Critical Geospatial Threat: Unpatched GeoServer Zero-Day in jsonArrayContains Filter Under Active Attack
A critical zero-day vulnerability in GeoServer—the leading open-source geospatial data server used globally to publish, share, and edit spatial data—is curren...
A critical zero-day vulnerability in the Windows Ancillary Function Driver for WinSock (afd.sys), identified as CVE-2026-68820 (CVSS 7.0), has been weaponized by the North Korean state-sponsored threat actor known as the Lazarus Group. This exploitation campaign was act...
During the August 2026 security release cycle, Microsoft addressed over 420 vulnerabilities across its enterprise ecosystem, headlined by the urgent patching of CVE-2026-68820—a critical, actively exploited zero-day vulnerability residing within the Windows Ancillary Fu...
In a coordinated international law enforcement initiative, six government security agencies—the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Recovery Administration (FBI), the National Security Agency (NSA), the U.S. Secret Service, the Departmen...
Massive Healthcare Cyberattack: MyDr Platform Breach Exposes Medical Data of 19 Million Polish Citizens
Poland's healthcare sector has been struck by one of the largest medical data breaches in European history. MyDr (Medical Doctor), Poland's nationwide platform...
Nation-State Espionage: Lazarus Exploits Windows WinSock Driver Zero-Day CVE-2026-68820 to Deploy FudModule Rootkit
In its August 2026 Patch Tuesday security release, Microsoft addressed CVE-2026-68820, a high-severity Elevation of Privilege (EoP) zero-day vulner...
A high-severity denial-of-service (DoS) zero-day vulnerability, tracked as CVE-2026-20349 (CVSS 8.6, CWE-244), has been identified in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software. The flaw was d...
This report analyzes a critical, unauthenticated zero-day vulnerability discovered in GeoServer, a widely deployed open-source geospatial platform. The flaw was first disclosed on X by security researcher @q1uf3ng on August 12, 2026. Within hours of the disclosure, thre...
Supply Chain Ransomware Strike: Cl0p Syndicate Targets Shell in Global Extortion Campaign
Multinational energy corporation Shell plc launched an urgent internal investigation on August 16–17, 2026, following dark-web extortion claims published by the notorious Cl...
Baseband-to-Kernel Breach: Unisoc VoLTE Video Call Exploit Chain Manipulates Android Kernel Memory
Security researchers have uncovered a critical vulnerability chain affecting Unisoc baseband modems and System-on-Chip (SoC) architectures—specifically chipsets T60...
In a severe escalation targeting hypervisor infrastructure, cybersecurity researchers at The Hacker News and QUIRSO have attributed widespread intrusions against Broadcom VMware vCenter Server instances to an advanced persistent threat (APT) actor assessed to have a Chi...
Web Application Authorization Breach: SafePal Discloses Order Tracking Flaw Exposing 40,000 Crypto Wallet Buyers
Cryptocurrency wallet provider SafePal issued a formal security disclosure on August 16–17, 2026, confirming that a Broken Object-Level Authorization ...