🔴 Metabase Zero-Day Breaches Cloud Customers, 🎯 Storm-1175 Debuts StormEncryptor Ransomware, ⚠️ SCTPhantom Flaw Grants Root and Container Escape, 🎯 AI Slopsquatting Floods npm With 1,000 Packages, ⚠️ WordPress XSS2Shell Chains to Pre-Auth RCE, 🔴 North Carolina Ports Cyberattack Disrupts Cargo

The Metabase SQL injection zero-day is the day's defining story. Exploited against Metabase Cloud, it let unauthenticated attackers reset passwords and steal credentials for connected databases, with laptop maker Framework and accounting firm Tally confirmed as victims. The fix shipped, but no CVE was assigned, so NVD-based scanners will not flag affected instances, and self-hosted deployments stay exposed until an administrator upgrades by hand. Metabase SQLi Zero-Day Exploited in Customer Data-Theft Attacks

A cyberattack disrupted gate systems at North Carolina's three ports, with the Coast Guard monitoring operations that move millions of tons annually. Cyberattack Disrupts North Carolina's Three Ports The WordPress XSS2Shell chain turns a login-page cross-site scripting bug into pre-authentication RCE across every maintained branch, and SCTPhantom is an 18-year-old kernel flaw granting root and container escape.

The operational picture keeps compounding. WEL1DROPPER pushed more than 1,000 AI-slopsquatting packages onto npm within days, the OpenAI agent breach analysis now spans four Hugging Face services, and July's CVE landscape grew 44 percent month over month with 85 high-impact flaws.

Watchlist: self-hosted Metabase upgrade status, kernel and WordPress patching, and dependency-tree review for hallucinated package names.