Malicious Firefox Extensions Exploit Web3 Users with Wallet Theft
PremiumCampaign 'Offside Wallet Theft Factory' uses 40 Firefox extensions impersonating Web3 wallets to steal crypto wallet secrets.
Friday, August 21
Cloudflare Workers Vulnerable to Spectre Attack: JWTs Exposed
PremiumResearchers demonstrate Spectre-based Cloudflare Workers side-channel leaking JWTs from co-located workers at ~12 bits/second.
Data Breach at Sakura Internet Compromises Over a Million Accounts
PremiumSakura Internet breach exposed sales management system data affecting up to 1.36 million accounts and contracts.
Clop Cybercrime Group Exploits PTC Vulnerability in Major Data Theft Campaign
PremiumInvestigation reveals Clop likely exploited critical PTC Windchill vulnerability in June, initiating extended extortion and data theft.
Clop Ransomware Utilizes Tailored Web Shell to Exploit PTC Windchill Systems
PremiumClop-associated web shell on PTC Windchill/FlexPLM decrypts credentials and maps PLM engineering vault data for extortion.
Critical Flaws in NASA's AIT-GUI Expose Spacecraft Command Vulnerabilities
PremiumChain of AIT-GUI flaws (GHSA-p9r8-2q67-fp86) allows unauthenticated attackers to issue arbitrary spacecraft commands (CVSS 9.4).
Microsoft Copilot Vulnerability Exposes Sensitive Data to Single-Click Threat
PremiumCVE-2026-24301 'CoSnitch' in Microsoft Copilot Personal allowed one-click exfiltration of connected-account data; patched Aug 18.
Latvian Data Breach Exposes Over a Million Citizens' Information
PremiumLatvian road traffic agency breach exposed vehicle data affecting ~two-thirds of population, prompting official resignations.
AI-Powered Cyberattacks Threaten Siemens PLCs in Critical Sectors
PremiumUS advisory warns AI-generated exploit scripts are targeting exposed Siemens S7 PLCs in industrial environments.
GitLab Vulnerability Exploited Within Days, Urgent Patch Required
PremiumCVE-2026-19478 in GitLab allows unauthenticated modification or deletion of public projects and user data; exploitation observed.
Phishing Scheme Bypasses Microsoft 365 MFA to Redirect Vendor Payments
PremiumPhishing allowed attackers to bypass Microsoft 365 MFA, hijack a finance mailbox, and redirect vendor payments.
Massive Data Breach at CareCloud Exposes Millions of Patient Records
PremiumCareCloud confirms breach affecting 3.7 million patients after eight-hour intruder access to EHR environment.
Zimbra Collaboration Servers Under Siege from Exploited RCE Vulnerability
PremiumCERT Polska reports active exploitation of critical Zimbra RCE (CVE-2026-73570) targeting collaboration servers.
Citrix Urges Immediate Patching of Critical NetScaler Vulnerabilities
PremiumCritical Citrix NetScaler authentication-bypass patches issued; exploitation expected without authentication across gateways and ADCs.
Critical MLflow Vulnerability Exploited by Hackers: CISA Issues Alert
PremiumCISA warns threat actors are actively exploiting a critical MLflow flaw to steal cloud credentials and internal data.
Wednesday, August 19
Microsoft Races to Patch ShieldBreak Zero-Day Vulnerability in Defender
Microsoft developing a Defender patch for ShieldBreak zero-day (CVE-2026-69414) disclosed by researcher 'Nightmare Eclipse'.
Infostealers Drive Surge in Credential Theft with 1.7 Billion Compromised Accounts
Flashpoint reports infostealers exfiltrated 1.7 billion credentials in the first half of 2026, fueling account takeover risk.
GitLab Faces Critical Security Flaw with Urgent Remediation Needed
CVE-2026-19478 zero-click GitLab vulnerability lacks technical details, complicating detection for self-managed deployments.
Microsoft Copilot Vulnerability: Data Exfiltration Risks Uncovered
CoSnitch vulnerabilities in Microsoft Copilot Personal let a crafted link exfiltrate connected-app data with a single click.
Unisoc Chipsets Vulnerable to Exploit Chain Granting Full Kernel Access
Two-stage Unisoc VoLTE exploit chain achieves full Android kernel access via a specially crafted video call payload.
Get these articles delivered to your inbox.
Subscribe free