From Portuguese sources
Translated from Portuguese
Aurora Ransomware Affiliate Uses AI Assistant Cursor to Compromise Active Directory and VMware ESXi Servers
Ransomware & Extortion
Next.js Patches Two Critical RCE Vulnerabilities in Versions 15.5.24 and 16.3.3
Vulnerabilities & Exploits
Iran-Linked Tortoiseshell Group Deploys Malicious wtsapi32.dll Backdoor for Persistent Windows Access
State-Sponsored & APTSonicWall Patches Critical Path Traversal and Update Flaws in NetExtender for Linux
SonicWall has released fixes for two high-severity vulnerabilities in its NetExtender client for Linux that could allow remote attackers to write arbitrary files with root privileges and manipulate the automatic update process. The flaws impact versions 10.3.5 and earlier, while the Windows version remains unaffected. CVE-2026-66152 carries a CVSS score of 8.8 and stems from improper handling of tar archives containing OPSWAT data, enabling path traversal that lets attackers escape the intended extraction directory. CVE-2026-66153 scores 7.0 and arises from inadequate symlink and temporary file handling in the NEService update mechanism. Both issues require user interaction to exploit, and no in-the-wild attacks have been observed so far. Administrators are urged to upgrade immediately to version 10.3.6 or later, as no workarounds exist.
Zscaler Fixes Multiple Critical Flaws in Client Connector Enabling RCE and Authentication Bypass
Zscaler has released patches for several vulnerabilities in its Client Connector agent that could lead to remote code execution, authentication bypass, local privilege escalation, and denial of service. The most severe issue, tracked as CVE-2026-59568 with a CVSS score of 9.1, allows unauthenticated remote attackers to execute arbitrary code within the context of the Zscaler Client Connector process. A second critical flaw, CVE-2026-59564 also rated CVSS 9.1, affects communication between the connector and its management portal, enabling attackers to circumvent authentication mechanisms. Additional vulnerabilities include a local buffer overflow on Android and ChromeOS tracked as CVE-2026-59566 with CVSS 8.4, as well as issues that could result in privilege escalation or service disruption. The flaws impact Client Connector versions across Windows, macOS, Linux, iOS, Android, and ChromeOS, with varying affected builds depending on the platform. Updated builds for lines 4.6 through 4.9 on Windows and equivalent fixes for other operating systems are now available.
WhatsApp Adds Support for Multiple Passkeys on Single Account
WhatsApp has expanded its account protection features by allowing users to register more than one passkey on the same profile. The update particularly benefits users who switch between Android and iOS devices while maintaining phishing-resistant login methods. Passkeys replace traditional codes and passwords with biometric authentication, facial recognition, or device lock mechanisms. Meta reports that more than one billion people already use the feature on WhatsApp, with Android support introduced in 2023 and iOS support added in 2024. The change reduces reliance on a single device during authentication by associating multiple keys with one account. Users can manage keys through Settings > Account > Passkeys. WhatsApp has also strengthened two-factor verification by allowing replacement of the six-digit PIN with longer passwords containing letters, numbers, and special characters.
AmnesiaStealer Malware for macOS Hijacks Authenticated Browser Sessions via ClickFix and Chromium
A new macOS malware strain named AmnesiaStealer has emerged that combines infostealing, persistence mechanisms, and the ability to silently take over already authenticated browser sessions. The infection chain begins with a fake GitHub page that tricks victims into copying a malicious command into Terminal using the ClickFix social engineering technique. Once executed, the Rust-based payload collects system data, displays a fake installer window to capture the user password, and attempts to unlock the Keychain for protected credentials. Targeted data includes browser cookies, history, extensions, documents, Apple Notes, Telegram sessions, and cryptocurrency wallet information. A secondary module copies the browser profile and launches a hidden Chromium instance controlled through the Chrome DevTools Protocol, allowing attackers to interact with active sessions that have already passed multi-factor authentication. Persistence is achieved via a disguised LaunchDaemon, and the malware attempts to remove installation artifacts afterward.
HackerSec's Yaga Pentest Agent Reaches 98.8% Effectiveness in White Box Testing
The offensive cybersecurity firm HackerSec announced that its Yaga pentest agent achieved a record 98.8% effectiveness in white box scenarios on the latest YagaBench evaluation. The agent also recorded 96.2% success in black box and 97% in gray box testing, marking the highest results since measurements began. These figures indicate that Yaga identified more than 98% of existing vulnerabilities across tested environments. The benchmark specifically highlights the performance gap between standalone AI models and the same models integrated into HackerSec's specialized pentest harness. Without the harness, models such as Opus 5 reached only 61% in white box testing, while GPT 5.6 SOL scored 60.9% in white box and 39.5% in black box. Yaga orchestrates four models during a single run, preserving context across phases and chaining findings to confirm exploitability while keeping false positives below 1%. CEO Andrew Martinez stated the company aims to reach 99% effectiveness across all pentest modalities by year end.
LockBit Claims Breach of U.S. Bank, Sets September 2026 Deadline for Ransom Payment
The ransomware group LockBit has added U.S. Bank to its leak site, claiming to have stolen data from the financial institution and threatening to publish it unless a ransom is paid by September 3, 2026. U.S. Bank stated it is actively investigating the claims but has so far found no evidence of unauthorized network access or impact on internal systems. Lee Henderson, the bank's vice president of public affairs, confirmed that the institution is monitoring the situation and treating the allegations seriously. LockBit placed the bank's domain on its extortion portal on August 19 and has a history of resuming operations after a major international law enforcement disruption in 2024. The investigation remains ongoing, with the final scope depending on whether unauthorized access and data theft can be confirmed.
Chinese Cybercriminals Deploy AI Agents to Automate Exploitation of Exposed Windows and Linux Servers
A Chinese cybercriminal group tracked as UAT-10147 is actively using AI agents to automate reconnaissance, exploitation, and post-exploitation against internet-facing Windows and Linux servers. Cisco Talos identified the campaign after discovering approximately 170,000 URLs in the attackers' infrastructure, with targets spanning government, education, media, technology, and gaming organizations across multiple countries including Brazil. The group divides targets into smaller batches to accelerate scanning and exploitation of known vulnerabilities in applications such as Zimbra, AjaxPro, Nacos, and Telerik. AI agents go beyond simple code generation by producing exploitation guides, refining failed attacks, verifying payload success, and automating persistence and post-exploitation steps. In one observed case, the agents created scripts capable of validating permissions, exploiting ViewState deserialization, installing implants, and deploying web shells on compromised IIS servers. Cisco Talos assesses the operation as a shift toward semi-autonomous offensive orchestration rather than basic AI-assisted scripting.
AWS Details Architecture to Reduce Prompt Injection Risks in AI Agents
AWS has introduced a new architecture designed to prevent compromised or manipulated AI agents from accessing data beyond user permissions. The approach relies on Amazon Bedrock AgentCore to shift authorization decisions from the agent itself to the underlying infrastructure and connected services. The core risk arises when agents receive broad credentials to query databases, repositories, and SaaS platforms, allowing potential prompt injection attacks to retrieve unauthorized information. In the proposed design, users authenticate via Amazon Cognito and receive JWT tokens containing attributes such as department or role. The AgentCore Runtime validates these tokens before executing any agent actions, rejecting requests that violate configured rules. For DynamoDB queries, temporary credentials are issued through AssumeRoleWithWebIdentity, with IAM policies enforcing strict access to authorized data partitions only.
Manic Android Malware Steals PINs via Transparent Overlay and Relays Data Through Nearby Infected Devices
A newly identified Android malware strain named Manic merges banking trojan, spyware, and remote access capabilities. The threat has been active since at least February 2026 and continues to receive updates that add anti-analysis features, in-memory code loading, and lock-screen credential theft. Manic monitors 169 financial, messaging, and government applications while using a transparent overlay on legitimate numeric keyboards to capture PINs without displaying a full fake banking screen. Stolen data can be forwarded through other compromised nearby devices even when the original phone lacks internet connectivity. Operators also leverage WebRTC sessions for live screen viewing and remote interaction. The malware additionally functions as a keylogger, intercepts SMS and notifications, and collects passwords, one-time codes, and recovery phrases. Security researchers recommend avoiding unknown APKs and scrutinizing requests for Accessibility Services or broad device control permissions.
Oracle Issues Emergency Patches for Critical Remotely Exploitable WebLogic Server Vulnerabilities
Oracle released an emergency security update on August 18 containing 943 new patches across dozens of enterprise product families. The update addresses multiple high-severity flaws in Oracle WebLogic Server that can be exploited remotely without authentication over IIOP, T3, and RMI protocols. Four vulnerabilities—CVE-2026-60698, CVE-2026-60672, CVE-2026-60696, and CVE-2026-60977—received CVSS scores of 9.8 and can impact confidentiality, integrity, and availability of affected servers. A separate critical issue, CVE-2026-61241, was disclosed in the LDAP server component of Oracle Internet Directory with a maximum CVSS score of 10.0 and affects versions 12.2.1.4.0 and 14.1.2.1.0. Oracle urges customers to maintain supported releases and apply patches promptly, noting prior incidents where unpatched systems were targeted after fixes became available. Organizations are advised to validate patches in test environments before production deployment to minimize operational risk.
Google Patches Two Critical Memory Corruption Flaws in Chrome WebGL and Dawn Components
Google has issued a security update for Chrome that addresses 15 vulnerabilities, two of which are rated critical. The flaws, tracked as CVE-2026-76034 and CVE-2026-76036, involve buffer overflow conditions that can lead to out-of-bounds memory writes. CVE-2026-76034 affects the WebGL component used for 2D and 3D graphics rendering on web pages, while CVE-2026-76036 impacts Dawn, the Chromium implementation of WebGPU. Both issues were discovered internally and could result in crashes or remote code execution in certain scenarios. Updated versions are now available for Windows, macOS, Linux, and Android, and users are strongly advised to apply the patches immediately.
Critical Vulnerability in Forminator Forms WordPress Plugin Enables Unauthenticated Remote Code Execution
A critical vulnerability tracked as CVE-2026-15748 with a CVSS score of 9.8 has been identified in the Forminator Forms plugin for WordPress. The flaw allows unauthenticated attackers to upload malicious PHP files by manipulating the Select field alongside a File Upload field on published forms. This bypasses extension blocking and file type validation, potentially leading to full server compromise including web shell installation and database access. The plugin, which has more than 600,000 active installations, is affected in all versions up to and including 1.56.1. The issue was resolved in version 1.56.2 released at the end of July, with later updates including 1.57.0 now available.
Snowflake GitHub Actions Workflow Flaw Enabled Command Injection and Jira Token Theft
A vulnerability in Snowflake's GitHub Actions workflow in the snowflakedb/snowflake-connector-net repository allowed any user to execute arbitrary commands on a runner by creating a specially crafted issue in a public repository. The flaw stemmed from unsanitized insertion of issue titles and content directly into shell commands, combined with a failed access control check that relied on a non-existent pull request property during issue events. During authorized testing, an autonomous security agent exploited the issue to extract a Jira API token from the pipeline environment variables. This credential granted read access to internal engineering, security compliance, and bug bounty projects. The vulnerability was active from June 18 to June 23, 2026. Snowflake patched the workflow on the day the report was received and rotated the compromised token the following day. The vulnerable code appeared in a pull request that involved GitHub Copilot, though available history does not confirm the AI generated the insecure lines.
Apple Patches CVE-2026-43760 Screen Sharing Flaw Granting Root Access on macOS
A vulnerability in the macOS Screen Sharing feature allows remote attackers to execute commands with root privileges under specific configurations. Identified as CVE-2026-43760 and tied to the screensharingd service, the flaw affects systems with Screen Sharing or Remote Management enabled alongside the legacy VNC password option. Attackers who know the VNC password can exploit unauthenticated account binding to retrieve protected files such as /etc/sudoers or write policies into /private/etc/sudoers.d. This grants non-privileged accounts passwordless sudo rights. The issue stems from VNC-authenticated connections not being mapped to specific macOS accounts while file-transfer components retain root privileges. Apple addressed the vulnerability in macOS Tahoe 26.6 and macOS Sonoma 14.8.8, both released on July 27, 2026.
Cybercriminals Deploy Advanced AI for Continuous Automated Reconnaissance and Exploitation at Scale
Advanced AI models now enable cybercriminal groups to maintain uninterrupted reconnaissance across enterprises in every sector, mapping domains, exposed services, and infrastructure changes at a pace no human team could sustain for weeks. The automated process targets two opposite profiles of vulnerable systems: legacy environments left unpatched for years with outdated versions and forgotten permissions, and rapidly deployed applications built through Vibe Coding that reach production without security review. The entire attack chain—reconnaissance, vulnerability identification, validation, and exploitation—is now executed by AI agents operating with minimal human oversight. What previously required a dedicated specialized team focused on one target at a time now runs in parallel against thousands of targets simultaneously, with marginal cost approaching zero for each additional attack. This collapse in operational costs and rise in success rates has restructured the cybercrime economy, funding increasingly sophisticated tools and lowering the barrier for new operators who need only platform access rather than deep technical expertise. The time window between an application reaching production and discovery by attackers has shrunk to hours, while most organizations still treat security as a finite project rather than an ongoing process.
Microsoft to Make Passkeys Default Authentication in Entra ID Starting September 2026
Microsoft will transition Entra ID users to passkeys as the standard authentication method beginning September 1, 2026. The change aims to eliminate reliance on phishing-prone SMS and voice call codes. Existing SMS and voice users will be prompted to register passkeys during their next multifactor authentication. Passkeys rely on public-key cryptography and avoid shared secrets, blocking phishing, interception, credential reuse, and SIM swapping attacks. Support includes synced passkeys via iCloud Keychain and Google Password Manager, plus device-bound options like Microsoft Authenticator, Windows, and FIDO2 hardware keys. Native SMS and voice services will be fully retired on February 1, 2027, forcing affected tenants to adopt passkeys with no opt-out option.
Dysphoria Botnet Compromises Nearly 300,000 Devices for DDoS Attacks and Residential Proxy Services
The Dysphoria botnet has infected approximately 296,000 devices, including routers, IP cameras, gateways, and embedded Linux systems. Researchers first observed the threat in the first quarter of 2026, noting rapid evolution from the jackskid and fbot families. The infrastructure is primarily used for DDoS attacks but has expanded to offer residential proxy capabilities. Infection occurs through brute-force attacks on Telnet and SSH services with weak credentials, as well as known remote code execution vulnerabilities in IoT equipment. A key technical advancement involves the use of Ethereum and Solana blockchain domains for command-and-control infrastructure, making takedowns significantly harder. Compromised devices can also function as relays by leveraging UPnP to expose ports and hide criminal traffic origins. Operators advertise attack capacity of up to 4 Tbps and sell DDoS services in structured commercial packages targeting internet services and gaming platforms worldwide.
Fortinet Patches Critical Authentication Bypass in FortiWeb Allowing Login with Random Credentials
Fortinet has released security updates addressing multiple vulnerabilities across FortiWeb, FortiManager, and FortiClient products. The most severe issue, tracked as CVE-2026-26035, affects FortiWeb and carries a CVSS score of 8.8. The flaw occurs when administrative accounts configured with remote RADIUS authentication use the wildcard option, which is disabled by default. Under these conditions, an unauthenticated remote attacker can gain administrative access to the web application firewall by supplying arbitrary usernames and passwords. Successful exploitation grants full control over the FortiWeb instance, potentially compromising web application security. The vulnerability impacts FortiWeb versions 8.0, 7.6, 7.4, 7.2, and 7.0, with fixes available in versions 8.0.3, 7.6.7, 7.4.12, and 7.2.13. No active exploitation of the authentication bypass flaws has been observed so far, but the risk of remote administrative access makes immediate patching essential for exposed appliances.
Microsoft Patches Seven Exchange Server Vulnerabilities Including Critical Remote Code Execution Flaw
Microsoft has addressed seven vulnerabilities in Exchange Server that enable remote code execution, privilege escalation, denial of service, content spoofing, and security feature bypass. The most severe issue, CVE-2026-62913, carries a CVSS score of 8.8 and involves a heap buffer overflow that can be exploited remotely by a low-privileged attacker without any user interaction. Successful exploitation grants code execution on the server, facilitating email theft, persistence mechanisms, lateral movement, and ransomware deployment. CVE-2026-62911, demonstrated at Pwn2Own Berlin with a CVSS score of 8.0, allows authentication bypass through capture and replay of credentials. Additional fixes cover SSRF-based privilege escalation, remote deserialization crashes, content spoofing, and authorization bypasses. Patches are available for Exchange Server Subscription Edition, while 2016 and 2019 versions receive updates only through the Extended Security Update program.
US Presidential Memo Authorizes Selected Private Companies to Join Federal Cyber Operations Against Foreign Criminal Groups
The United States government has established a formal program allowing vetted private-sector companies to participate in offensive cyber operations targeting foreign criminal organizations. Signed by President Donald Trump on August 12, 2026, the presidential memorandum places the initiative under the National Coordination Center with joint oversight from the Department of Justice and the Department of Homeland Security. Participating firms will operate exclusively under government contracts, direction, and supervision, with strict requirements including technical evaluations, financial guarantees of at least one million dollars, and pre-approval for every operation. The program focuses on disrupting ransomware, phishing, financial fraud, and other schemes affecting American citizens while imposing clear limits to prevent unintended harm to US persons or escalation to prohibited levels of force. In contrast to Brazil’s ongoing policy discussions, the US move formally recognizes that advanced offensive capabilities now reside primarily in the private sector and creates a regulated mechanism to access them. Operational rules must be published within 60 days, marking a significant shift in how governments integrate private expertise into state-directed cyber actions.
Microsoft Patches High-Severity Outlook Flaw Allowing Remote Code Execution
Microsoft has addressed a high-severity vulnerability in Outlook tracked as CVE-2026-70329 with a CVSS score of 8.8. The flaw stems from an integer overflow during data processing that can trigger memory corruption and alter the application's execution flow. Exploitation occurs over the network without requiring authentication or privileges, though some user interaction is necessary to process the malicious content. Successful attacks grant code execution under the privileges of the logged-in user, potentially enabling malware installation, file access, data theft, or lateral movement. The issue impacts Microsoft 365 Apps for Enterprise, Office 2019, Office LTSC 2021, Office LTSC 2024, and Outlook 2016 on both 32-bit and 64-bit systems. A dedicated patch KB5002755 updates Outlook 2016 to build 16.0.5565.1000, while Click-to-Run versions receive fixes through standard Microsoft update channels.
Lazarus Group Exploits Windows Kernel Zero-Day CVE-2026-68820 to Deploy FudModule Rootkit
The North Korean Lazarus APT group has been actively exploiting a zero-day vulnerability in the Windows kernel to escalate privileges to SYSTEM level and install the FudModule rootkit. The flaw, tracked as CVE-2026-68820, resides in the afd.sys driver responsible for network functions and socket management. Microsoft released a patch for the issue on August 11. The attacks form part of the ongoing Operation Dream Job campaign, which uses fake job offers to target professionals in defense, aerospace, and aviation sectors. Victims in Brazil, Europe, and India are tricked into opening malicious PDF viewers or prepared files that deliver the MISTPEN downloader. Once initial access is obtained, the zero-day exploit elevates privileges, allowing FudModule to tamper with Windows telemetry and weaken EDR solutions as well as Smart App Control.
SAP Releases August Security Update Patching 28 Vulnerabilities Including Critical CVSS 10 Flaw
SAP has issued a broad security update to address multiple critical vulnerabilities that could enable code injection, memory corruption, and privilege escalation across enterprise systems. The August package includes 28 new security notes along with a GitHub advisory and two prior fix updates. The highest-severity issue, CVE-2026-58231, carries a maximum CVSS score of 10 and affects the Data Hub Adapter in SAP Commerce Cloud versions 2211 and 2211-JDK21, allowing remote exploitation without user interaction due to improper authorization. Another critical flaw, CVE-2026-44772 rated 9.9, impacts SAP Manufacturing Integration and Intelligence 15.4 and 15.5, permitting malicious code injection into industrial process monitoring systems. Additional vulnerabilities rated 9.1 and lower cover directory traversal, SQL injection, XSS, XXE, hardcoded credentials, and OS command injection across various corporate components. Administrators are advised to identify affected systems and prioritize installation of the critical patches first.
Zoom Patches Zoomsday Vulnerability Enabling Remote Code Execution in Meetings
Zoom has addressed four vulnerabilities that could allow attackers to compromise meeting participants, including flaws leading to remote code execution without any victim interaction. The most severe issue, CVE-2026-53413, rated 8.3 and nicknamed Zoomsday, resides in the annotation feature used for drawing, highlighting, or adding text during screen sharing. This component processes network data using fixed 128-byte buffers without proper size validation, enabling memory corruption that alters program execution flow. Researchers demonstrated the attack on macOS by silently launching Safari on the victim's machine. The flaws affect Zoom Workplace, Zoom Rooms, Meeting SDK, and VDI clients. Users must update to patched versions such as Workplace 7.1.5 or 7.0.6, and Zoom Rooms or Meeting SDK 7.1.5 to mitigate annotation-related risks. No active exploitation has been observed publicly, yet centralized enterprise deployments require priority updates since attacks can occur during live meetings.
Ransomware Groups Disable EDR, Backups and Windows Telemetry Before Encryption
Ransomware operators are increasingly focusing on disabling endpoint detection and response tools, backup systems, and Windows telemetry mechanisms prior to launching encryption. An analysis of the ten ransomware families with the lowest prevention rates in 2026 found that Play achieved only 13 percent of attacks blocked. BlackByte followed with 25 percent blocked and LockBit with 30 percent blocked. BabLock leverages a legitimate uninstaller to remove endpoint protection and terminates processes belonging to antivirus, EDR, backup, and database applications. It then clears the Security and System event logs to hinder incident response. LockBit 5.0 instead interferes with Event Tracing for Windows to reduce visibility for monitoring solutions. Additional families employ process injection, in-memory execution, registry modifications, file masquerading, and living-off-the-land binaries to evade detection.
Google Play Apps Hide Anatsa Banking Trojan Using Stealthy Loaders
Malicious applications distributed through Google Play are employing stealthy loaders to install the Anatsa banking trojan for Android, putting victims' financial accounts at risk. The campaign relies on seemingly legitimate programs to conceal the initial infection stage, with one identified case involving a modified PDF reader that displays a fake update prompt to trick users into installing an additional component. Another loader discovered in the Cleanova application collects data from analytics SDKs, including installation source details, and forwards this information to a command-and-control server. The server then decides whether to deliver the malicious payload based on predefined criteria, leaving the code inactive for non-targeted victims to evade automated analysis. Once Anatsa is installed, the threat can facilitate theft of credentials used for financial services and enable fraudulent transactions. Banking trojans represented 30.77 percent of detected malicious mobile applications in the second quarter of 2026, during which more than 1.99 million attacks involving malware, adware, or unwanted programs were blocked and 93,574 banking trojan installation packages were identified.
WordPress Patches High-Severity XSS2Shell Flaw Enabling Remote Code Execution (CVE-2026-64638)
WordPress has released a fix for a high-severity vulnerability in its core that can turn a malicious login attempt into remote PHP code execution on the server. The flaw, tracked as CVE-2026-64638 and rated 8.9 on CVSS, is named XSS2Shell and begins as a reflected cross-site scripting issue on the authentication screen. An unauthenticated attacker can submit a specially crafted username that bypasses sanitization mechanisms due to differences in how PHP and WordPress interpret certain characters, allowing controlled HTML elements to be injected into the login page. This leads to JavaScript execution in the site domain, and when an authenticated administrator visits a prepared page, the attacker can abuse the existing session to authorize application credentials and upload arbitrary PHP code. The patch is included in WordPress 7.0.3 released on August 6, with backports available for branches as old as 4.7. No public exploitation has been confirmed yet, but the technical details make immediate updating a priority for site administrators.
Google Releases Chrome 151 Fixing 41 Vulnerabilities Including Six Critical Flaws
Google has issued Chrome 151 to address 41 security vulnerabilities, six of which are rated critical and could lead to memory corruption, browser crashes, and remote code execution. The update covers Windows, macOS, and Linux platforms with versions 151.0.7922.108 and 151.0.7922.109. Two use-after-free flaws in the WebGL component, tracked as CVE-2026-19137 and CVE-2026-19170, allow continued memory access after deallocation. Additional critical issues affect the Aura, Skia, Views, and ANGLE components under CVE-2026-19149, CVE-2026-19154, CVE-2026-19172, and CVE-2026-19157. Google has withheld technical details and proof-of-concept code for several flaws to limit exploitation while the rollout completes. Users are advised to check for updates immediately through the browser's About section.
Cisco Patches Seven Critical IOS XE Vulnerabilities Including CVSS 9.8 Command Injection Flaw
Cisco has released security updates to address seven vulnerabilities in IOS XE, the operating system powering routers, switches, wireless controllers, and other enterprise network devices. The highest-severity issue, tracked as CVE-2026-20272 with a CVSS score of 9.8, stems from improper handling of special elements in commands and could enable remote command injection, unauthorized operations, and full device compromise over the network. Additional flaws impact memory management, resource lifecycle, numeric calculations, execution flow, and input validation, potentially leading to buffer overflows, out-of-bounds writes, crashes, infinite loops, and directory traversal. The vulnerabilities affect IOS XE versions 17.9, 17.12, 17.15, 17.18, and 26.1 in both standalone and controller modes regardless of configuration. Fixed releases include 17.9.10, 17.12.8, 17.15.6, 17.18.4, 17.18.4a, and 26.1.2, with no available workarounds. The issues were discovered during internal testing that incorporated advanced AI models, and no evidence of public exploitation has been observed.
AWS and Vercel Patch Critical Flaws in AI Agent Platforms Allowing Unauthorized Tool Execution
AWS and Vercel have addressed multiple critical vulnerabilities in their AI agent platforms that enabled unauthorized execution of tools without legitimate model approval. The issues, grouped under the CoreBreak pattern, allowed attackers to bypass AI authorization checks by injecting crafted tool calls that the infrastructure misinterpreted as model-approved actions. In AWS, CVE-2026-18830 affected the InvokeHarness API in Amazon Bedrock AgentCore, permitting authenticated users to trigger sensitive tools directly. Vercel faced two separate flaws tracked as CVE-2026-64650 and CVE-2026-64651 that let sandboxed code reach host system tools, potentially exposing secrets or cloud APIs. No public evidence of active exploitation has been confirmed yet. Organizations are advised to apply updates immediately, restrict available tools for agents, and treat all external inputs as potentially malicious.
Free Online Panel Examines Rising Omnichannel Scams and Multichannel Fraud Tactics
The Brazilian human risk management firm Eskive is hosting its third free online panel on August 18 at 11 a.m. to address the growing threat of omnichannel cyber fraud. Experts will discuss how attackers combine multiple channels such as email, SMS, and other vectors to create more convincing social-engineering narratives that bypass traditional single-channel defenses. The event will feature CEO Priscila Meyer as moderator along with cyber threat intelligence specialist Thiago Bordini and Santa Catarina Civil Police investigator Elias Edenis. Participants will gain practical insights from real client simulations, live Q&A sessions, and interactive quizzes designed to improve organizational preparedness. The panel aims to highlight why users accustomed to recognizing basic phishing or smishing attempts remain vulnerable when fraudsters deploy coordinated, multi-channel campaigns.
OpenAI Disables Coordinated ChatGPT Network Used for Financial Scams and Identity Forgery
OpenAI has deactivated a coordinated network of ChatGPT accounts that supported financial fraud, romance scams, and identity forgery operations. Criminals leveraged the AI to generate fake personas, translate conversations, and craft targeted messages aimed at victims across multiple schemes. The investigation originated from reports of suspicious activity observed on WhatsApp. Scammers used the tool to produce forged documents including stock confirmations, legal notices, passports, and fake financial interfaces to increase credibility. Operations typically began on social media or messaging apps, building emotional trust or urgency before requesting deposits, activation fees, or nonexistent fines. Indicators of possible human trafficking and forced labor were also uncovered through job advertisements and internal discussions about worker control in Poipet. OpenAI has blocked the accounts and shared operational indicators with law enforcement and technology companies.
Critical Django Vulnerability CVE-2026-15307 Enables Remote Code Execution via GDALRaster Spatial Queries
The Django project has released versions 6.0.8 and 5.2.17 to address four vulnerabilities that could result in arbitrary file writes, unauthorized requests, denial of service, and cross-site scripting attacks. The most severe issue, tracked as CVE-2026-15307, impacts spatial queries that process raster data through the GDALRaster interface. Attackers can supply specially crafted values that cause the Django process to write files or initiate external connections under its own permissions, potentially leading to remote code execution in certain configurations. Exploitation is also possible through the Django admin panel when a staff user has view permissions on models containing geographic fields. The patches have been backported to the 5.2 and 6.0 branches as well as the upcoming 6.1 release candidate. In addition to fixing the flaw, the updates alter query behavior to reject dictionaries and strings that do not represent valid geometries.
Microsoft Copilot Abused to Accelerate Corporate Account Takeovers and Bank Transfer Frauds
Cybercriminals can leverage Microsoft Copilot to speed up the compromise of corporate accounts and execute financial frauds. In a controlled simulation, researchers demonstrated how the AI assistant helped redirect a $247,500 bank transfer after gaining access to an employee's email. The attack begins with the creation of inbox rules that automatically delete suspicious login alerts, followed by rapid analysis of internal communications to identify high-value targets. Copilot was then used to replicate the victim's writing style and craft a convincing phishing email capable of stealing session tokens and bypassing multi-factor authentication. Once the executive account was taken over, the tool quickly located pending payments and generated a fraudulent request to alter the recipient bank details. The scenario highlights risks from legitimate AI features rather than any specific vulnerability in Copilot itself.
DarkSword Exploit Kit Expands to 180 Sites Targeting iPhone Users with Zero-Click Chain
The DarkSword exploit kit has scaled its infrastructure to 180 web properties hosted on 27 servers, enabling zero-click compromise of iPhones running vulnerable iOS versions. Attackers deploy fake pages impersonating Apple, AWS, and other popular services to trigger a six-vulnerability exploit chain that achieves remote code execution, sandbox escape, and privilege escalation on iOS 18.4 through 18.7. Once the device is compromised, GHOSTBLADE components extract data from the Keychain, iCloud files, Wi-Fi passwords, and other stored content before exfiltrating it to attacker-controlled panels. The malware deletes crash reports and forensic logs to hinder analysis and does not establish traditional persistence, limiting the window of data theft to a single visit. Infrastructure rotates rapidly, with five of seven administrative panels observed on July 30, 2026, having appeared only a week earlier, indicating frequent domain and host replacement to evade blocking.
Web Application Vulnerabilities Surge as Rapid Development Outpaces Security Reviews
The number of vulnerabilities in web applications continues to rise each quarter with no signs of slowing. Frequent releases, lean teams, and pressure for speed are pushing systems into production with flaws that should have been caught earlier. Vibe Coding is accelerating the problem by enabling anyone to launch applications in days and push dozens of updates daily without integrating cybersecurity into the process. Most new software reaches production without any security review, and attackers are already exploiting the common weaknesses these applications share. Companies face data leaks, service disruptions, and customer exposure from issues that a single test could have identified. The recommended response is AI-driven pentesting that simulates real attacker behavior instead of relying on known patterns. Launching web applications without security testing is becoming an increasingly expensive decision as incident costs far exceed preventive measures.
Critical Stack Buffer Overflow in TP-Link TL-WR940N Enables Remote Code Execution
A high-severity vulnerability tracked as CVE-2026-12935 with a CVSS score of 8.7 affects the TP-Link TL-WR940N router on hardware version V6. The flaw resides in the RTSP connection tracking module responsible for managing audio and video streaming sessions over the network. It is caused by a stack-based buffer overflow that allows oversized data to corrupt kernel memory, potentially leading to device crashes or full remote code execution. No administrative credentials are required for exploitation, though the attack depends on an RTSP connection initiated by a device already present on the local network. Successful compromise grants attackers the ability to alter router settings, modify DNS servers, intercept traffic, redirect users to malicious sites, and pivot to other connected devices. Users are advised to verify the hardware revision on the device label and apply the region-specific firmware update released by TP-Link.
Octagon Android RAT Poses as Bahrain Emergency Alert App to Steal Credentials and Establish Persistent Surveillance
A remote access trojan named Octagon targets Android devices by masquerading as the official emergency alerts application from Bahrain. The infection begins when victims download the BH-Alert.apk file from phishing websites. The malware guides users through seven steps to grant dangerous permissions while using encrypted code hidden inside a font file extension to evade static analysis. It installs a secondary component called OctagonPanel and deploys mutual-monitoring surveillance services that restart each other if terminated. Additional persistence is achieved through boot receivers, a fake Android account, and scheduled synchronization tasks every 30 minutes. The trojan abuses the Accessibility Service to record unlock patterns, PINs, and passwords while also harvesting SMS messages, contacts, call logs, and screenshots. A criminal-controlled VPN allows interception and redirection of victim traffic.
SplitVPN Data Breach Exposes Personal Information of 865,000 Users
A data breach at the Russian VPN provider SplitVPN, formerly known as NotVPN, has exposed the personal details of approximately 865,000 users. The incident, which occurred in July 2026, involved a 17 GB SQL database containing emails, IP addresses, geolocation data, and partial payment card information. The stolen material was later distributed on a cybercrime forum, revealing 23.4 million user records, 13.6 million devices, and 2.6 million payment entries. Nearly 58 million connection logs spanning June 2025 to 21 July 2026 were also included, contradicting the company’s previous no-logs policy. The exposure is particularly concerning for users relying on the service to evade censorship and surveillance.
Supply Chain Attack Targets Arch Linux Community Repository
Arch Linux has temporarily suspended package adoptions in the Arch User Repository after detecting accounts taking over abandoned projects to insert malicious code. The platform later expanded the restriction by blocking all new submissions to the AUR to contain ongoing supply chain attacks. Attackers were adopting packages without active maintainers and introducing harmful changes through subsequent commits that could bypass user scrutiny due to established project history. Newly created packages containing malicious build commands, including requests for elevated privileges, were also discovered. Affected accounts have been banned and identified projects removed from the repository. The incident does not impact official Arch Linux repositories, with risk limited to community-maintained AUR packages that require manual review of PKGBUILD files before installation or updates.
Critical CosmosEscape Flaw Breaks Customer Isolation in Azure Cosmos DB
A critical vulnerability named CosmosEscape allowed attackers to escape the restricted Gremlin API environment and execute arbitrary code on the DB Gateway component of Azure Cosmos DB. The flaw exploited weaknesses in .NET reflection protections, enabling file read/write operations and command execution that ultimately yielded the Cosmos Master Key. With this global signing key, an attacker could retrieve the primary key for any customer account and gain full read/write access. The exploit also exposed the Config Store containing account names, subscription identifiers, tenant details, and network rules. Even network-isolated and private instances remained vulnerable because the DB Gateway itself enforced those restrictions. Internal Microsoft services including Entra ID, Teams, and Copilot rely on Cosmos DB, amplifying the potential impact of the issue.
Cordial Spider Deploys Work Panel Platform for Tech Support Scams Against Corporate Identities
A criminal platform called Work Panel is turning fake technical support calls into structured operations aimed at taking over corporate accounts. The service combines target research, page cloning, telephony, and credential capture within a single control panel. It is linked to the group tracked as O-UNC-045, also known as Cordial Spider. Campaigns target users of multiple identity providers and combine telephone social engineering with fake authentication pages. Operators research names, job titles, corporate emails, phone numbers, and professional profiles before calling to impersonate help-desk staff. While one operator keeps the victim on the line, a manager monitors the phishing session in real time. Captured credentials are sent only to operation managers via Telegram, reducing internal theft risks among the criminals themselves.
AI-Powered Pentests Deliver Full Attack Chains Unlike Basic Vulnerability Scans
A new generation of AI-driven offensive testing tools is emerging that goes far beyond traditional vulnerability scanners. These AI agents perform reconnaissance, enumeration, business logic analysis, exploitation, and validation in a continuous adaptive loop. The result is not a long list of unconfirmed findings but validated vulnerabilities accompanied by technical descriptions, business impact, risk ratings, and working proof-of-concept evidence. True AI pentesting requires specialized agent architectures, memory, planning modules, and proprietary offensive tooling rather than generic prompts connected to existing scanners. In Brazil, HackerSec has built such a system with its Yaga agent, while XBOW and Aikido Security are recognized internationally. The technology is positioned to complement and eventually transform manual penetration testing practices.
Broadcom Patches Five Critical VMware Vulnerabilities Including CVSS 9.8 Authentication Bypass
Broadcom has released fixes for five vulnerabilities across multiple VMware products that could enable authentication bypass, remote code execution, and virtual machine escapes. The most severe issue, CVE-2026-59309 with a CVSS score of 9.8, resides in the VMware Directory Service component of vCenter and allows an attacker with network access to bypass authentication entirely. Successful compromise of vCenter grants control over hosts, virtual machines, networks, and storage, posing severe risks to enterprise environments. A second critical flaw, CVE-2026-47876, affects the VMXNET3 virtual adapter in ESX and permits an attacker with administrative privileges inside a guest VM to perform an out-of-bounds write and execute code on the hypervisor host. Additional patches address an unauthorized memory read in ESX, Workstation, and Fusion, along with insufficient logging that could conceal administrative actions. No workarounds exist, and administrators must apply the specified updates to vCenter, ESX, Cloud Foundation, Workstation, and Fusion.
Firefox JIT Vulnerability Exposes Tor Browser Users to Remote Code Execution
A high-severity flaw in Firefox's SpiderMonkey JavaScript engine allows remote code execution simply by visiting a malicious page, directly impacting Tor Browser users on unpatched versions. Registered as CVE-2026-10702, the vulnerability stems from incorrect memory handling in the JIT compiler that leaves a dangling reference to freed memory, enabling arbitrary read and write primitives. Researchers demonstrated successful exploitation that can compromise the browser's content rendering process and facilitate user deanonymization or OS-level attacks. The same issue served as the initial stage in the IonStack exploit chain against ARM64 Android devices, where it was chained with CVE-2026-43499 in the Linux kernel to achieve root privileges. Mozilla addressed the issue in Firefox 151.0.3, and the Tor Project rolled out corresponding fixes in Tor Browser 15.0.19, which also incorporates the latest Firefox ESR updates.
Tengu Botnet Modernizes Mirai with 25 DDoS Methods and Advanced Persistence on IoT and Embedded Linux
A new botnet named Tengu has emerged, targeting Internet of Things devices and embedded Linux systems to conduct denial-of-service attacks, redirect traffic, and maintain persistent access. The malware represents an updated evolution of the Mirai botnet and begins its infection chain through brute-force attacks against exposed Telnet services. Once valid credentials are obtained, it downloads an architecture-specific payload and establishes partially encrypted communication with its command-and-control server. Operators can issue commands to collect system and network information, update the implant, and convert compromised devices into SOCKS5 proxies. The botnet includes 25 distinct DDoS attack methods covering UDP, TCP, and ICMP floods while also targeting services such as HTTP, DNS, NTP, SSH, SMTP, FTP, SIP, Minecraft, and servers running Source Engine or Quake protocols. Its key differentiators lie in robust persistence and self-protection mechanisms, including a secondary watchdog process that restarts the malware every 60 seconds if terminated, fake systemd services, manipulated device watchdogs, and the ability to remove competing malware.
Cybercriminals Hide Malware in Fake Claude Code Installation Command Targeting macOS Developers
Cybercriminals are distributing the MacSync infostealer by embedding malicious commands in fake installation tutorials for Claude Code. The campaign relies on sponsored search ads and counterfeit documentation pages that appear when developers look up official setup instructions. Victims are instructed to paste an obfuscated command into the macOS Terminal that uses Base64 encoding to conceal the download server and disables certificate validation. Once executed, the command retrieves MacSync, which steals passwords, session cookies, SSH keys, cloud credentials, and developer configuration files. Stolen tokens can bypass multi-factor authentication and grant attackers direct access to accounts and repositories. Security experts advise installing Claude Code exclusively through official channels and immediately isolating any compromised Mac while revoking all sessions and rotating credentials from a trusted device.
Iranian Hackers Disable Safety Alarms in US Industrial Control Systems
Iranian threat actors have been compromising internet-exposed industrial controllers across the United States since at least March 2026, modifying alarm and safety shutdown logic in critical infrastructure. The campaign has targeted government organizations and operators in the water, wastewater, and energy sectors, resulting in operational disruptions and financial losses. Attackers focus on devices with insecure remote access, weak credentials, or default configurations rather than exploiting zero-day vulnerabilities. Targeted hardware includes Rockwell CompactLogix and Micro850 controllers, Schneider BMX P34 and Modicon M340 PLCs, and Siemens S7-1200 models. Operators use rented foreign infrastructure and legitimate programming software to download, alter, and re-upload control logic projects. In at least one case, malicious code maintained normal operations while introducing instructions that bypassed safe operational limits and altered data displayed on HMI and SCADA interfaces. The tactics closely resemble prior activity attributed to the CyberAv3ngers group linked to Iran’s Islamic Revolutionary Guard Corps, though direct attribution remains unconfirmed.
AgentForger Vulnerability in ChatGPT Workspace Agents Enabled Malicious AI Deployment via Single Phishing Link
A vulnerability in ChatGPT Workspace Agents allowed attackers to create and deploy a malicious AI agent inside an organization from a single phishing link. Named AgentForger, the flaw was fixed by OpenAI on June 8, 2026. The attack exploited a permissive parameter in the Agent Builder that accepted instructions directly through the URL. An authenticated user opening the prepared link would trigger automatic execution of the command without additional confirmation. The victim required access to Workspace Agents and at least one pre-authorized enterprise connector such as Outlook, Gmail, Google Drive, Slack, Teams, or Google Calendar. The malicious prompt instructed the platform to create an agent, connect available applications, disable approval requests, publish the component, and schedule it for recurring operation. In the demonstration, the agent monitored emails from the attacker with subjects starting with “TASK” and executed the contained instructions while returning results to the attacker-controlled address.
Cl0p Exploits Critical Windchill Vulnerability CVE-2026-12569 to Steal Industrial Designs
The Cl0p extortion group is actively targeting internet-exposed PTC Windchill and FlexPLM servers to exfiltrate engineering projects, technical specifications, and other sensitive data. The campaign focuses on organizations in the industrial, automotive, aerospace, defense, and retail sectors. Attackers leverage the critical remote code execution vulnerability CVE-2026-12569, which stems from unsafe deserialization and carries a CVSS score of 9.8, allowing unauthenticated exploitation over the network. The intrusion chain also combines a WSDL endpoint information disclosure in FlexPLM with a login mechanism weakness in Windchill to gain initial access and execute commands without valid credentials. After compromise, operators deploy JSP web shells to maintain persistence, explore files, and prepare data for exfiltration. Affected systems often contain unreleased product designs, engineering drawings, and strategic manufacturing documents. The activity began in early June 2026, with extortion emails sent to hundreds of employees starting July 20 to increase internal pressure ahead of potential data leaks.
Critical Vulnerabilities in JetBrains IntelliJ IDEA and TeamCity Enable Remote Code Execution
JetBrains has addressed multiple critical vulnerabilities in its IntelliJ IDEA and TeamCity products that could allow remote code execution, unauthorized file access, and sandbox escapes. The flaws affect remote development environments and require immediate patching, especially in shared setups. In IntelliJ IDEA, CVE-2026-59792 involves directory traversal during workspace identifier processing and carries a CVSS score of up to 9.8. TeamCity received fixes for several issues, including malicious Git repository configurations that enable code execution and a Kotlin DSL sandbox escape. Additional patches cover arbitrary file access through Perforce integration and a persistent cross-site scripting flaw on cloud profile pages. Administrators are urged to update IntelliJ IDEA to versions 2026.1.4 or 2026.2 and TeamCity to 2026.1.2 or 2025.11.6 depending on the release line in use.
Chaos Ransomware Group Uses msaRAT Trojan to Hide C2 Traffic Through Invisible Chrome and Edge Browsers
The Chaos ransomware group has adopted a new Rust-based trojan called msaRAT to conceal its command-and-control communications inside legitimate browser sessions. The malware launches Chrome or Edge in invisible mode and controls it via the Chrome DevTools Protocol, keeping all outbound traffic restricted to localhost. It then injects JavaScript to negotiate a WebRTC connection through Cloudflare Workers before routing data over Twilio TURN servers, preventing the attackers' real infrastructure from appearing in network logs. Commands are executed through cmd.exe, and the implant includes queuing mechanisms that support reliable transfer of files, screenshots, and larger data volumes. In the analyzed incident, operators delivered the malware via an MSI installer disguised as a Windows update that loaded the msaRAT DLL directly into memory. The technique does not exploit any vulnerabilities in Chrome or Edge and is designed to blend malicious traffic with normal corporate browser activity.
Check Point Issues Urgent Fixes for Critical Exploited SmartConsole Vulnerability CVE-2026-16232
Check Point has released emergency patches for a critical vulnerability in the SmartConsole login process that is already being actively exploited in real-world attacks. The flaw, tracked as CVE-2026-16232 with a CVSS score of 9.3, allows unauthenticated remote attackers to obtain valid access tokens and gain full administrative privileges over the management environment. Exploitation requires the management server to be directly exposed to the internet without IP address restrictions for trusted clients. The company has confirmed attacks against a small number of customers and notified those affected. The update also addresses two additional vulnerabilities, CVE-2026-62144 and CVE-2026-62145, and is delivered through the Jumbo Hotfix package released on July 22, 2026.
HackerSec Launches AI-Native Pentest Platform with Yaga Agent for Automated Offensive Testing
HackerSec has released a major update to its pentest platform introducing an AI-Native model where the Yaga agent handles full execution of offensive tests including reconnaissance, enumeration, exploitation, impact confirmation, and evidence production. Human experts only monitor operations and validate vulnerabilities while the AI maintains context, adapts strategies, and explores multiple attack paths until confirming exploitability. The platform addresses the growing use of AI by cybercriminals for scaled attacks and the expanding attack surface from rapid AI-driven development in enterprises. At its core, Yaga uses a proprietary harness coordinating multiple tools, playbooks, analysis stages, and AI models instead of relying on a single model. Benchmark results from YagaBench show the production configuration solving 91.2% of black box, 94.6% of gray box, and 93.5% of white box scenarios. CEO Andrew Martinez stated the goal of reaching over 98% effectiveness in all AI-Native pentests by year end. The approach enables more frequent testing with broader coverage and reduced time to identify vulnerabilities.
ASUS Releases Security Updates to Fix Critical CVE-2026-13385 Router Vulnerability with CVSS Score 9.5
ASUS has issued security updates to address a critical vulnerability identified as CVE-2026-13385 that affects multiple router firmware versions and could allow remote command execution. The flaw impacts devices running firmware versions 3.0.0.4_386, 3.0.0.4_388, and 3.0.0.6_102 across various home and small business router lines. It stems from inadequate validation of digital certificates and file integrity mechanisms, preventing proper authentication of servers or received content. Exploitation requires a man-in-the-middle attack condition on compromised networks or manipulated connections but does not need administrative credentials or user interaction. Users are advised to install the latest firmware for their specific models, disable unnecessary administrative features, and review any unauthorized configuration changes. The advisory emphasizes the high severity of the issue given its 9.5 CVSS score and broad device coverage.
Vulnerability in Adobe Acrobat Chrome Extension Allowed Theft of WhatsApp Web Conversations
A flaw in the Adobe Acrobat extension for Chrome enabled malicious websites to steal active WhatsApp Web conversations, contacts, and profile information without requiring any user interaction beyond visiting a prepared URL. The vulnerability, tracked as CVE-2026-48294 and named HermeticReader, carried a CVSS score of 7.4 and affected approximately 329 million installations across all versions up to 26.5.2.2. Attackers exploited internal extension pages and missing origin validation to modify local storage, activate the Hermes integration mechanism, and extract rendered chat content by predicting tab identifiers and sending commands to the Acrobat component. The stolen data included contact names, conversation lists, message previews, profile details, and the full text of open chats, all transmitted to attacker servers via hidden forms while leaving end-to-end encryption intact. Adobe addressed the issue in version 26.5.2.3, which was automatically pushed through the Chrome Web Store. No evidence of in-the-wild exploitation had surfaced prior to public disclosure.
Cybercriminals Exploit Critical SharePoint Vulnerability CVE-2025-53770 for Remote Code Execution
A critical unauthenticated remote code execution flaw in Microsoft SharePoint Server, tracked as CVE-2025-53770 with a CVSS score of 9.8, is being actively exploited in the wild. The vulnerability stems from unsafe deserialization of data sent to on-premises servers and forms part of the ToolShell attack chain alongside CVE-2025-49704 and CVE-2025-49706. Attackers can execute arbitrary commands, install web shells, and steal ASP.NET cryptographic keys to forge authentication tokens and maintain persistence even after patching. The flaw affects SharePoint Server 2016, SharePoint Server 2019, and SharePoint Server Subscription Edition, while SharePoint Online in Microsoft 365 remains unaffected. Two related variants, CVE-2025-53770 and CVE-2025-53771, were developed to bypass earlier mitigations. Administrators are urged to apply all available patches immediately, restrict internet exposure of SharePoint, and hunt for suspicious files, processes, and scheduled tasks.
Qilin Ransomware Operators Exploit Palo Alto PAN-OS VPN Flaw CVE-2026-0257
Operators linked to the Qilin ransomware group have been actively exploiting an authentication bypass vulnerability in Palo Alto Networks PAN-OS to gain initial access to corporate networks. The attacks, observed in June 2026, targeted the GlobalProtect VPN service running on Palo Alto firewalls and were tracked under CVE-2026-0257. Attackers used specially crafted authentication cookies to establish unauthorized VPN sessions, after which they harvested credentials from Windows LSASS processes and Active Directory NTDS databases. Lateral movement relied heavily on PsExec and administrative shares, supplemented by tools such as AnyDesk, Ngrok, LogMeIn, and NetExec. Before deploying the ransomware binary stored as win.exe in C:\PerfLogs\, the threat actors disabled Microsoft Defender real-time protection and cleared event logs. The vulnerability affects PAN-OS versions 10.2, 11.1, 11.2, and 12.1 as well as certain Prisma Access editions, while Panorama and Cloud NGFW remain unaffected.
EU Forces Google to Open Android Microphone, Camera and Screen Access for Rival AI Assistants
The European Union has ordered Google to provide competing AI assistants with the same level of access to sensitive Android resources that is currently reserved for Gemini. The ruling covers eleven system functions, including voice activation, home button integration, background execution, and on-device AI model access. Rival assistants will also gain real-time environmental data streams from the microphone, camera, screen, and speakers under identical consent and notification rules applied to Google services. Additional capabilities include cross-app interaction, messaging, scheduling, device settings control, and multi-step task automation. Screen automation will allow assistants to operate apps inside a virtual window while the user performs other activities. Most changes are scheduled for Android 18 by 1 August 2027, while simultaneous activation of multiple assistants by voice keyword will arrive in Android 19 no later than 1 August 2028. Access to the most sensitive functions may require objective security certification and explicit user authorization.
HollowGraph Malware Abuses Microsoft 365 Calendars to Conceal Stolen Files and C2 Traffic
A newly discovered espionage malware called HollowGraph turns compromised Microsoft 365 calendars into hidden channels for receiving commands and exfiltrating stolen data. The implant schedules events for 13 May 2050, a distant future date chosen to reduce the likelihood of discovery by account owners. Developed as a Windows DLL, HollowGraph leverages the Microsoft Graph API to blend its traffic with legitimate corporate service activity, eliminating the need to contact attacker-controlled servers directly. It supports two primary commands: “get” to retrieve instructions attached to operator-created appointments and “send” to encrypt collected data with RSA and AES-256-GCM before uploading it as calendar attachments. Separate encryption keys are used for inbound commands and outbound data, while stolen files are written to a disguised logAzure.txt file. Researchers have identified at least 12 compromised systems, three of which remained active, with operations observed between 3 June and 9 July 2026 and primarily targeting Israeli entities.
Ransomware Attack Hits Coca-Cola Subsidiary Fairlife, Temporarily Halting US Production Systems
Fairlife, a company owned by Coca-Cola, temporarily suspended production operations in the United States after detecting unauthorized access to parts of its systems in a ransomware incident. The breach, publicly disclosed by Coca-Cola on July 16, 2026, affected environments directly linked to industrial production, prompting an immediate shutdown while investigations and recovery efforts continue. Fairlife manufactures milk, protein beverages, and other dairy products sold across the North American market, making the incident potentially disruptive to product availability, logistics, and internal processes. The company activated its incident response and business continuity protocols and engaged external cybersecurity specialists and consultants to assist with containment, investigation, and system restoration. No information has yet been released regarding data exfiltration, file encryption, or ransom demands, and the full scope of the attack remains under assessment. Coca-Cola has notified law enforcement authorities about the incident, while operations at Fairlife facilities in Canada were confirmed to be unaffected.
OpenSSL Patches HollowByte Vulnerability That Enables Denial-of-Service Attacks on TLS Connections with Just 11 Bytes
OpenSSL has released fixes for a vulnerability dubbed HollowByte that allows denial-of-service attacks against servers using unpatched versions of the library. The flaw can be triggered by a malicious TLS request as small as 11 bytes and was addressed without a CVE or formal security advisory because it was classified as a hardening improvement. Researchers from Okta warn that the operational impact can be significant on internet-facing servers, as the issue occurs during the initial TLS handshake when vulnerable OpenSSL versions reserve memory based on the client-declared size before verifying actual data delivery. Attackers can open connections, claim they will send a large message, and then deliver only a tiny portion, leaving the server waiting indefinitely with reserved memory. In tests with NGINX, low-memory servers could be completely taken down while more powerful machines suffered substantial capacity loss without triggering abnormal traffic volumes. The patches are included in OpenSSL versions 4.0.1, 3.6.3, 3.5.7, 3.4.6, and 3.0.21, and administrators are advised to update packages, restart affected services, and monitor for unusual memory growth.
Zero-Day Vulnerability CVE-2026-15682 in AnyDesk Enables Denial-of-Service Attacks on Affected Systems
A newly disclosed zero-day vulnerability in AnyDesk, tracked as CVE-2026-15682, allows attackers to trigger denial-of-service conditions on systems running the popular remote access tool. The flaw centers on a support information transmission feature that can be abused through Windows file system redirection mechanisms. An attacker with limited local access can manipulate these redirections to crash either the AnyDesk application or the underlying operating system. Because AnyDesk is widely deployed by support teams, managed service providers, and internal IT departments, the vulnerability poses a significant risk to remote assistance workflows and incident response operations. Until an official patch is released, organizations are advised to restrict code execution privileges, monitor for anomalous file system redirection activity, and apply updates as soon as they become available.
Cybercriminals Actively Exploiting Critical Zero-Day Vulnerabilities in SonicWall SMA1000 Appliances
Cybercriminals are actively exploiting a critical zero-day vulnerability in SonicWall SMA1000 appliances used for corporate remote access. The attack chain combines two flaws that together enable unauthenticated access to internal services and local privilege escalation, ultimately allowing remote code execution with maximum privileges on affected devices. The most severe issue, CVE-2026-15409, carries a maximum CVSS score of 10.0 and permits attackers to reach internal appliance services without authentication, while CVE-2026-15410 facilitates local privilege escalation. Impacted models include the SMA1000 Series 6210, 7210, and 8200v running firmware versions 12.4.3-03434 and 12.5.0-02800. SonicWall has confirmed that its SSL VPN firewalls and the SMA 100 product line remain unaffected. Compromised appliances have already been observed serving as stealthy entry points into corporate networks, where attackers harvested credentials, session data, and multi-factor authentication seeds before pivoting into Active Directory environments. Administrators are urged to apply the emergency patches that upgrade devices to firmware versions 12.4.3-03453, 12.5.0-02835, or later.