U.S. CISA adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog

Feed of security news (July 2026) highlighting multiple high-impact incidents: CISA added iCagenda and Balbooa Forms vulnerabilities to its Known Exploited Vulnerabilities catalog; Binarly disclosed six critical U-Boot vulnerabilities that can undermine secure boot across millions of embedded devices; Zimbra released a patch for a critical stored XSS in its Classic Web Client; and multiple active cybercrime developments including new GodDamn ransomware using the signed PoisonX driver to disable security tooling, Microsoft-tracked GigaWiper destructive backdoor, a large fake-Go-package malware/