Security Bulletin

CVE: CVE-2026-13321 Title: DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field Document version: 2.0 Posting date: 22 July 2026 Program impacted: BIND 9 Versions affected: BIND 9.11.0 -> 9.18.50 9.20.0 -> 9.20.24 9.21.0 -> 9.21.23 BIND Supported...

CVE: CVE-2026-10822 Title: Key Record using PRIVATEDNS algorithm may lead to unexpected exit Document version: 2.0 Posting date: 22 July 2026 Program impacted: BIND 9 Versions affected: BIND 9.18.0 -> 9.18.50 9.20.0 -> 9.20.24 9.21.0 -> 9.21.23 BIND...

European and US banks inadvertently transmitted customer data to ad platforms via tracking pixels, raising serious compliance, security, and privacy concerns.

Here's some insight into how Google must comply with the European Commissions's Digital Markets Act.

The agent abused the victim’s Docker daemon to access and encrypt AI-related files.

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

A study by Specops researcher David Ketler examined Argon2id's performance against current password-cracking hardware, specifically testing an eight-GPU system with Nvidia RTX 5090 cards and a single AMD EPYC 9B14 server processor.

Security firm DTEX's research reveals that the illicit IT worker scheme is a significant revenue stream for North Korea, with funds being channeled through organizations like Sobaeksu, Saenal, and Songkwang.

TechCrunch reports that the United Kingdom's incoming prime minister, Andy Burnham, has confirmed the government is abandoning a contentious digital ID card initiative that was announced by the previous administration.

Researchers pointed to fragmentation of the ransomware ecosystem, the emergence of new attackers, and expansion of attacks on less defended organizations.

The attack against the telecommunications firm caused significant internet outages, impacting the town office of Damariscotta, a community of approximately 2,300 residents.