A curated dispatch from GajShield

The GajShield Gazette

Lead story
Also today
Jul 31, 2026

MikroTik RouterOS

CISA Warns of MikroTik RouterOS Weakness That Could Expose WireGuard Private KeysThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an Industria…

In brief

JetBrains warns of critical TeamCity remote code execution flaw

The critical TeamCity remote code execution flaw highlights why CI/CD platforms must be treated as high-value infrastructure, not just deve…

Jul 31, 2026

South Korea fines telco giant KT $39 million for customer data breach

The South Korean fine against KT highlights how telecom data breaches can create serious risks for customers, regulators, and national digi…

Jul 31, 2026

Reconnaissance First: An SSH Bot That Sizes Up Your Hardware Before Deploying a Miner [Guest Diary], (Thu, Jul 30th)

The SANS ISC diary on an SSH bot performing hardware reconnaissance before deploying a miner highlights an important point: not every malic…

Jul 30, 2026

Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads

The critical Ruby on Rails Active Storage vulnerability highlights how a simple image upload feature can become a serious server-side data …

Jul 30, 2026

Cisco warns of FMC static credential flaw exploited in zero-day attacks

The Cisco Secure Firewall Management Center static-credential flaw highlights a serious and uncomfortable reality: security management plat…

Jul 30, 2026

Sunrise Data Breach: 13GB of Sensitive Data Compromised

The Sunrise Company data breach highlights how ransomware and data theft can affect more than internal IT systems. In real estate and devel…

Jul 30, 2026

Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape

The three critical VMware vulnerabilities highlight why virtualization infrastructure must be treated as one of the most sensitive layers i…

Jul 29, 2026

Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory

The Ruflo MCP vulnerability highlights a serious new risk in AI infrastructure: tool bridges can become command-execution interfaces if the…

Jul 29, 2026

Almost 3,000 people in one Nuneaton area victims of council data breach

The reported incident involving almost 3,000 people in Nuneaton highlights how even a local data breach can create serious privacy, fraud, …

Jul 29, 2026

New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands

The new Gitea remote code execution flaw highlights why self-hosted source-code platforms must be treated as critical infrastructure, not j…

Jul 29, 2026

Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass

The public proof-of-concept for the exploited Check Point SmartConsole vulnerability significantly increases the urgency for organizations …

Jul 29, 2026