Daily DefSec Brief - Cyber Security News for July 28 2026
1. Arista VeloCloud Orchestrator zero-day exploited, added to CISA KEV — CVE-2026-16812 — SecurityWeek — https://www.securityweek.com/critical-arista-velocloud-orchestrator-vulnerability-exploited-as-zero-day/
2. Critical TeamCity auth-bypass RCE, patch on-prem now — CVE-2026-63077 — The Hacker News — https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html
3. Fortinet FortiOS info-exposure flaw added to KEV — CVE-2025-68686 — CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog
4. FastJson RCE zero-day, active US targeting confirmed — CVE-2026-16723 —…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.