News

Security researchers have detected significant leaks of corporate AWS access keys and credentials, affecting over 9,900 AWS accounts, including 768 corporate environments. A total of 64,024 AWS access key pairs were identified, with 10,625 being root account…

A new supply chain attack linked to North Korean hackers targeted the Rust programming ecosystem, specifically a popular crate called 'arrayref.' The malicious version, 'arrayref@0.3.10,' was published from the original maintainer's account on August 20,…

A recent update (Keycloak 26.7.2) released on August 19, 2026, addresses five vulnerabilities, notably the critical CVE-2026-18963, which allows unauthenticated account takeover through a password reset bypass. This flaw has a CVSS score of 9.1, indicating…

CERT Polska has reported active exploitation of a critical vulnerability (CVE-2026-73570) in the Zimbra Collaboration Suite, which allows unauthenticated remote code execution (RCE). The flaw, confirmed as being exploited shortly after a patch was issued on…

The article discusses a new Android malware threat targeting automotive head units, identified by Kaspersky Labs as being delivered through compromised firmware update tools. The malware, associated with the MoYu Group and linked to the BADBOX botnet,…

Cisco Talos recently reported on UAT-10147, a Chinese-speaking cybercrime group leveraging agentic AI for web server exploitation and data theft. The group targets over 170,000 URLs across government, education, and tech sectors globally, utilizing automated…

Two recent surveys highlight growing confidence among defense contractors in their cybersecurity compliance, despite challenges in substantiating that confidence due to the Pentagon's pause on third-party assessments for the CMMC 2.0. The Kiteworks survey…

The article discusses the introduction of a 'Preferred Sources' button by Google, aimed at empowering users to manually select their preferred news sources, boosting traffic for these publishers. The button enhances user experience by allowing seamless…

Microsoft has announced 22 new security updates addressing critical vulnerabilities in its products, including Microsoft Azure, Entra ID, and Exchange. The updates resolve serious issues such as elevation of privilege and remote code execution, with several…

Red Hat has disclosed three high-severity vulnerabilities that allow for privilege escalation in its products, particularly affecting Advanced Cluster Management for Kubernetes and FreeIPA. The most critical, CVE-2026-67567, has a CVSS score of 9.9, posing…

Rapid7 Labs uncovered a crypto fraud operation called Operation ASTERIX, which used a combination of phishing emails and live phone calls to scam cryptocurrency holders. The scam targeted individuals across 54 countries, exploiting around 885,000 phone…

The article discusses a newly discovered Android malware targeting automotive head units, which are multimedia systems integrated into vehicles. This malware installs like a regular user app, lacking a user interface, indicating potential covert…

The number of cybersecurity job postings requiring AI skills has doubled year-over-year across G7 countries, now accounting for 28.5% of new roles, according to a report by the AI Workforce Consortium. This shift indicates the rise of an 'agentic skill…

The content details a critical security vulnerability, CVE-2026-32475, affecting Elementor Pro, a popular WordPress plugin. This flaw allows unauthenticated arbitrary file uploads, posing a risk to approximately 6 million WordPress sites. The CVSS score for…

GitHub recently faced a major outage due to overwhelming traffic, which led to internal infrastructure errors. CTO Vladimir Fedorov clarified that the outage was not caused by code or configuration changes, but rather by a lack of capacity to handle…

A recent report highlights the Projextor malware, an Electron-based threat disguised as productivity applications like fake PDF converters and meal planners. This malware relies on misleading sites that lure users seeking free tools, enabling runtime script…

Cl0p, a notorious ransomware group, has targeted over 40 organizations by exploiting a critical vulnerability (CVE-2026-12569) in PTC's Windchill and FlexPLM software. This flaw allows for remote code execution through deserialization of untrusted data,…

Operation QUICSILVER is a new cyber espionage campaign attributed to a China-nexus actor, targeting the Myanmar government and IT personnel. The attack employs a Virtual Hard Disk (VHD) file disguised as an image containing a custom Go backdoor called…

The content discusses a critical vulnerability in Microsoft Entra ID identified with a CVSS score of 10.0, allowing remote code execution. The article highlights the urgent nature of the exploitation of this flaw, which poses significant risks to systems…

The article discusses critical vulnerabilities detected in the TrueConf Server, specifically CVE-2026-72530 (Code Injection) and CVE-2026-72529 (Missing Authentication). Additionally, it outlines updates in Android 17 regarding memory management. Google has…

The report highlights critical issues with Windows 11 gaming following the August cumulative update. Users have reported severe problems including graphical glitches, stuttering, and system reboots, marked by "EXCEPTION_ACCESS_VIOLATION" errors. Microsoft is…

Sakura Internet, a Japanese cloud provider, recently revealed a security breach affecting approximately 1.36 million customer accounts, which occurred on August 9, 2026. The breach originated while the company was addressing a separate security incident.…

The content discusses a critical vulnerability (CVE-2026-77647) within the SPIP content management system, rated CVSS 9.8, indicating a serious risk of unauthenticated remote code execution (RCE). The flaw affects all versions prior to 4.4.20, allowing…

The article discusses a method to identify users who are not registered for Multi-Factor Authentication (MFA) during an MFA rollout using Powershell scripts. It emphasizes the use of Microsoft.Graph.Beta library commands to streamline the auditing process.…

The content highlights critical vulnerabilities detected in TP-Link Omada gateways, specifically CVE-2026-19586, a pre-authentication OS command injection vulnerability rated CVSS 9.3. This vulnerability allows attackers to execute arbitrary commands without…

Microsoft disclosed CVE-2026-69836, a CVSS 10 remote code execution vulnerability in Entra ID, now confirmed to have been exploited in the wild. Microsoft resolved the issue server-side, requiring no action from customers. The vulnerability allows for remote…

The page discusses the disclosure of critical vulnerabilities in Spring Security software by VMware. The most severe vulnerability, CVE-2026-59270, has a CVSS score of 9.4, allowing unauthorized access to an embedded LDAP server, which can lead to reading or…

The article discusses CVE-2026-77176, a significant vulnerability in Kata Containers with a CVSS score of 8.1, allowing malicious operators to mount arbitrary guest rootfs paths onto sensitive locations, thereby undermining system isolation. This…

The ISC Stormcast for August 21st, 2026 features Rob VandenBrink as the handler on duty and indicates a threat level of green. Links are provided for accessing previous and next diaries, as well as to learn more about classes taught by Dr. Johannes Ullrich…

A critical vulnerability in the Linux kernel, identified as CVE-2026-52929, has been reported, enabling potential privilege escalation via an SCTP stream handling flaw. The vulnerability has a CVSS score of 7.5 and affects various mainstream Linux…

The article, authored by Rob VandenBrink, emphasizes the importance of reviewing login logs after migrating to cloud services. It discusses the use of PowerShell commands to analyze both successful and failed logins in Microsoft Entra. Key points include: 1.…

VMware disclosed seven critical vulnerabilities in Spring GraphQL and related Spring Cloud products on August 20, 2026, all categorized as HIGH severity. The most concerning vulnerability, CVE-2026-59285, allows unsafe deserialization, which can lead to…

Two critical vulnerabilities in TrueConf Server, CVE-2026-72529 and CVE-2026-72530, have been added to CISA's Known Exploited Vulnerabilities catalog. Both are being actively exploited in the wild, enabling attackers to execute code and install the…

On August 20, 2026, a supply chain attack targeted Rust developers via malicious versions of three crates (arrayref, internment, and append-only-vec) uploaded to crates.io. The attack involved a typosquatted dependency named proc-macro1, which mimicked a…

Google has issued a Chrome update addressing seven security vulnerabilities, the most critical being CVE-2026-76017, a use-after-free flaw in Chromoting. This vulnerability poses a significant risk as Chrome is widely used globally. The update protects users…

Jake Williams, a cybersecurity expert, has unveiled the CUSTODY framework, a new approach to confine AI agents within a network after OpenAI's models breached Hugging Face. The CUSTODY framework aims to prevent potentially harmful actions by AI agents by…