On August 14, 2026, cybersecurity firm Group-IB published a groundbreaking investigation into a highly sophisticated cybercrime operation deploying "WindRelay"—a novel Android malware designed to capture and relay contactless payment card data over Near Field Communicat...
Hardware Wallet Supply Chain Breach: Trezor Customer Order Records Exposed via ShipMonk Incident
Hardware cryptocurrency wallet manufacturer Trezor issued a public security advisory on August 13, 2026, confirming that customer contact and shipping data for 13,689...
Kernel Privilege Escalation: Lazarus Group Weaponizes Windows AFD.sys Zero-Day CVE-2026-68820 in Global Defense Incursions
In mid-August 2026, a sophisticated advanced persistent threat (APT) campaign was uncovered, marking a significant escalation in the cyber c...
In mid-August 2026, cybersecurity threat intelligence researchers confirmed that the North Korean state-sponsored threat group Lazarus Group (also tracked as HIDDEN COBRA, Diamond Sleet, or Zinc) actively weaponized a zero-day vulnerability in the Windows kernel to infi...
The August 2026 Patch Tuesday update has introduced a critical fix for CVE-2026-62832, a high-severity local privilege escalation (LPE) vulnerability with a CVSS score of 7.8. This vulnerability resides within the Windows User Profile Service (ProfSvc), specifically imp...
During the August 2026 Patch Tuesday cycle, Rapid7 Labs and Microsoft engaged in a critical coordinated disclosure regarding a severe remote code execution (RCE) vulnerability in Microsoft SharePoint Server. Identified as CVE-2026-63520, this High-severity flaw (CVSS 8....
In mid-August 2026, cybersecurity research firms, including watchTowr, confirmed active in-the-wild exploitation targeting an unpatched zero-day vulnerability in GeoServer, the widely used open-source server written in Java for sharing and editing geospatial data and ma...
A critical edge-infrastructure security event was disclosed between August 11 and August 14, 2026, as Cisco confirmed the active in-the-wild exploitation of a high-severity zero-day vulnerability. Identified as CVE-2026-20349 (CVSS 8.6, CWE-244), the flaw resides within...
Critical Infrastructure Mandate: India Enforces CEA 2026 Power Sector Cybersecurity Regulations
India's Central Electricity Authority (CEA) officially notified the legally binding CEA (Cyber Security in Power Sector) Regulations, 2026 on August 14, 2026. Designed...
Critical Windows iSCSI Target Service Zero-Day RCE (CVE-2026-65791) Threatens Enterprise Storage Fabrics
Published on digitalspying.com | August 14, 2026
During the August 2026 Patch Tuesday release, security researchers and enterprise defenders dissected ...
Offensive Authorization: White House Enlists Vetted Private Cyber Firms for Disruptive Operations Against Foreign Transnational Criminal Organizations
On August 12–14, 2026, the White House signaled a paradigm shift in national cyber defense by signing a groundbr...
Exposed AWS Key in Client-Side JavaScript Triggers Full Database Theft Across 1,500+ Charities via Beacon CRM
By Robert Baindourov | DigitalSpying Security Intelligence | August 13, 2026
|---|
In one of the most consequential cloud credential exposu...