Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client

August 12, 2026 at 12:38AM Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, a…

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands

August 12, 2026 at 12:06AM The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engine…

Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks

August 11, 2026 at 02:46PM Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attac…

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

August 11, 2026 at 12:25PM Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat a…

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

August 11, 2026 at 11:18AM Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor B…

China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

August 10, 2026 at 10:08PM Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has dep…

TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore

August 10, 2026 at 05:03PM The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf…

Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

August 10, 2026 at 01:08PM Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension na…

OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause

August 10, 2026 at 11:20AM OpenAI has announced that it's pausing some "internal activities" involving its upcoming…

Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts

August 8, 2026 at 12:22PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity se…

UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data

August 7, 2026 at 11:46PM A recent wave of cyber attacks targeting financial services, private equity, and professional services …

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

August 7, 2026 at 01:48PM A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI …