CISA orders feds to patch max severity ColdFusion flaw by Friday
2026-07-08T07:23:37Z•05cdd90d2f17446e43b2c70ffc54a34b717dbad8e0b8d1a31f17b070772c291c
Accenture breachAdobe ColdFusionBeyondTrustCI/CD supply chainCISAChinese APTEtherRATGitHub ActionsJanuscapeLONGLEASHLinux kernelORB networkRuckus routersTenda router backdoorUAT-7810VM escapeactively exploitedauthentication bypassdata theftincident responsepatchingphishingsource codezero-day
What happened
Multi-item security roundup (Jul 6–8, 2026): CISA ordered federal agencies to urgently patch an actively exploited, maximum-severity Adobe ColdFusion flaw. Accenture confirmed a breach with ~35 GB of stolen source code/data offered for sale. Threat actors (including Chinese group UAT-7810) expanded ORB infrastructure using new LONGLEASH malware targeting Ruckus routers; multiple router vendors (Tenda) were found to contain hidden admin backdoors. A 16‑year‑old Linux kernel vulnerability named Januscape enables VM escape on Intel/AMD hosts. BeyondTrust disclosed critical authentication‑bypass/R
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- 05cdd90d2f17446e43b2c70ffc54a34b717dbad8e0b8d1a31f17b070772c291c
- Enrichment time
- 2026-07-08T07:23:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.