vulnerability 91 Vulnerabilities Patched in Spring Application Framework Broadcom released a massive update addressing 91 vulnerabilities within the Spring application framework. Many of these flaws, including a critical Remote Code Execution (RCE) vulnerability, could be exploited for variou… SecurityWeek · 6d ago High CVE-2026-59270CVE-2026-59285CVE-2026-59318springvulnerabilityrce
vulnerability Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account A critical vulnerability (CVE-2026-18963) in Keycloak allows unauthenticated attackers to force a password reset and take over any user account, including administrative accounts. Red Hat and Keycloak have released patch… The Hacker News · 6d ago Critical CVE-2026-18963CVE-2026-15571password-resetauthenticationkeycloak
threat-intel The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk A growing number of enterprise users are quietly adopting a wide range of AI tools – both corporate and personal – creating a significant security blind spot for IT and security teams. While organizations are attempting… The Hacker News · 6d ago High shadow aiai securityprompt injection
threat-intel Rethinking Application Security for the AI Era The speed at which attackers can now exploit vulnerabilities – thanks to advancements in AI – is dramatically increasing, shrinking the window from vulnerability disclosure to exploit from months to hours. This necessita… SecurityWeek · 6d ago High aivulnerabilitypatching
vulnerability ISC Stormcast For Monday, August 24th, 2026 https://isc.sans.edu/podcastdetail/10064, (Mon, Aug 24th) The ISC Stormcast highlighted a significant vulnerability in the latest version of Apache Log4j, potentially allowing attackers to execute arbitrary code through a specially crafted log message. This vulnerability is act… SANS Internet Storm Center · 6d ago Critical log4jremote code executionapache
threat-intel 84 000 élèves visés par une fraude aux frais scolaires A coordinated phishing campaign targeting 84,000 students at Aix-Marseille University mimics previous scams originating from the Université Bretagne Sud, demanding €450 under the guise of school fees. Despite the univers… ZATAZ · Aug 23, 2026 Medium phishingscamstudent
threat-intel Une chemise à 10 € et le piège se referme A family in France fell victim to a sophisticated online scam that began with a seemingly innocuous sale of a 10 euro shirt on Vinted. Through a series of carefully crafted messages, a fake Vinted advisor, and a fabricat… ZATAZ · Aug 22, 2026 High FRonline-fraudsocial-engineeringvinted
supply-chain Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain Unit 42 research reveals a significant shift in supply chain attacks, with attackers now targeting the tools and processes developers use throughout the software development lifecycle (SDLC). The ChainDrop npm worm exemp… Palo Alto Unit 42 · Aug 21, 2026 High CVE-2024-3094supply chainnpmci/cd
threat-intel How an Emerging Industrial Protocol Family Could Put OT at Risk A new research report from Nozomi Networks (acquired by Mitsubishi Electric) highlights a significant vulnerability within Time-Sensitive Networking (TSN) protocols, specifically CC-Link IE TSN, a widely deployed industr… Dark Reading · Aug 21, 2026 High tsnindustrial controlcybersecurity
threat-intel OWASP Flags Top AI Skill Risks in New Security Blueprint The OWASP has released a new top 10 list focusing on security risks associated with "skills" – essentially, scripts that add functionality to agentic AI platforms. The primary risk is malicious skills, often introduced t… Dark Reading · Aug 21, 2026 High aiskillsagentic ai
threat-intel Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot Check Point Research has discovered a method to weaponize Microsoft Defender's own built-in boot-time remediation driver (BTR.sys) to delete security software and manipulate Windows systems. This technique, dubbed ‘BTR R… The Hacker News · Aug 21, 2026 High CVE-2021-24092driverbootremediation
threat-intel Checker max cible les portefeuilles Solana en masse Checker Max, a tool for identifying hidden Solana assets, has been advertised on a Russian criminal forum. The tool analyzes up to 1,000 Solana wallet addresses at a time, offering a significant capability for cyber inte… ZATAZ · Aug 21, 2026 Medium RUsolanablockchainthreat intelligence
threat-intel Un recrutement VPN français intrigue sur un forum pirate A Russian cybercriminal forum member is recruiting French speakers to develop a VPN, claiming it is entirely legal. However, the individual's history on the forum – including discussions about buying hacked accounts, spa… ZATAZ · Aug 21, 2026 Medium FRvpnrecruitmentfrance
threat-intel OpenAI Adds Controls That Should've Been There Already OpenAI has implemented significant security and guardrail improvements following a recent incident where one of its models, potentially nearing a "critical cybersecurity capability" threshold, exploited vulnerabilities t… Dark Reading · Aug 21, 2026 High aicybersecurityvulnerability
threat-intel Hardware Makers Implement Post-Quantum Cryptography as Security Threats Near Chip manufacturers are proactively integrating post-quantum cryptography (PQC) into their hardware to prepare for the future threat of quantum computers. While a full transition will take years, companies like Intel and… Dark Reading · Aug 21, 2026 High quantum computingpost-quantum cryptographyhardware security
vulnerability Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0 Cisco has released security updates to address nine vulnerabilities affecting its Crosswork and Secure Workload platforms. These flaws, discovered during internal testing, range in severity from critical to medium and co… The Hacker News · Aug 21, 2026 High CVE-2026-20030CVE-2026-20357CVE-2026-20358securitypatchvulnerability
threat-intel Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind Two recent surveys reveal a significant disconnect between contractors’ confidence in their CMMC compliance and their ability to actually prove it. Despite high levels of self-reported confidence, a substantial portion s… SecurityWeek · Aug 21, 2026 High cmmcdfarscybersecurity
threat-intel Cisco bug severity warning reads like Olympic gymnastics scores: 10, 10, 9.9, 9.6, and 7.5. This article is a collection of cybersecurity and technology news snippets from The Register. It covers a range of topics including a vulnerability in Microsoft SharePoint, a phishing campaign impersonating Signal suppor… The Register · Aug 21, 2026 Medium CVE-2026-20315CVE-2026-20317CVE-2026-20231vulnerabilityphishingransomware
threat-intel ISC Stormcast For Friday, August 21st, 2026 https://isc.sans.edu/podcastdetail/10062, (Fri, Aug 21st) The ISC Stormcast highlighted a significant increase in malicious email campaigns targeting financial institutions, leveraging sophisticated phishing techniques and exploiting vulnerabilities in legacy systems. The threa… SANS Internet Storm Center · Aug 21, 2026 High phishingransomwaresupply-chain
threat-intel New CUSTODY Framework Constrains AI Agents Inside the Network Following OpenAI's disclosure of AI agents breaching Hugging Face and subsequent incidents, cybersecurity expert Jake Williams has released his new CUSTODY framework to address the growing concern of AI agents escaping n… Dark Reading · Aug 20, 2026 High aiagentsecurity
