1. Executive summary The North Korea-linked Lazarus Group (MITRE G0032) is actively exploiting a Windows local privilege escalation zero-day, CVE-2026-68820, targeting the
1. Executive summary CISA has ordered U.S. federal agencies to patch CVE-2026-68820 by 25 August 2026 following confirmed in-the-wild exploitation by
1. Executive summary JFrog has identified a campaign distributing malicious npm packages that impersonate the legitimate rollup-plugin-polyfill-node project to deliver remote-access and
1. Executive summary SentinelLABS has disclosed a Rust-written macOS implant and infostealer, tracked as macOS.Gaslight, that combines conventional macOS tradecraft with a novel analyst-