Published: August 21, 2026 | Author: DigitalSpying Security Team | Category: Cloud Security / Identity & Access Management / Zero-Day Vulnerabilitie
s
On August 20, 2026, Microsoft issued an urgent security bulletin disclosing an actively exploited, maximu...
Cloud Identity Breach Risk: Microsoft Discloses Max-Severity 10/10 Entra ID Deserialization Flaw (CVE-2026-69836)
Microsoft has officially disclosed and mitigated a maximum-severity remote code execution (RCE) vulnerability in Microsoft Entra ID (formerly Azure A...
On August 18, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-55040 to its Known Exploited Vulnerabilities (KEV) catalog, ordering all Federal Civilian Executive Branch (FCEB) agencies to apply patches immediately following active in-the...
Oracle has published its August 2026 Critical Security Patch Update (CSPU), delivering a staggering 943 new security patches that address more than 1,000 unique Common Vulnerabilities and Exposures (CVEs) across its enterprise software portfolio. Marking one of the larg...
Healthcare Cloud Breach Escalation: CareCloud Electronic Health Record Breach Expands to 3.7 Million Patients
Electronic health record (EHR) and practice management software provider CareCloud Inc. confirmed on August 19–20, 2026, that a major cloud security brea...
A joint cybersecurity advisory (Advisory AA26-231A) issued on August 19, 2026, by the Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), Federal Bureau of Investigation (FBI), Department of Energy (DOE), and Environmental Protection...
Payment Protocol Flaw Disclosed: "Zombie Card" Attack Loophole Lets Expired Contactless Credit Cards Make Unauthorized Purchases (USENIX Security 2026)
Computer science researchers from the University of Massachusetts Amherst unveiled a fundamental cryptographic ...
Cisco has released emergency security advisories warning of active, in-the-wild exploitation targeting a high-severity denial-of-service (DoS) vulnerability in Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Software. Tra...
Perimeter Threat: Critical Citrix NetScaler Authentication Bypass CVE-2026-19490 Exposes Corporate DMZs
On August 19–20, 2026, Cloud Software Group (Citrix) published an urgent security bulletin addressing a critical vulnerability affecting NetScaler ADC (formerl...
Build-Time Infiltration: How Attackers Weaponized Rust Crates with 245M Downloads to Deploy Second-Stage Backdoors
On August 20, 2026, the Rust programming language ecosystem experienced a major supply-chain security incident after an unauthorized threat actor co...
A critical-severity code injection vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE), tracked as CVE-2026-19478 with a CVSS v3 score of 9.4, has come under active, automated exploitation in the wild. Disclosed and patched by GitLab on August 17,...
A critical Server-Side Request Forgery (SSRF) vulnerability in MLflow (CVE-2026-64849, CVSS 9.3) has been added to CISA's Known Exploited Vulnerabilities (KEV) catalog following widespread in-the-wild exploitation. MLflow, a ubiquitous open-source platform for managing ...