Latest / Daily DefSec Brief / DefSec Brief week in review, July 11 2026
Transcript
- Jerry: So this is one of those weeks where AI tooling showed up on both sides of the fence. On the defender side, an AI workflow tool landed on the Kev list. And on the attacker side, researchers said that the same class of tool got used in the first autonomous ransomware run where no human was actually driving. Meanwhile, the Edge Appliances kept doing what they've been doing all year, bleeding footholds to ransomware crews. So let's catch up on the 10 things worth your time. This is the DefSec Week in Review. I'm Jerry Bell, and this is the weekly roundup. The top items from this past week ranked by what I deal with first. For the week ending July 11th, 2026, let's get into it. Number one this week is Langflow. This is a two for one, which is in part why it's at the top. Langflow is an AI workflow builder, and if you're like most teams, you probably haven't inventoried it. so first, CISA added a Langflow authorization bypass flaw to the Kev this week. The attacker reuses another user's workflow ID to run their workflow. That's CVE 2026 55255, and it's under active exploitation. Separately, Dark Rating covered Sysdig's findings on something they're calling JPuffer, where an LLM-driven threat actor exploited an older, different Langflow flaw to reach a production database and run an adaptive ransomware campaign with no human operator at all. That flaw is CVE 2025 3248. So two distinct bugs in the same product, both in play. The takeaways to patch lang flow to current. Keep the admin and API surface off the internet and go hunt for anomalous flow executions or automated multi-step post-exploitation. The autonomous part is the new wrinkle, but the fix is the same fundamentals we always talk about. Number two is Cold Fusion. CISA added a path traversal bug to Kev and it's being used for code execution right now. That's CVE 2026 48282 and it runs code in the context of the current user. The EPSS score sits in the 98th percentile, so it's not theoretical. ColdFusion is one of those app servers that's still deployed a lot more widely than people assume. Patrick Per Adobe's advisory now. The cav due date was july tenth, so if you haven't acted, treat this one as overdue. Number three, if you still have unpatched netscalers sitting at your edge, this is the group walking through that door. Huntress's tactical response team documented a repeated pattern this year, and the chain goes like this ⁓ an edge Citrix NetScaler Gateway, exploitation of Citrix Bleed Privilege Escalation, a fake Citrix admin account, some off the shelf remote access tools, and then Dragon Force Ransomware. Citrix Bleed 2 is CVE 2025 5777 and Huntress rates this as high confidence and actively exploited. So confirm your net scalar is patched for that CVE. Hunt for local admin accounts you didn't create. Look for off-the-shelf remote access tools that showed up on their own, and review your Edge Gateway sessions for anything odd. The account name Citrix is the tell here, so that's a good place to start looking. Number four is Beyond Trust. They patched a pair of critical pre-authentication bypass flaws in remote support and privileged remote access. A network-positioned attacker can bypass access controls, including getting to elevated accounts with no authentication needed. The two headline ones are CVE 2026, 40, 138, and 4139, both a CVSS 9.2. Now there's no confirmed exploitation in the wild yet. These were released proactively. But this is exactly the privileged remote access tooling attackers go looking for once the patch is public. a lot of MSPs run it to touch client environments. ⁓ So patch the RS and PRA appliances now Beyond Trusts advisory. I wouldn't sit on this one just because it's not on the Kev yet. Number five is an unusual one. Progress software told its on-prem sharefile customers to shut down the Windows servers running storage zone controllers. Not patch them, shut them down. They're citing a credible external security threat, and they've disabled account access as a precaution. Progress says it has no indication of unauthorized access yet. The honest answer is we don't fully know what the threat is. Progress hasn't disclosed a specific vulnerability If you run on-prem sharefile storage zone controllers, shut them down per progress as instructions And watch for the promised update. When a vendor tells you to power servers off before they'll tell you why, I tend to take that at face value. Number six. CISA added four separate file upload flaws to Kev. All in Joomla and WordPress extensions. All actively exploited. These are in Balboa forms, Ike agenda, Zoom Shaper, SP Page Builder, and ZoomLack Page Builder. Each one lets an unauthenticated attacker upload and run PHP code, which is about as bad as CMS bugs get. So that's CVE 2026, 56291, 48939, 48908, and 56290. Check your plugin inventory against Those four now. Patch them or if you're not using them remove them. The Cav due dates run from july tenth to the thirteenth, so some of these are already past due. Speaking of CMS plugins, number seven is what a mass exploitation of them looks like from the inside. A cybercrime operator tracked as WP Shellstorm left its own server exposed for three weeks. That exposed their tools, their logs, and a target list of over 1.4 million WordPress and Joomla sites. SOCRAider did the research corroborated by a second team, and they say the two flaws that mattered most were in the Breeze caching plugin. And Joomla's JCE editor. So if you run Breeze or the JCE editor, patch immediately and go check for unexpected files and web shells. And the broader point is worth sitting with for a second. Any out-of-date WordPress or Joomla plugin is a live target at scale right now. This is what somebody's automation does with them. Number eight moves us from cybercrime to espionage. A cluster proofpoint tracks as UNK mass traction has been chaining together round cube webmail flaws to steal credentials, then dropping web shells or the V Shell post exploitation tool. The target is specific US and Canadian University Physics and Engineering Departments. The two CVEs are 2024 4209 and CVE 2025 49113. And these two patch bugs. So this is old holes left open. While these are pretty old vulnerabilities, there are enough victims to tell me that there's a broader issue with patching this application. So confirm round cube is patched against both, hunt for web shells and V shell activity. And review mailbox access logs for your admin and faculty accounts. This is a good reminder the boring Euro or depatched bug is still a espionage actor's bread and butter. Number nine is Cisco with two more patchable holes in core networking management On identity services engine, there's an authenticated RCE from insufficient input validation, plus an information bug. ⁓ And Catalyst Center has a separate arbitrary file read flaw. So that's CVE 2026, 20181 for the ISE RCE and 2190 for the info disclosure bug, and 2191 for the Catalyst Center file read bug. No confirmed exploitation yet. This is a Cisco PCRT disclosure. Upgrade to the fixed releases in Cisco's advisory. The ISCRCE needs valid admin credentials to pull off, so this is also a nudge to tighten your admin account hygiene, And number 10, ⁓ closing out the list, this is a 16-year-old Linux KVM bug. It's use after free in KVM's shadow MMU And it's been sitting in the shared code across Intel and AMD for 16 years. You could trigger it from inside a guest VM to corrupt the host's kernel state. That's CVE 2026 53359, and the researcher's calling it Januscape. There's a public proof of concept that panics the host, which is a denial of service. The researcher also says an unreleased exploit achieves full guest-to-host code execution, but that part isn't public. So check for a kernel security update from your Linux distribution. That addresses this KVM shadow MMU issue. Guests escaping to the host is the thing that multi-tenant virtualization is supposed to prevent. So this one's worth chasing down even with the full exploit still under wraps. And that's the week. Thanks for watching. Every source is linked in the show notes. So if you want to dig into any of these, start there. If the show's useful to you, a like helps, go ahead and subscribe and pass it along to someone else who'd get something out of it. I'll be back on Monday.