Accenture breached and more - Jul 12, 2026

Featured

Accenture confirms it was victim of a data breach

A hacker offered 35GB of stolen source code and credentials for sale

This Week’s Updates

Breaches

Japanese telecom giant KDDI says a zero-day exploit exposed email addresses and passwords of over 12 million ISP customers

Mount Royal University confirms hackers stole and wiped data from its network as the CMD Organization claims the attack

AssuranceAmerica discloses a data breach exposing the records of 6.9 million drivers

Vulnerabilities

Adobe confirms a max-severity ColdFusion flaw (CVE-2026-48282) is being actively exploited in attacks

BeyondTrust patches two critical auth-bypass flaws in its Remote Support and Privileged Remote Access software

CERT/CC discloses an unpatched hidden authentication backdoor (CVE-2026-11405) in several Tenda router firmware versions

CISA orders federal agencies to patch the actively exploited max-severity Adobe ColdFusion flaw by Friday

Ubiquiti patches seven critical UniFi OS vulnerabilities, including a max-severity command injection flaw

Zimbra patches a critical stored XSS flaw in its Classic Web Client reported by Google's Threat Analysis Group

Binarly discloses six U-Boot bootloader vulnerabilities that could enable stealthy pre-OS firmware attacks