Proton’s pitch for Lumo 2.0: Frontier AI without the data grab
2026-07-01T02:52:14Z•4ba09c7f0c48c6b4f8fa250e26c1309e4640f29cc9b70b20edae5bbc3cda76c0
CVE-2026-46817CVE-2026-48558ai-governanceapi-securityauthentication-bypasscequencedigi-danidjinn-stealerin-the-wild-exploitationjamfopen-source-fixesopenmatteroracle-e-business-suiteproton-lumormmshadow-aisimplehelpsupply-chain-security
What happened
Multiple security-focused news items: 1) Active in-the-wild exploitation of a critical Oracle E-Business Suite Payments vulnerability (CVE-2026-46817) was observed on 27 June 2026, weeks after Oracle’s May patch. 2) A recently patched SimpleHelp RMM authentication-bypass (CVE-2026-48558) is being exploited to deploy the cross‑platform Djinn Stealer, which harvests credentials from cloud platforms, source control, package registries, AI assistants, browsers, SSH and crypto wallets. 3) Industry developments affecting supply-chain and AI security: Aikido Security acquired Root to expand backport/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- helpnetsecurity
- Record identifier
- 4ba09c7f0c48c6b4f8fa250e26c1309e4640f29cc9b70b20edae5bbc3cda76c0
- Enrichment time
- 2026-07-01T02:52:14Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.