Lazarus Group Exploits Windows Zero-Day for Advanced Rootkit Deployment
PremiumLazarus exploits AFD.sys zero-day (CVE-2026-68820) to deploy FudModule rootkit for stealthy kernel persistence.
§Topic · CVE & Vulnerabilities
CVE & Vulnerabilities
Newly disclosed CVEs, actively exploited vulnerabilities, and critical patches you need to apply now.
All dispatchesFriday, August 14
Microsoft Addresses Critical Windows Zero-Day Vulnerability
PremiumMicrosoft patched 'LegacyHive', a Windows zero-day vulnerability disclosed after July Patch Tuesday that allows privilege escalation.
Zoom Annotation Vulnerabilities Expose Users to Potential Client Hijacking
PremiumZoom annotation vulnerabilities could allow meeting participants to take control of other attendees' clients without interaction.
Major Vulnerabilities in Belgium's eID System Expose Citizen Data
PremiumBrowser extension vulnerabilities in Belgium's eID framework allow remote code execution and full compromise of citizen accounts.
New Zero-Day Exploit 'ShieldBreak' Elevates Threat Level for Windows Users
PremiumExploit 'ShieldBreak' enables any user to spawn a SYSTEM shell on Windows via a newly released zero-day toolset.
Adobe Commerce Vulnerability Exploited Shortly After Disclosure
PremiumCritical Adobe Commerce vulnerability was targeted and exploited shortly after disclosure, risking customer account takeover.
Microsoft Urges Immediate Action on Critical Windows Vulnerabilities
PremiumMicrosoft issued massive Patch Tuesday fixes including multiple zero-days, with some exploited in nation-state campaigns.
Critical VMware vCenter Vulnerability Under Active Exploitation
PremiumCritical VMware vCenter flaw (CVE-2026-59310) is being actively exploited to deploy reverse SSH persistence backdoors.
Wednesday, August 12
China-Linked Group Unleashes StormEncryptor Ransomware via N-central Vulnerability
China-linked Storm-1175 deploys StormEncryptor ransomware, likely exploiting an N-able N-central vulnerability to gain initial access.
China-Linked Hackers Exploit Critical Flaw in Cybersecurity Software to Deploy Ransomware
Microsoft warns China-linked actors are exploiting a critical flaw in N-able to deploy ransomware broadly as a launchpad.
Security Breach in Belgian eID Software Exposes Millions to Risk
Critical vulnerabilities discovered in Belgian eID software put two million users at risk of identity compromise.
Critical Docker Vulnerability Exposes Hosts to Malicious Container Attacks
CopyEscape (CVE-2026-17106) allows malicious docker cp operations to overwrite host files and potentially achieve root execution.
Microsoft SharePoint Vulnerability Fuels New Ransomware Campaigns
CISA confirms active exploitation of a high-severity Microsoft SharePoint RCE now used in ransomware intrusions and lateral movement.
Malicious SIM Cards Exploit Cellular IoT Devices Through Vulnerable Modems
Malicious SIM cards can run attacker code on cellular modems inside EV chargers, industrial routers, and telematics units, enabling device takeover.
Zoom Addresses Critical Security Vulnerabilities with New Patches
Zoom patches a zero-click annotation vulnerability that could let meeting participants execute code on other attendees' devices.
Cyberattack on Polish Power Plant Reveals Vulnerabilities in Private Cellular Networks
Attackers used a private cellular network to intrude on a Polish heat-and-power plant, shutting a steam turbine and disrupting treatment systems.
Metabase Zero-Day Flaw Threatens Data Security Across Multiple Platforms
Metabase zero-day allows remote admin takeover and data exfiltration, posing broad downstream risk to analytics consumers.
Gunra Ransomware Exploits Firewall and VPN Vulnerabilities
US and South Korean agencies warn of Gunra exploiting firewall and VPN flaws to hit government and critical infrastructure.
Microsoft's August Security Update Tackles Over 400 Vulnerabilities, Highlights Three Zero-Day Exploits
Microsoft released massive August updates covering hundreds of CVEs, including multiple zero-days — prioritize exploited and high-impact fixes.
Monday, August 10
Get these articles delivered to your inbox.
Subscribe free