60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
60
Threat awareness, cloud security, quantum computing among chief agency cyber policy priorities ahead
60
60
Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day
Lazarus used a post-quantum key exchange to shield delivery of a Windows zero-day exploit, adding stealth to its campaign.
North Korean Lazarus Group malware used a post-quantum key exchange to protect the delivery of a Windows zero-day exploit. The technique adds a layer of stealth to the campaign's initial access, complicating detection and traffic inspection. It signals growing APT adoption of post-quantum cryptography in offensive operations.
72
CVE-2026-16232: Checkpoint Quantum Security Management auth bypass ...
Attackers exploit Check Point SmartConsole authentication bypass CVE-2026-16232 to take over Quantum Security Management firewall servers; CISA added it to KEV.
CVE-2026-16232 is an authentication bypass (CWE-287) in the SmartConsole login process of Check Point Quantum Security Management, exploitable via an application token. Disclosed July 22, 2026, it was added to CISA's Known Exploited Vulnerabilities catalog the same day with remediation due July 25. Rapid7, Check Point Research and other vendors confirmed exploitation in the wild, and a public PoC was released. A workaround is available, and federal agencies must comply with BOD 26-04 patching guidance.
84
60
60
60
60
60
60
60
60
60
60
60
60
60
Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scams
60
60
Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024
60
60