Skip to content
skopnix
Every edition · newest first

The archive.

1,110 dispatchespage 14 / 19№ 330 – 271

  1. Mon 17 Aug 2026

    3 dispatches
    Ukraine says cyberattack hit Russian e-commerce giant Wildberries amid drone strikesAPT
  2. Six major security incidents traced from the initial Litellm and Trivy pipeline compromises all the way to ransomware/breachesSUPL
  3. ShieldCrash PoC: Microsoft Defender Fix BypassVULN

  4. Sun 16 Aug 2026

    3 dispatches
    Ransomware: qilin → CofaceRANS
  5. Mustang Panda Upgrades CoolClient With a Kernel RootkitAPT
  6. Vulnerability giving attackers full control of Macs is under active exploitationEXPL

  7. Sat 15 Aug 2026

    3 dispatches
    ChainDrop worm crawls into npm supply chain, evades standard defensesSUPL
  8. [KEV] CVE-2026-65400: Apple macOS Improper Authentication VulnerabilityKEV
  9. GeoServer Zero-Day Is Already Being Probed. That’s the ProblemVULN

  10. Fri 14 Aug 2026

    6 dispatches
    I went looking for a managed-Postgres provider. Instead, I found a vulnerability in a 4-star PostgreSQL extension available everywhere! and turned it into code execution at NeonDB, Supabase, Xata and many other PostgreSQL service companiesSUPL
  11. Hackers exploit macOS Screen Sharing flaw to deploy Monero minerEXPL
  12. CVE-2026-72819: Grav CMS before 2.0.13 contains a remote code execution vulnerability in the Flex ObjectsVULN
  13. Trivy, Not LiteLLM Behind the 2,500 Org CompromiseSUPL
  14. Hackers Exploiting Unpatched GeoServer Zero-DayEXPL
  15. Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacksAPT

  16. Thu 13 Aug 2026

    12 dispatches
    Microsoft patches LegacyHive Windows zero-day vulnerabilityVULN
  17. [KEV] CVE-2026-73570: Zimbra Collaboration Suite (ZCS) OS Command Injection VulnerabilityKEV
  18. vCenter Flaw Exploited Just Five Days After DisclosureEXPL
  19. PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code ExecutionVULN
  20. Multi-Functional Linux Botnet “Evooo1Bot”MALW
  21. CVE-2026-73487: Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSVEXPL
  22. CVE-2026-73483: Flowise (packages flowise and flowise-components) in versions <= 3.1.2 contain a sandboxEXPL
  23. Fortinet Patches Authentication Flaws in FortiWeb and FortiManagerVULN
  24. 153GB of stolen credentials surface after LiteLLM supply chain attackSUPL
  25. CVE-2026-19481: @fastify/busboy is a multipart form-data parser. …VULN
  26. Storm-1175 Replaces Medusa With New StormEncryptor RansomwareAPT
  27. North Korean Lazarus Group Uses Windows Zero-Day in Operation Dream JobAPT

  28. Wed 12 Aug 2026

    18 dispatches
    Adobe Commerce Bug Targeted Immediately After DisclosureKEV
  29. Hundreds of fake Chrome VPN extensions route traffic through a proxySUPL
  30. China-Linked Hackers Use AI Agents in Autonomous Attack on TaiwanAPT
  31. Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy BackdoorEXPL
  32. SharePoint Vulnerability Exploited Shortly After PoC ReleaseEXPL
  33. “Zoomsday” flaws could let one Zoom participant attack anotherVULN
  34. 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have OneSUPL
  35. Patch Tuesday: Update now to fix 421 flaws, including three zero-daysVULN
  36. Lazarus Used Post-Quantum Key Exchange to Deliver Zero-DayAPT
  37. CISA gives federal agencies two weeks to patch Microsoft bug exploited in DPRK campaignAPT
  38. Lazarus hackers pair fake job offers with Windows zero-day exploitAPT
  39. New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privilegesEXPL
  40. Over 2,500 Organizations Impacted by LiteLLM Supply Chain AttackSUPL
  41. Ivanti EPM Update Patches Remotely Exploitable FlawsVULN
  42. ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM AccessEXPL
  43. Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ OrganizationsSUPL
  44. SAP Commerce Cloud CVE-2026-58231 Requires Urgent PatchingVULN
  45. Microsoft Patch Tuesday for August 2026 Fixed a Zero-Day and Wormable RCEEXPL

  46. Tue 11 Aug 2026

    15 dispatches
    CVE-2026-73247: Kestra is an open-source, event-driven orchestration platform. …VULN
  47. CaptiveCrunch: Midnight Blizzard Weaponizes Hotel Wi-Fi Captive Portals to Steal Microsoft 365 CredentialsAPT
  48. Microsoft Plugs Nearly 400 Security HolesEXPL
  49. Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityKEV
  50. [KEV] CVE-2026-72898: Metabase SQL Injection VulnerabilityKEV
  51. Expired DMARC reporting endpoint exposed a NYSE Fortune 1000's infrastructure for $10SUPL
  52. Cisco warns of ASA and FTD VPN flaw exploited to crash devicesEXPL
  53. Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run CommandsAPT
  54. The August 2026 Security Update ReviewKEV
  55. Iran-Linked Hackers Target More US Water Infrastructure in New Jersey and AlabamaAPT
  56. Social media platforms crack down on drone factory recruiting gameAPT
  57. Two wars and a World Cup lead to epic DDoS attacks on publishersAPT
  58. Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)KEV
  59. Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selectionAPT
  60. US and South Korea warn of Gunra ransomware targeting govt agenciesRANS