1. Executive summary A maximum-severity vulnerability (CVE-2026-58231, CVSS 10.0, CRITICAL) in SAP Commerce Cloud's Data Hub Adapter is being actively
1. Executive summary On 2026-08-17, the actor "bravox" publicly named UK company Moores (www.moores.co.uk) as a ransomware victim on
Z.ai has announced GLM 5.3. It uses the same base model as GLM 5.2. No new pre-training run. No larger foundation model.
1. Executive summary On 16 August 2026, the actor "lockbit5" publicly named dupouy-associes.fr — Dupouy et Associes / Crowe Horwath, a French accounting services
1. Executive summary Rapid7 added public Metasploit modules for multiple unauthenticated and authenticated remote-code-execution paths, a Linux local privilege escalation, and Ray Dashboard directory
1. Executive summary On 16 August 2026, the Qilin ransomware group publicly claimed a victim, INVENSITY, a Germany-based organisation (domain: www.invensity.com). Attribution to
1. Executive summary On 16 August 2026, the Qilin ransomware group publicly claimed a victim named DELTA WAYS, a Germany-based organisation (domain: www.deltaways.de)
1. Executive summary Tenable's Research Special Operations (RSO) team has documented a cluster of seven confirmed incidents (November 2025–August 2026) in which autonomous
1. Executive summary CVE-2026-53660 affects OpenAM Community Edition through version 16.0.6, shipping the iPlanetDirectoryPro SSO cookie with HttpOnly=false and no SameSite
1. Executive summary On 14 August 2026, the Qilin ransomware group publicly claimed a victim named "Connections," a Belgium-based organisation (domain www.connections.
1. Executive summary On 14 August 2026, the actor "coinbasecartel" publicly claimed a ransomware attack against Turner and Townsend, a UK-headquartered global professional
1. Executive summary On 2026-08-12, a cybercriminal using the alias "ZeroBytes" advertised a database claiming to contain records of more than 2