Ruby on Rails Patches Critical Active Storage Vulnerability Affecting Image Processing
2026-08-03T08:51:37Z•b0495ef6f3b7e34d8845e4179924b48dccaff385c9291b5b6040927662740ec9
CVE-2026-48449CVE-2026-66066APT29AWSActive StorageAdobe Campaign ClassicCozy BearDNS hijackingICSMicrosoft 365Midnight BlizzardOT securityPLCRuby on RailsSCADAStorm-2945arbitrary file readdata breachhealthcarehotel Wi-Firemote code executiontoken theftvulnerabilitywater utilitieswatering hole attacks
What happened
Security Affairs feed covering a critical Ruby on Rails Active Storage image-processing vulnerability (CVE-2026-66066), a critical Adobe Campaign Classic RCE flaw (CVE-2026-48449), CareCloud’s breach impacting approximately 345,000 individuals, attacks against internet-exposed water-utility PLCs, Russian SVR-linked theft of Microsoft 365 tokens through hijacked hotel Wi-Fi portals, watering-hole campaigns, malware activity, and AI-assisted vulnerability discovery.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- b0495ef6f3b7e34d8845e4179924b48dccaff385c9291b5b6040927662740ec9
- Enrichment time
- 2026-08-03T08:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.