A critical Server-Side Request Forgery (SSRF) vulnerability in MLflow, tracked as CVE-2026-64849 with a CVSS score of 9.3, is currently being actively exploited in the wild to target cloud-hosted machine learning infrastructure. Disclosed on August 17–18, 2026, the vuln...
On August 17–19, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-62593 (CVSS 9.4, Critical) to its Known Exploited Vulnerabilities (KEV) catalog, mandating immediate remediation for federal agencies and enterprise AI teams. CVE-2025...
Author: Vulnerability Research & Threat Intelligence Team | digitalspying.com
Published: August 19, 2026
Category: AI Security / Vulnerability Research / Federal Directives / Cloud Compute
On August 18, 2026, the Cybersecurity and Infrastructure Sec...
AI Security Critical Vulnerability: "CoSnitch" Flaws in Microsoft Copilot Personal Enable One-Click Data Exfiltration (CVE-2026-24301)
Security researchers at Varonis Threat Labs publicly disclosed "CoSnitch" (CVE-2026-24301, CVSS 8.8) on August 18–19, 2026—a cri...
CISA Adds Critical MLflow SSRF Vulnerability (CVE-2026-64849) to Known Exploited Vulnerabilities Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Server-Side Request Forgery (SSRF) vulnerability affecting the open-sour...
On August 18–19, 2026, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent directive adding four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog. The most severe flaws under active nation-state and cybercrimina...
Consumer Financial Data Breach: Heights Finance Data Breach Exposes Records of Over 1.2 Million Loan Borrowers
Consumer installment lender Heights Finance Holdings Co. filed formal data breach notifications with state regulators on August 18, 2026, disclosing a m...
On August 19, 2026, threat researchers at Check Point Research published an extensive investigation into StopAndProtect, a sprawling, multi-layered cybercrime campaign that has co-opted nearly 2,000 compromised WordPress websites across the globe. Rather than relying on...
Government Infrastructure Breach: 678,000 Impacted by French Tax Authority DGFiP Data Breach
France's national tax administration, the Directorate General of Public Finances (Direction Générale des Finances Publiques - DGFiP), officially confirmed a major cyberse...
Heights Finance Data Breach Exposes Personal and Financial Data of 1.2 Million Customers
Consumer lending institution Heights Finance Holdings Co. has filed regulatory data breach notifications confirming that unauthorized actors compromised a third-party cloud s...
One-Click Data Exfiltration: Flaws in Microsoft Copilot Personal Enable Silent Personal Data Theft
Security researchers from Varonis Threat Labs have disclosed three security vulnerabilities in Microsoft Copilot Personal (The Hacker News). The vulnerability chain...
Author: Threat Intelligence & Malware Analysis Unit | digitalspying.com
Published: August 18, 2026
Category: Threat Intelligence / Zero-Day Exploits / Advanced Persistent Threats (APT) / Kernel Security
Recent threat intelligence reports from Check ...