MEDIUM/ JULY 30, 2026TODAY’S BRIEFING — #132
Critical zero-days in Rails, Ruflo, VMware; Laundry Bear exploits Exchange OWA
Ruby on Rails, Ruflo AI agent framework, and VMware ESX disclosed with maximum-severity RCE flaws; Russian Laundry Bear group actively exploits Exchange OWA zero-day; coordinated attack hits 30+ Minnesota water systems.
CVE-2026-59726Ruflo MCP Agent Framework — Unauthenticated RCE and command injection; CVSS 10.0; all versions affectedCVE-2026-20316Cisco Secure Firewall Management Center — Static credential vulnerability; actively exploited in zero-day attacks
Read the full briefing →