Lazarus hackers pair fake job offers with Windows zero-day exploit
1. Executive summary The North Korea-linked Lazarus Group (MITRE G0032) is actively exploiting a Windows local privilege escalation zero-day, CVE-2026-68820, targeting the
1. Executive summary The North Korea-linked Lazarus Group (MITRE G0032) is actively exploiting a Windows local privilege escalation zero-day, CVE-2026-68820, targeting the
1. Executive summary CISA has ordered U.S. federal agencies to patch CVE-2026-68820 by 25 August 2026 following confirmed in-the-wild exploitation by
1. Executive summary A sophisticated, ongoing campaign designated "City-Forum" has been actively exploiting unauthenticated guest user access in Salesforce and ServiceNow portals to
1. Executive summary Three memory-safety vulnerabilities in the Zoom annotation parser — CVE-2026-53413 (CVSS 8.3 HIGH, CWE-787 out-of-bounds write), CVE-
1. Executive summary Cisco has disclosed CVE-2026-20349, a high-severity vulnerability (CVSS 8.6) in Secure Firewall ASA Software and Secure Firewall Threat Defense
1. Executive summary On 12 August 2026, the clop ransomware group publicly claimed a victim identified as GATE7LLC.COMGBBEV.COM, located in the United Kingdom, via
1. Executive summary Microsoft's August 2026 Patch Tuesday addresses 398 CVEs (415 including two MITRE-assigned CVEs), comprising 42 critical, 355 important, and one
1. Executive summary Microsoft's August 2026 Patch Tuesday addresses 421 vulnerabilities across its product ecosystem, with 62 rated critical. One vulnerability, CVE-2026-68820
1. Executive summary PentestGPT is an open-source, LLM-driven automated penetration testing framework that autonomously executes recon, exploitation, and reporting against a target with no
1. Executive summary A researcher operating under the aliases Chaotic Eclipse / Nightmare Eclipse has published a proof-of-concept (PoC) exploit named "ShieldBreak," claiming
1. Executive summary A fake CCleaner installer is being distributed via a typosquat/lookalike domain (ccleanerwind[.]top), delivering a multi-stage spyware payload that patches the
1. Executive summary A ransomware-as-a-service operation tracked as "Gunra" is actively targeting critical infrastructure sectors globally, including financial services, healthcare, and