CRITICAL/ JULY 21, 2026TODAY’S BRIEFING — #123
WordPress, SonicWall zero-days in active exploitation; FakeGit malware campaign hits 7,600 GitHub repos
FakeGit campaign weaponizes 7,600 GitHub repositories to distribute SmartLoader malware. WordPress sites actively exploited via CVE-2026-60137/63030 chain within 72 hours of disclosure. SonicWall SMA1000 zero-days (CVE-2026-15409/15410) used in targeted attacks; Estée Lauder breach linked to Oracle E-Business flaw.
CVE-2026-60137WordPress — exploited in coordinated chain attacks within 72 hours of disclosure; wide-scale campaign underwayCVE-2026-63030WordPress — exploited in coordinated chain attacks; part of WP2Shell campaignCVE-2026-15409Sonicwall Sma6210 Firmware — zero-day exploited for weeks in targeted attacks by UTA0533; patchedCVE-2026-15410Sonicwall Sma6210 Firmware — zero-day exploited for weeks in targeted attacks by UTA0533; patched
Read the full briefing →