Skip to content
skopnix
Every edition · newest first

The archive.

1,110 dispatchespage 15 / 19№ 270 – 211

  1. Tue 11 Aug 2026

    1 dispatch
    BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress AdminsSUPL

  2. Mon 10 Aug 2026

    14 dispatches
    Multistate Water System Attacks Widen, Iran SuspectedAPT
  3. BdThemes plugins supply-chain hack creates rogue WordPress adminsSUPL
  4. Metabase SQL Zero-Day Attacks Could Have Wide Blast RadiusVULN
  5. FBI, South Korea warn of Gunra ransomware gang targeting critical infrastructureRANS
  6. Russian military hackers pose as recruiters to target Ukrainian IT workersAPT
  7. CISA: SonicWall SMA1000 flaws now exploited by ransomware gangsEXPL
  8. Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware DevelopmentAPT
  9. China-linked hackers turning popular cybersecurity tool into ransomware launchpad, Microsoft warnsEXPL
  10. New Jersey, Alabama Join States Targeted in Water CyberattacksAPT
  11. TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCoreEXPL
  12. Critical Progress LoadMaster flaw now actively exploited in attacksEXPL
  13. US Sanctions Iranian $6bn Crypto “Exchange” ShelbitPOLI
  14. Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and CredentialsMALW
  15. Critical Flaws Discovered in Belgian eID Software Used by 2 Million PeopleVULN

  16. Sun 09 Aug 2026

    2 dispatches
    Webmail CSS Attacks Expose a New Risk for AI-Powered Email ToolsRSCH
  17. DEFCON: New Red Team TacticRSCH

  18. Sat 08 Aug 2026

    3 dispatches
    Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise DataVULN
  19. Metabase Zero-Day Exploited in Wild Allows Admin Access Without AuthenticationEXPL
  20. N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and PersistEXPL

  21. Fri 07 Aug 2026

    10 dispatches
    Metabase SQLi zero-day exploited in customer data-theft attacksVULN
  22. Metabase customers staying silent about the breachEXPL
  23. [KEV] CVE-2026-8037: Progress LoadMaster Command Injection VulnerabilityKEV
  24. tl;dv (Too Lazy; Didn't Validate): 181,874 Meetings Left Wide OpenBRCH
  25. WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server TakeoverVULN
  26. Researchers Discover Hidden Backdoor in 20 Router Models Allowing Remote Root AccessVULN
  27. New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT TablesEXPL
  28. Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID AccessEXPL
  29. Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow SecretsEXPL
  30. Helix claims Uber on its leak siteBRCH

  31. Thu 06 Aug 2026

    6 dispatches
    Cisco Integrated Management Controller Argument Injection VulnerabilitiesVULN
  32. Canadian Hacker Pleads Guilty Over Snowflake Extortion CampaignBRCH
  33. AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the ModelVULN
  34. Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root ShellsVULN
  35. Cisco Patches Critical SD-WAN, IOS XE, FMC VulnerabilitiesVULN
  36. Shai-Hulud strikes again: CHAINDROP worm hits 400+ npm packagesSUPL

  37. Wed 05 Aug 2026

    11 dispatches
    CVE-2026-9205: IBM Langflow OSS contains a weak cryptographic key derivation vulnerabilityVULN
  38. OctLurk and SilkLurk Windows Backdoors Target Governments in 6 CountriesAPT
  39. Pre-auth RCE in enterprise Java hits Bonita and OFBiz serversVULN
  40. Don't Revoke That Token Yet: Inside the keyv/cacheable npm Worm, (Wed, Aug 5th)SUPL
  41. Cisco IOS XE Software Security Hardening Release: August 2026VULN
  42. IBM's agentic AI platform is under active attack - patch nowVULN
  43. CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flawsVULN
  44. Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode MarkupVULN
  45. Over 400 NPM Packages Infected in ChainDrop Supply Chain AttackSUPL
  46. Bank of America impersonators weaponize ScreenConnect, then make it hard to removeEXPL
  47. Water Sector Cyberattacks Reportedly Hit at Least 12 StatesEXPL

  48. Tue 04 Aug 2026

    13 dispatches
    Massive supply-chain attack compromises 440 packages under four hoursSUPL
  49. New XCSSET variant targets macOS devs via compromised Xcode projectsMALW
  50. Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm PackagesSUPL
  51. [KEV] CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityKEV
  52. [KEV] CVE-2026-9198: IBM Langflow Code Injection VulnerabilityKEV
  53. CVE-2026-10032: The openUrl function in @a2ui/web_core passes an agent-controlled URL directlyVULN
  54. QuickFox Supply Chain Attack Used to Deploy FDMTP ImplantSUPL
  55. New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database RootVULN
  56. TP-Link Omada ZTP Vulnerabilities Chain Into Full Network TakeoverVULN
  57. Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged AgentEXPL
  58. Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request TamperingEXPL
  59. Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malwareAPT
  60. “Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AIRSCH