-day flaw that it believes might have been used in a very advanced attack on specific people. The security flaw, labeled as CVE-2026-86950, impacts the CoreGraphics framework. This is an important Apple part that helps show graphics, images, …

The JadePuffer ransomware group is attacking Azure users with agent-based attacks that gather information, steal passwords, and damage key components. The malware appeared in July. Researchers at Sysdig, a cloud security company, noted that it uses AI tools to automate the whole attack process. This includes searching for information, stealing credentials, …