Physical OpSec Under Threat: Third-Party ShipMonk Breach Exposes 13,000+ Trezor Hardware Wallet Customer Addresses
In mid-August 2026, leading cryptocurrency hardware wallet manufacturer Trezor confirmed a significant third-party supply chain data breach affectin...
The cybersecurity community has identified a maximum-severity critical vulnerability, CVE-2026-72898, which carries a CVSS 10.0 rating. This unauthenticated SQL injection vulnerability affects both Metabase open-source and Enterprise business intelligence platforms. The...
When "Working as Designed" Means Total Exposure: Inside the 17-Month 'City-Forum' SaaS Data Harvesting Campaign
By DigitalSpying Research Team | August 16, 2026
Most major enterprise cybersecurity investigations begin with a broken component: an unpatched ...
Blueprint Blackmail: Clop Ransomware Targets PTC Windchill and FlexPLM in Massive Enterprise Extortion Spree
The Russian-speaking cybercrime syndicate Clop (also tracked as Cl0p or FIN11) has initiated another high-impact, mass-exploitation extortion wave, settin...
In a major international disclosure highlighting the expanding reach of commercial surveillance operations, Apple has issued emergency threat notifications to targeted iPhone users in 110 countries. The coordinated alerts, transmitted directly to devices via Lock Screen...
Published on DigitalSpying.com | August 15, 2026
Category: Supply Chain Attacks / Ransomware & Extortion / Vulnerability Exploitation
In mid-August 2026, global energy major Shell officially confirmed that it has launched an urgent internal investigation i...
In August 2026, a critical unpatched zero-day vulnerability was discovered in GeoServer, the preeminent open-source server for sharing and managing geospatial data. Within hours of the initial disclosure, threat actors initiated widespread automated scanning and exploit...
Published on DigitalSpying.com | August 15, 2026
Category: Ransomware & Extortion / Threat Intelligence / Government Advisories
In mid-August 2026, six leading cybersecurity and intelligence agencies spanning North America and Asia—including the Federal Bu...
Healthcare Genomic Breach: Baylor Genetics Discloses Network Intrusion Exposing Patient Clinical & Diagnostic Data
Specialty clinical diagnostics laboratory Baylor Genetics issued an official data security breach notification on August 14, 2026, confirming that u...
During August 2026, the Lazarus Group, a sophisticated nation-state threat actor, actively weaponized a zero-day vulnerability in Microsoft’s Ancillary Function Driver for WinSock (afd.sys). Tracked as CVE-2026-68820, this high-impact flaw was addressed in the August 20...
Cascading Blast Radius: How the LiteLLM Supply Chain Attack Compromised 2,500+ Organizations and 430,000 CI/CD Pipelines
In August 2026, investigations by CloudSEK and SecurityWeek revealed one of the most significant AI-centric infrastructure breaches to date. T...
Active Exploitation Alert: macOS Screen Sharing Zero-Day (CVE-2026-65400) Weaponized for Monero Cryptomining
Threat intelligence telemetry has revealed active, widespread in-the-wild exploitation of CVE-2026-65400, a critical pre-authentication remote code execut...