The Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI) issued a joint cybersecurity advisory (AA26-222A) on August 10, 2026, warning of escalating attacks by the Gunra Ransomware-as-a-Service (RaaS) syndicate. Originati...
Upstream Analytics Breach: Framework Computer Notifies Customers Following Metabase Zero-Day Exploit
Modular hardware manufacturer Framework Computer began issuing formal data breach notifications on August 10, 2026, confirming that customer records were exfiltra...
Shattering the Dream: North Korea's Lazarus Group Exploits Windows afd.sys Zero-Day (CVE-2026-68820) in 'Operation Dream Job'
Published: August 11, 2026
Author: DigitalSpying Threat Intelligence Team
Category: Zero-Day Vulnerabilities / Advanced Persistent Threats (APT) / Ker...
AI-Assisted Discovery Uncovers Critical SharePoint Exploit Chain (CVE-2026-55040 & CVE-2026-63520) Achieving Unauthenticated Remote Code Execution
On August 11, 2026, security researchers at Rapid7 alongside Microsoft disclosed a critical, AI-discovered vulnerabi...
A critical zero-day SQL injection vulnerability impacting cloud-hosted instances of Metabase—a widely deployed business intelligence and data visualization platform—has been actively exploited in the wild, resulting in confirmed data breaches at multiple tech firms, inc...
A maximum-severity zero-day vulnerability (CVSS 10.0, currently unassigned CVE) impacting the widely deployed Metabase business intelligence and data visualization platform is being actively exploited in the wild. The security flaw allows unauthenticated remote attacker...
Cisco has issued an urgent security advisory for its Secure Endpoint Connector products across Windows, macOS, and Linux following the discovery of seven vulnerabilities in the open-source ClamAV malware detection engine. Tracked as CVE-2026-20337 through CVE-2026-20339...
Identity Infrastructure Alert: Critical Flaws in Belgian Connective eID Software Expose 2M Users to Silent Data Theft
Disclosed at DEF CON 34 on August 9, 2026, security researcher James Arnott (Bay Area Labs) revealed severe, now-patched vulnerabilities in the C...
IT management software vendor N-able has issued a second critical hotfix for its N-central remote monitoring and management (RMM) platform following continued exploitation of vulnerability CVE-2026-18577. Threat actors targeting Managed Service Providers (MSPs) have lev...
A critical security flaw has been identified in Metabase, a popular open-source business intelligence tool. This zero-day vulnerability, which is currently being exploited in the wild, represents a maximum-severity threat to organizations utilizing the platform. With a ...
Nation-State Offense: North Korean Hackers Build Custom AI Tools to Automate Spear-Phishing & Payload Generation
South Korean intelligence agencies and cybersecurity researchers reported on August 9, 2026, that North Korean state-sponsored threat groups (includin...
OpenAI Expands Daybreak Initiative and Releases GPT-5.6-Cyber to Arm Security Defenders as AI Cyber Threat Window Narrows
On August 10, 2026, OpenAI announced a pivotal expansion of its Daybreak Initiative, signaling a strategic shift toward democratizing frontie...