An urgent joint alert from the Dutch National Cyber Security Centre (NCSC-NL) and security researchers confirms that a recently patched vulnerability in Apple's built-in macOS Screen Sharing service—tracked as CVE-2026-65400—is under active, widespread exploitation in t...
The Pokémon Company International's official merchandise storefront, Pokémon Center, has issued formal breach notification letters to customers in the United Kingdom and Germany confirming that sensitive personal information was compromised in a major third-party cybera...
Date: August 18, 2026
Author: DigitalSpying Threat Research Team
Category: AI Security / Application Security / Vulnerability Research
Security researchers at Varonis Threat Labs have disclosed a suite of three critical vulnerabilities affecting Mic...
Date: August 18, 2026
Author: DigitalSpying Threat Research Team
Category: AI Security / Cloud Security / Threat Intelligence
A critical Server-Side Request Forgery (SSRF) vulnerability affecting MLflow—the industry-standard open-source machine lear...
GitLab has rolled out emergency security releases for GitLab Community Edition (CE) and Enterprise Edition (EE) to remediate a critical vulnerability—tracked as CVE-2026-19478 with a CVSS v3.1 score of 9.4. The vulnerability represents an unauthenticated code injection ...
Author: Cybersecurity Threat Research Team | digitalspying.com
Published: August 18, 2026
Category: Web Application Security / API Vulnerabilities / DevSecOps
On August 17–18, 2026, GitLab rolled out an emergency out-of-band security update addressi...
Critical DevOps Vulnerability: GitLab Emergency Patch Fixes Max-Severity GraphQL Directive Flaw (CVE-2026-19478)
GitLab issued an urgent, out-of-band security release on August 17–18, 2026, addressing a critical vulnerability affecting its Community Edition (CE) ...
Critical GitLab GraphQL Vulnerability (CVE-2026-64696, CVSS 9.9) Allows Unauthenticated Project Deletion
GitLab has released critical emergency security updates addressing a maximum-severity vulnerability in its GraphQL API schema, tracked as CVE-2026-64696 with ...
Date: August 18, 2026
Author: DigitalSpying Threat Research Team
Category: Zero-Day Vulnerability / Endpoint Security / Threat Intelligence
In a dramatic escalation of the ongoing vulnerability disclosure feud between independent security researcher...
Author: Vulnerability Research & Exploit Analysis Group | digitalspying.com
Published: August 18, 2026
Category: Zero-Day Vulnerabilities / EDR Security / Windows Kernel / Reverse Engineering
On August 17, 2026, Microsoft officially confirmed that i...
Pokémon Center Customer Records Exposed in CEVA Logistics Cyberattack
The official Pokémon Center e-commerce store began issuing urgent data breach notifications to customers across the United Kingdom and Germany on August 17–18, 2026, confirming that customer pe...
Unauthenticated Arbitrary File Upload in Forminator Plugin (CVE-2026-15748) Exposes 600,000+ WordPress Sites to RCE
A critical security vulnerability tracked as CVE-2026-15748 (CVSS v3.1 base score: 9.8) has been disclosed in Forminator Forms, a popular WordPress...