🔐 Yazoul Security — CVE Advisories · Data Breaches · Cyber News
Automated security intelligence: daily CVE alerts, breach reports, correlated news, and learning resources.
🌐 www.yazoul.net
📨 Newsletter: www.yazoul.net/
🔗 @[email protected]
#InfoSec #Cybersecurity #CVE #ThreatIntel #DataBreach
🔵 THREAT INTELLIGENCE
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation
Vulnerability | CRITICAL
CVEs: CVE-2026-20245
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities...
Full analysis:
https://www.yazoul.net/news/article/cisa-adds-cisco-chrome-and-arista-flaws-to-kev-catalog-amid-active-exploitation
🔵 THREAT INTELLIGENCE
LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE
Vulnerability | CRITICAL
CVEs: CVE-2026-42271
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to its Known...
Full analysis:
https://www.yazoul.net/news/article/litellm-flaw-cve-2026-42271-exploited-in-the-wild-chains-to-unauthenticated-rce
🛡 THREAT INTEL | Cal Fresh
🟢 Actor "termite" claims Undisclosed
⚠️ Unverified claim
https://www.yazoul.net/intel/claim/2026-06-10-cal-fresh-ransomware-attack-by-termite-june-2026
🔶 DATA BREACH ALERT
University of Nottingham - 455K accounts exposed
Compromised data:
Email Addresses, Names, Phone Numbers
Check if you're affected and what to do:
https://www.yazoul.net/breaches/breach/university-of-nottingham-breach-455k-records-exposed-2026
In June 2026, the University of Nottingham was the target of a cyber attack , later linked to a ShinyHunters "pay or leak" extortion campaign. Tens of gigabytes of data were subsequently published online and included 455k unique email addresses along with extensive personal information including nam...
🛡 THREAT INTEL | nottingham.ac.uk
🟢 Actor "shinyhunters" claims 40GB
Allegedly exposed (+2 more)
• Email addresses
• Phone numbers
• Physical addresses
⚠️ Unverified claim
https://www.yazoul.net/intel/claim/2026-06-10-university-of-nottingham-hit-by-shinyhunters-june-2026
🔵 THREAT INTELLIGENCE
Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now
Vulnerability | CRITICAL
CVEs: CVE-2026-11645
Google has released security updates to address 74 vulnerabilities, including one that has come under active exploitation in the wild. The...
Full analysis:
https://www.yazoul.net/news/article/chrome-v8-zero-day-cve-2026-11645-exploited-in-the-wild-patch-now
🛡 THREAT INTEL | WCM Remedium
🔴 Actor "thegentlemen" claims Undisclosed
Allegedly exposed
• Medical records
• Health records
⚠️ Unverified claim
🔴 New security advisory:
CVE-2026-25089 affects multiple systems.
• Impact: Remote code execution or complete system compromise possible
• Risk: Attackers can gain full control of affected systems
• Mitigation: Patch immediately or isolate affected systems
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-25089-fortisandbox-unauth-rce-poc
🟠 New security advisory:
CVE-2026-11645 affects Google Chrome.
• Impact: Significant security breach potential
• Risk: Unauthorized access or data exposure
• Mitigation: Apply patches within 24-48 hours
Full breakdown:
https://www.yazoul.net/advisory/cve/cve-2026-11645-chrome-v8-rce-actively-exploited
🛡 THREAT INTEL | The Banyans Health and Wellness
🔴 Actor "qilin" claims Undisclosed
⚠️ Unverified claim
https://www.yazoul.net/intel/claim/2026-06-09-the-banyans-health-ransomware-claim-by-qilin-june-2026
