CYBER THREATCAST

Disable or isolate the Collabora Online Built-in CODE Server app on self-hosted Nextcloud systems running richdocumentscode through version 26.4.302 until the affected component is remediated, and inspect those servers for unexpected operating-system command execution and web shells. Attackers are reportedly exploiting unauthenticated command-injection vulnerability CVE-2026-110447. Standalone Collabora Online servers, Docker deployments, RPM or DEB installations, and Nextcloud All-in-One environments are reported as unaffected by this specific flaw.

Update Drupal core to 10.6.19, 11.3.19, or 11.4.10 and upgrade Entity List to 3.0.10. CVE-2026-108097 affects the core Field UI module, while CVE-2026-108099 affects the contributed Entity List module; at least one known path for each critical remote-code-execution flaw reportedly requires no authentication. Organizations unable to upgrade Drupal core should uninstall Field UI as an interim mitigation.

Inventory curl and libcurl across applications, servers, containers, operating systems, and devices, then upgrade affected deployments to curl 8.23.0. The release fixes 24 security vulnerabilities, including 18 reportedly identified by AISLE. No active exploitation was reported, but curl’s extensive embedding makes direct installations alone an incomplete measure of exposure.

Keep the Cysic cross-chain bridge suspended while Cysic investigates unauthorized database access, bridge message-processing weaknesses, transfers, swaps, and financial losses. An attacker minted 10 million CYS without authorization on BNB Smart Chain; Cysic blacklisted the receiving address about 76 minutes later, when approximately 2.8 million CYS remained there. CYS token holders should account for exposure while the investigation continues.

Suspend affected Smart Token Vesting V2 deployments and reconcile vesting balances, shares, and withdrawals across the four affected networks before restoring operations. Attackers manipulated vesting positions without administrator privileges, making excess withdrawals in 11 confirmed transactions involving 10 tokens. UNCX Network should preserve technical evidence and account for returned assets against approximately $807,609 in verified losses.