Skip to content
skopnix
Every edition · newest first

The archive.

1,110 dispatchespage 13 / 19№ 390 – 331

  1. Fri 21 Aug 2026

    12 dispatches
    14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2SUPL
  2. Homeland security cybercops say patch TrueConf (Russia's Zoom) if you're using itEXPL
  3. Hundreds of leaked AWS keys give full control over corporate accountsSUPL
  4. 100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Pods WordPress PluginVULN
  5. Hackers poison popular Rust crates to steal developers' credentialsSUPL
  6. Russian network monitoring firm confirms cyberattack claimed by pro-Ukraine hackersBRCH
  7. North Korean Hackers Tied to Rust Supply Chain AttackSUPL
  8. Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage TacticsAPT
  9. Microsoft patches max severity code execution, privilege escalation flawsEXPL
  10. CISA Urges Immediate Patching of Exploited TrueConf VulnerabilitiesEXPL
  11. The Cyber Express Weekly Roundup: Exploited Entra ID Flaw, AI Agent Risks, and Global Cybercrime CrackdownEXPL
  12. Cisco bug severity warning reads like Olympic gymnastics scores: 10, 10, 9.9, 9.6, and 7.5.VULN

  13. Thu 20 Aug 2026

    15 dispatches
    Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million DownloadsSUPL
  14. [KEV] CVE-2026-72530: TrueConf Server Code Injection VulnerabilityKEV
  15. [KEV] CVE-2026-72529: TrueConf Server Missing Authentication for Critical Function VulnerabilityKEV
  16. Hackers poison arrayref Rust crate to push infostealer malwareSUPL
  17. NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCsAPT
  18. JFrog Artifactory Flaws Enable Software Supply Chain AttacksSUPL
  19. Frequently asked questions about the active threat to Siemens S7 Series PLCsEXPL
  20. Going with the Flow(s): Distinct Clusters Target Individuals of Interest to RussiaAPT
  21. Critical Arbitrary File Upload Vulnerability Patched in Elementor Pro WordPress PluginVULN
  22. Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA ServersVULN
  23. NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft CommandsVULN
  24. Ransomware: lockbit5 → usbank.comRANS
  25. US Indicts 17 Iranians Over Years-Long Cyber Espionage CampaignAPT
  26. Elementor Pro WordPress Plugin Vulnerability Exploited to Hack SitesVULN
  27. Ransomware: xpl0itrs → TargetRANS

  28. Wed 19 Aug 2026

    12 dispatches
    Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/SecondEXPL
  29. [KEV] CVE-2026-64849: MLflow Server-Side Request Forgery VulnerabilityKEV
  30. Hackers compromise 14,500 Dahua web cameras in 35-day campaignEXPL
  31. Inside Operation CameraSwarm: How One Actor Took Over 14,000 Dahua CamerasEXPL
  32. US charges Iranian hackers over $3.4 billion intellectual property theftAPT
  33. Ransomware: akira → Ericksen KrentelRANS
  34. US charges Iranians for sprawling hacking campaign on government agencies, universitiesAPT
  35. Over 500 Critical Infrastructure Organizations Hit by Medusa RansomwareRANS
  36. Critical RCE flaw in Windows IKE Extension now actively exploitedEXPL
  37. Threat Brief: Mitigating Large-Scale Credential Attacks (Updated August 18)BRCH
  38. China-Linked Hacker Shows AI Capabilities in APAC AttackAPT
  39. Oracle August 2026 Critical Security Patch Update Addresses 925 CVEsVULN

  40. Tue 18 Aug 2026

    16 dispatches
    Eight years later, federal authorities re-up charges against alleged Iranian hackers at Mabna InstituteAPT
  41. CVE-2026-33824: Remote Code Execution in Windows IKEv2KEV
  42. Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and SecretsEXPL
  43. Operation CameraSwarm: over 14,000 Dahua cameras compromised across Ukraine and RussiaKEV
  44. CISA gives feds 3 days to fix actively exploited Ray RCE bugEXPL
  45. Ransomware: shinyhunters → Logitech/ StreamlabsRANS
  46. CVE-2026-75837: Grav before 2.0.14 fails to guard the access field in the core group blueprintVULN
  47. CVE-2026-75828: Grav before 2.0.15 contains a stored cross-site scripting vulnerabilityVULN
  48. CVE-2026-75827: Grav before 2.0.15 contains an arbitrary file write vulnerability in the BlueprintVULN
  49. CVE-2026-74907: Grav before 2.0.15 contains a path traversal vulnerability in the static asset serverVULN
  50. CVE-2026-74904: SiYuan before v3.7.4 is missing authorization checks in 17 block metadata/contentVULN
  51. One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025BRCH
  52. Mirage2FA Hijacks Companies’ Microsoft 365 Sessions, with Over 4K Victims in the USMALW
  53. GitLab Patches Critical Code Injection VulnerabilityVULN
  54. CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCEEXPL
  55. [KEV] CVE-2025-62593: Ray-Project Ray Code Injection VulnerabilityKEV

  56. Mon 17 Aug 2026

    5 dispatches
    CVE-2026-19478: GitLab GraphQL Flaw ExploitedVULN
  57. Apple Patches iOS and macOS, (Mon, Aug 17th)VULN
  58. Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP UploadsVULN
  59. Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate TrafficAPT
  60. LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most AffectedSUPL