Municipal Cyberattack: Baguio City Disables BUILDPass System Following Emperador Ransomware Breach
The municipal government of Baguio City officially shut down its Building Permit Application Services System (BUILDPass) on August 14, 2026, following a major secur...
Published on DigitalSpying.com | August 15, 2026
Category: Perimeter Security / Zero-Day Vulnerabilities / Denial of Service
In mid-August 2026, Cisco Systems issued an urgent security advisory and confirmed active, in-the-wild exploitation targeting a cri...
Maximum-Severity Zero-Day Alert: SAP Commerce Cloud Flaw (CVE-2026-58231, CVSS 10.0) Under Active Exploitation
Published on DigitalSpying.com | August 15, 2026
Category: Web Application Security / Zero-Day Vulnerabilities / Threat Intelligence
A max...
In mid-August 2026, threat intelligence researchers from SOCRadar, CloudSEK, and HudsonRock published a groundbreaking joint retrospective dissecting one of the most aggressive open-source software (OSS) supply chain attacks of the year. Orchestrated by threat syndicate...
In mid-August 2026, cybersecurity researchers and threat intelligence firms confirmed active, widespread exploitation in the wild targeting a critical vulnerability within VMware vCenter's Syslog Server, tracked as CVE-2026-59310 (CVSS score 9.8). The flaw—categorized a...
Vulnerability Ecosystem Overhaul: NIST Launches NVD Modernization Initiative as AI Accelerates Bug Discovery
The National Institute of Standards and Technology (NIST) officially launched a comprehensive National Vulnerability Database (NVD) Modernization Initiati...
In mid-August 2026, a critical security development emerged as independent researcher "Chaotic Eclipse" released a zero-day exploit chain dubbed ShieldBreak. This exploit chain targets a significant vulnerability within the Microsoft Defender Malware Protection Engine (...
In mid-August 2026, cloud software vendor Beacon CRM—a widely used customer relationship management platform tailored for the non-profit sector—officially confirmed a catastrophic security incident and complete database compromise impacting over 1,500 UK charities and c...
In mid-August 2026, security researchers and endpoint defense analysts at Arctic Wolf and across the infosec community confirmed the release of a full patch-bypass exploit chain dubbed "ShieldBreak". The exploit completely circumvents Microsoft's official remediation fo...
Low-Code Exposure: ExfilSquad Targets Misconfigured Microsoft Power Pages in Mass Extortion Wave
A newly emergent cybercrime and extortion group known as ExfilSquad has claimed responsibility for exfiltrating sensitive records from over 15 major corporations, mun...
Extension Resurrection: How Dangling Dependencies in VS Code Extension Packs Enable Zero-Click RCE Across 500,000+ Developer Machines
Developer environments have emerged as one of the most critical and under-defended attack surfaces in the modern enterprise. Whil...
Federal Offensive Cyber Governance: White House Mandates $1M Compliance Bonds for Private Strike Operations
Following the issuance of the August 12 presidential memorandum authorizing private sector cyber counter-tooling, the White House and the Department of Jus...