Microsoft patches RoguePlanet Defender zero-day vulnerability
2026-07-09T07:23:27Z•f399dc82fb470478abfc1cefbd3506183010f7e2d470b8bd52d15375c337ad63
CISAaccenturebackdoorcoldFusioncredential-theftdata-breachkddilangflowlongleashmalicious-packagesmicrosoft-defendernpmpatchpypiroundcuberouter-exploitruckussocial-engineeringsupply-chaintendauniFi-osvishingzero-day
What happened
A BleepingComputer roundup reports multiple high-impact security events: Microsoft issued a patch for the "RoguePlanet" Defender zero-day; CISA ordered expedited fixes for actively exploited flaws in Langflow (auth bypass) and Adobe ColdFusion (maximum-severity); Ubiquiti released updates for seven critical UniFi OS flaws including a command-injection bug. Multiple breaches and espionage incidents were disclosed — Accenture and KDDI confirmed data compromises, Mount Royal University suffered a destructive data theft, and China-linked actors exploited vulnerable Roundcube servers to steal creds
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- bleepingcomputer
- Record identifier
- f399dc82fb470478abfc1cefbd3506183010f7e2d470b8bd52d15375c337ad63
- Enrichment time
- 2026-07-09T07:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.