News

The content provides an overview of the ISC Stormcast for August 12, 2026, with Renato Marinho as the handler on duty. The current threat level is classified as green. It includes links to discussions, various information security resources, and podcasts…

A critical vulnerability, tracked as CVE-2026-64560, exists in the Linux kernel related to CPU timers. This use-after-free flaw allows local users to gain root access, with a CVSS score of 7.8, indicating high severity. The issue stems from a race condition…

SonicWall has disclosed critical vulnerabilities in its Global Management System (GMS) and Email Security products as of August 11, 2026. The most severe flaw, CVE-2026-66147, allows unauthenticated remote code execution with a CVSS score of 9.4. The…

A critical vulnerability in Cisco's Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) has been identified, tracked as CVE-2026-20349. This flaw allows unauthenticated attackers to remotely crash the firewall,…

On a Delta flight from Las Vegas to Atlanta, passengers allegedly spoofed the onboard Wi-Fi, prompting an investigation by federal law enforcement. This occurred shortly after the DEF CON security conference, where individuals reportedly created a fake…

The article discusses the Gunra ransomware gang, which is exploiting vulnerabilities in Fortinet products, particularly CVE-2024-55591 and CVE-2025-24472, to bypass multifactor authentication (MFA) and compromise critical infrastructure and government…

On August 11, 2026, Microsoft released updates addressing 421 vulnerabilities, with 236 affecting Windows, marking a significant Patch Tuesday. Notable vulnerabilities include: 1. **CVE-2026-63520**: Critical remote code execution vulnerability in Microsoft…

Google Chrome has introduced a new security feature called Device-Bound Session Credentials (DBSCs) that aims to combat account takeovers linked to session cookie theft. DBSCs store a unique encryption key in hardware secure elements such as the Trusted…

A fake version of the popular PC cleaning tool CCleaner is being used to spread a malicious Chrome extension known as GhostDesk, which operates as spyware. This attack begins with a clone of the CCleaner download page that installs malware disguised as the…

On August 11, 2026, it was reported that Microsoft has addressed 398 security vulnerabilities, which include a critical zero-day flaw in a Windows driver that is currently under active exploitation. This update highlights ongoing efforts to improve…

The article discusses the emergence of the Kimwolf v7 Android Botnet, which generates HTTP/2 DDoS traffic that mimics regular browsing behavior. This advancement poses significant challenges for cybersecurity defenses, making it harder to distinguish between…

The article discusses vulnerabilities within Zoom's annotation feature that could allow one participant to hijack another attendee's client during meetings. This security flaw raises concerns about the safety of online meetings, particularly as remote work…

The article discusses a new cybersecurity threat linked to the Sandworm group, specifically the UAC-0145 malware campaign. This threat involves the use of fake job interviews to promote a malicious VPN software that enables attackers to run remote commands…

Adobe has released patches addressing over 50 vulnerabilities in its products, focusing on critical flaws in ColdFusion, Campaign Classic, and Commerce. Key vulnerabilities include three critical bugs in ColdFusion with high CVSS scores leading to arbitrary…

The article discusses a recently disclosed exploit chain in AI-assisted SharePoint, which leads to unauthenticated Remote Code Execution (RCE). The vulnerability poses significant security risks for enterprises using SharePoint, as it allows attackers to…

ExfilSquad, a new cybercrime group that emerged in mid-2026, is targeting organizations by stealing data and threatening to leak it unless a ransom is paid. They focus on exploiting cloud tools like Microsoft Dataverse and CRM systems, recently attacking 13…

The article discusses the DeadLock ransomware, which utilizes Polygon smart contracts to enhance its extortion tactics. This approach makes it increasingly challenging for law enforcement and cybersecurity professionals to disrupt these criminal activities.…

Valve has warned European Steam hardware buyers about potential fake delivery scams following a cyberattack on CEVA Logistics, its shipping partner. Personal information, including names, addresses, and email addresses associated with hardware orders, was…

Iranian-linked hackers have targeted water infrastructure in New Jersey and Alabama, escalating a series of cyberattacks across at least 12 states since July. Notably, the City of Cape May and the Borough of Woodbine reported simultaneous attacks, which did…

The article discusses the challenges associated with AI in penetration testing (pentesting), emphasizing the issue of 'validation debt'—the backlog of unverified findings that arises when the number of vulnerabilities discovered exceeds the team's capacity to…

Social media platforms are cracking down on recruitment strategies linked to a video game called **Drone Battle: Ukraine**, which serves as a recruitment tool for Russia's drone factory in Tatarstan. Investigators describe the game as part of a larger…

Cisco has issued a warning regarding seven vulnerabilities in ClamAV that affect its Secure Endpoint Connector across Windows, macOS, and Linux. Two of these vulnerabilities have public proof-of-concept (PoC) exploits that could allow unauthenticated…

AI governance, traditionally managed by legal departments, is increasingly critical for CEOs due to its impact on organizational performance. A significant 46% of organizations struggle with AI governance, resulting in underperformance. Leaders must act…

Six npm packages have been identified as querying a malicious Ethereum wallet to retrieve command-and-control (C2) addresses, allowing them to fetch malware payloads. Research by Sonatype revealed that all identified packages contain the same payload and are…

A security flaw in Cursor's command-line tool has been identified, which allows cloned repositories to run commands on a developer's machine without prior trust verification. Reported by Manifold Security, the issue concerns Cursor's worktree feature that…

SAP recently announced the release of 28 new security notes addressing critical vulnerabilities in its software, including four critical issues with CVSS scores ranging from 9.1 to 10.0. The most severe vulnerability, CVE-2026-58231, allows remote attackers…

A new initiative to enhance cybersecurity for U.S. water infrastructure has been launched by federal lawmakers, including the introduction of the Water Cyber Shield Act. This legislation aims to improve federal oversight and funding for water security,…

Progress has issued a bulletin revealing ten vulnerabilities within MarkLogic Server, with some rated critical (CVSS score of 9.9). The vulnerabilities, which include authentication bypass and privilege escalation, have not been confirmed as actively…