The Canadian Centre for Cyber Security says attackers are actively exploiting CVE-2026-48842, a high-severity Roundcube Webmail SQL injection flaw patched in May. Administrators are urged to update to Roundcube 1.6.16 or 1.7.1, or disable the virtuser_query plugin if they cannot patch immediately. #Roundcube #CVE-2026-48842 #CanadianCentreForCyberSecurity

European regulators and courts issued major privacy rulings and templates covering SME GDPR compliance, Meta AI glasses, shareholder data publication, and cross-border video hearing transfers. Canada, the UK, New York, and U.S. agencies also released guidance on AI governance, vendor assessments, cybersecurity readiness, insider threats, and AI model distillation. #Meta #RayBanMetaAIGlasses #CJEU #AutoriteitPersoonsgegevens #HmbBfDI #NCSC #OPC #CanadianCentreForCyberSecurity #NYDFS #CISA #NSA #FBI #DeepSeek #MoonshotAI #Alibaba #MiniMax #StepFun #ZAI

Threat actors are exploiting CVE-2026-48282, a maximum-severity path traversal flaw in Adobe ColdFusion that can lead to arbitrary code execution. Adobe released emergency updates for ColdFusion 2025 and 2023, but exploitation reportedly began within two hours of public disclosure. #AdobeColdFusion #CVE-2026-48282 #KEVIntel #CanadianCentreforCyberSecurity...