Critical Software Vulnerability Exposes NASA Ground Systems to Unauthorized Access
Critical AIT-GUI vulnerabilities allow unauthenticated attackers to issue spacecraft commands and manipulate ground-control scripts.
Wednesday, August 19
TWINLOOT Exploits Microsoft Services for Stealthy Credential Theft and Network Intrusion
TWINLOOT Python implant uses SharePoint and Teams to host C2, steal credentials, and pivot inside Microsoft tenant environments.
Clop Gang's Custom Web Shell Targets Windchill for Data Theft
Clop gang developed a Java web shell tailored for PTC Windchill and FlexPLM to decrypt credentials and exfiltrate files.
CISA Warns of Ransomware Abuse of Windows Task Host Vulnerability
CISA confirms ransomware groups are exploiting a high-severity Windows Task Host vulnerability previously flagged as actively exploited.
Massive Data Breach at Heights Finance Exposes Sensitive Information of Over 1.2 Million Individuals
Hackers stole names, addresses, phone numbers, Social Security numbers, and financial details from a third-party platform affecting 1.2 million.
Medusa Ransomware Group Expands Operations with New Tactics
Updated FBI/CISA/HHS advisory details Medusa techniques: disabling security, exfiltrating data, and encrypting whole networks.
CISA Highlights Critical Flaw in Ray Framework Amid Active Exploitation
CISA added a critical Ray vulnerability to its Known Exploited Vulnerabilities catalog due to observed active exploitation.
Massive Breach at French Tax Authority Exposes Sensitive Data of Hundreds of Thousands
DGFiP breach exposed tax-related personal and corporate data for roughly 678,000 individuals after credential misuse.
Critical Vulnerability in MLflow Exploited for Credential Theft
Active exploitation of MLflow SSRF (CVE-2026-64849) leads to cloud credential and secret theft from ML deployments.
Monday, August 17
Unveiling a New Threat: DRAM Scrambling Attack Compromises Key CPU Memory Zones
PremiumResearch demonstrates DRAM scrambling manipulation that undermines protections around SMM, PSP, and CPU microcode memory zones.
Urgent Patching Required for SharePoint, Winsock, and VMware vCenter Vulnerabilities
PremiumSANS warns of exploited flaws in SharePoint, Winsock, VMware vCenter, and other vendor vulnerabilities requiring urgent patching.
AI Agents Pose New Challenge in Cybersecurity Landscape
PremiumAnalysis shows autonomous AI agents can escape sandboxes and execute attacks without direct human operators, changing threat models.
Critical Security Flaws Uncovered Across Major Tech Firms
PremiumNewsletter outlines multiple critical zero-days (Cisco, Windows), Outlook RCE, and high-profile vendor patches and incidents this week.
AI Deepfake Scam Targets Minor, Sparks Cybersecurity Concerns
PremiumAn AI deepfake extortion ring used fabricated videos to blackmail a minor, escalating to life-threatening coercion and police action.
GeoServer Zero-Day Vulnerability: Immediate Exploitation Risks Highlighted
PremiumAn unpatched GeoServer SQL-injection zero-day is being exploited in the wild, potentially enabling remote code execution and data theft.
Apple's Urgent Call: Enable Lockdown Mode Against Spyware Threats
PremiumApple issued high-confidence threat notifications urging selected users to enable Lockdown Mode due to mercenary spyware targeting.
Evooo1Bot Malware Co-opts IoT Devices for Stealthy Cyber Operations
PremiumEvooo1Bot Mirai-based botnet infects routers and IoT edge devices, converting them into persistent SOCKS5 proxy/traffic relay nodes.
Shell Probes Potential Data Breach Amid Cl0p Ransomware Claims
PremiumShell is investigating Cl0p's claim of exfiltrating 89GB of internal data amid an ongoing potential incident and extortion demand.
Cybersecurity Developments: Rapid7 Layoffs and Emerging Threats
PremiumMiscellaneous security items include Rapid7 layoffs, aviation security research, and industrial refrigeration system weaknesses.
Metabase Zero-Day Exploit Exposes Salesforce and ServiceNow Portals for 17 Months
PremiumMetabase zero-day impacted Salesforce and ServiceNow portals, exposing long-running data leakage and authentication bypass risk to enterprise tenants.
Get these articles delivered to your inbox.
Subscribe free