Phishing Scheme Bypasses Microsoft 365 MFA to Redirect Vendor Payments
PremiumPhishing allowed attackers to bypass Microsoft 365 MFA, hijack a finance mailbox, and redirect vendor payments.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Friday, August 21
Massive Data Breach at CareCloud Exposes Millions of Patient Records
PremiumCareCloud confirms breach affecting 3.7 million patients after eight-hour intruder access to EHR environment.
Zimbra Collaboration Servers Under Siege from Exploited RCE Vulnerability
PremiumCERT Polska reports active exploitation of critical Zimbra RCE (CVE-2026-73570) targeting collaboration servers.
Citrix Urges Immediate Patching of Critical NetScaler Vulnerabilities
PremiumCritical Citrix NetScaler authentication-bypass patches issued; exploitation expected without authentication across gateways and ADCs.
Critical MLflow Vulnerability Exploited by Hackers: CISA Issues Alert
PremiumCISA warns threat actors are actively exploiting a critical MLflow flaw to steal cloud credentials and internal data.
Wednesday, August 19
Microsoft Races to Patch ShieldBreak Zero-Day Vulnerability in Defender
Microsoft developing a Defender patch for ShieldBreak zero-day (CVE-2026-69414) disclosed by researcher 'Nightmare Eclipse'.
Infostealers Drive Surge in Credential Theft with 1.7 Billion Compromised Accounts
Flashpoint reports infostealers exfiltrated 1.7 billion credentials in the first half of 2026, fueling account takeover risk.
Critical Vulnerability in macOS Screen Sharing Allows Unauthorized Root Access
CVE-2026-43760 logic flaw in macOS Screen Sharing can be exploited to execute commands as root via file-copy helpers.
GitLab Faces Critical Security Flaw with Urgent Remediation Needed
CVE-2026-19478 zero-click GitLab vulnerability lacks technical details, complicating detection for self-managed deployments.
Microsoft Copilot Vulnerability: Data Exfiltration Risks Uncovered
CoSnitch vulnerabilities in Microsoft Copilot Personal let a crafted link exfiltrate connected-app data with a single click.
GitLab Addresses Critical Vulnerabilities in Latest Security Update
GitLab fixed a critical code injection flaw allowing unauthenticated actors to modify or delete user data and public projects.
Unisoc Chipsets Vulnerable to Exploit Chain Granting Full Kernel Access
Two-stage Unisoc VoLTE exploit chain achieves full Android kernel access via a specially crafted video call payload.
Critical Software Vulnerability Exposes NASA Ground Systems to Unauthorized Access
Critical AIT-GUI vulnerabilities allow unauthenticated attackers to issue spacecraft commands and manipulate ground-control scripts.
TWINLOOT Exploits Microsoft Services for Stealthy Credential Theft and Network Intrusion
TWINLOOT Python implant uses SharePoint and Teams to host C2, steal credentials, and pivot inside Microsoft tenant environments.
Massive Security Flaw in WordPress Plugin Leaves 300,000 Sites Vulnerable
CVE-2026-15748 arbitrary file upload bug in a WordPress form plugin lets unauthenticated attackers upload executable files on ~300,000 sites.
Clop Gang's Custom Web Shell Targets Windchill for Data Theft
Clop gang developed a Java web shell tailored for PTC Windchill and FlexPLM to decrypt credentials and exfiltrate files.
CISA Warns of Ransomware Abuse of Windows Task Host Vulnerability
CISA confirms ransomware groups are exploiting a high-severity Windows Task Host vulnerability previously flagged as actively exploited.
Massive Data Breach at Heights Finance Exposes Sensitive Information of Over 1.2 Million Individuals
Hackers stole names, addresses, phone numbers, Social Security numbers, and financial details from a third-party platform affecting 1.2 million.
Medusa Ransomware Group Expands Operations with New Tactics
Updated FBI/CISA/HHS advisory details Medusa techniques: disabling security, exfiltrating data, and encrypting whole networks.
CISA Highlights Critical Flaw in Ray Framework Amid Active Exploitation
CISA added a critical Ray vulnerability to its Known Exploited Vulnerabilities catalog due to observed active exploitation.
Get these articles delivered to your inbox.
Subscribe free