Critical Alerts

• HTTP/2 Bomb DoS Attack: A new denial-of-service attack, dubbed 'HTTP/2 Bomb', can crash web servers such as NGINX, Apache, and IIS in under a minute. Immediate patching and traffic monitoring are advised.
• Active Exploits on Android and Linux: CISA has issued warnings about ongoing attacks exploiting vulnerabilities in Android and Linux systems. Ensure systems are updated and monitor for unusual activity.
• VS Code Zero-Day: A zero-day vulnerability in Visual Studio Code allows attackers to steal GitHub tokens. Users should avoid opening untrusted projects and apply patches as soon as they are available.

CVE Analysis

• CVE-2025-14771: A critical vulnerability in ABB T-MAC Plus allows external access to sensitive files and directories. Immediate patching is required.
• CVE-2026-47065: A vulnerability in Java's resolveProxyClass method can be exploited to bypass security filters. Ensure Java environments are updated.
• CVE-2026-36748: RockRMS is vulnerable to XSS attacks via social media links in user profiles. Update to the latest version to mitigate this risk.

Trends & Patterns

• Increase in DoS Attacks: The emergence of the 'HTTP/2 Bomb' highlights a trend towards more sophisticated DoS attacks targeting web infrastructure.
• Credential Theft Campaigns: The Red Hat npm Miasma campaign underscores the ongoing threat of credential theft through supply chain attacks.

Notable Articles

• CISA's Alert on Android and Linux: Detailed analysis of the vulnerabilities being exploited and recommended mitigations.
• HTTP/2 Bomb Technical Breakdown: A deep dive into the mechanics of the new DoS attack and its potential impact on web services.

Recommendations

• Patch Management: Prioritize patching for all critical vulnerabilities, especially those affecting web servers and development tools like VS Code.
• Network Monitoring: Implement enhanced monitoring for unusual traffic patterns indicative of DoS attacks.
• Credential Security: Strengthen credential management practices and educate users on the risks of phishing and supply chain attacks.
• System Updates: Ensure all systems, particularly those running Android and Linux, are up-to-date with the latest security patches.