N-able has released an emergency update, Hotfix 2, for its N-central Remote Monitoring and Management (RMM) software. This critical intervention aims to address CVE-2026-18577, a vulnerability that has been observed under active zero-day exploitation. The release of Hot...
Global logistics and supply chain provider CEVA Logistics has suffered a cyberattack impacting fulfillment systems for gaming giant Valve. The intrusion resulted in the exfiltration of shipment databases containing sensitive personal information of customers who purchas...
A financially motivated China-linked threat group tracked as Storm-1175 has been observed weaponizing a critical zero-day vulnerability in N-able N-central remote monitoring and management (RMM) software. The threat actors leveraged the zero-day flaw (CVE-2026-18577) to...
Head Mare Hacktivists Exploit TrueConf Server Flaws to Poison Installers with PhantomCore Backdoor
By DigitalSpying Threat Intelligence Team | August 10, 2026
A sophisticated cyber espionage campaign conducted by the pro-Ukrainian hacktivist collective Hea...
US Defense Contractor IEH Suffers Phishing Breach Exposing ITAR-Controlled Technical Data
In early August 2026, US defense contractor IEH Corporation, a leading manufacturer of high-reliability hyperboloid printed circuit board (PCB) connectors for aerospace, mil...
Zero-Day Critical Alert: Unauthenticated Metabase 0-Day SQL Injection Exploited for Full Admin Access (GHSA-vwf4-m7j8-wcjf)
Open-source business intelligence platform Metabase issued an emergency advisory on August 9, 2026, confirming active in-the-wild exploitat...
A critical zero-day SQL injection vulnerability targeting Metabase Cloud and self-hosted instances (v58 and above) has been actively exploited to compromise enterprise database environments across multiple SaaS platforms. Threat actors gained unauthorized access to inte...
A maximum-severity zero-day vulnerability in the Metabase cloud business intelligence (BI) platform has been exploited in the wild, triggering data breaches across several notable technology and SaaS organizations. Affected victims include repairable hardware maker Fram...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive following the discovery of active exploitation targeting Progress Kemp LoadMaster devices. CISA has officially added CVE-2026-8037 to its Known Exploited Vulnerabilities (KEV) cat...
Municipal Infrastructure Cyberattack: Network Compromise Forces Shutdown of Suisun City Government Systems
A major cyberattack struck Suisun City, California, on August 8, 2026, forcing municipal officials to completely shut down city government computer networks...
Progress Kemp LoadMaster Security Advisory
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical-severity OS command injection vulnerability in Progress Kemp LoadMaster (tracked as CVE-2026-8037, CVSS score 9.6) to its Known Exploi...
OpenAI Pauses Development on 'Astra' Model After Crossing Critical Autonomous Cyberattack Threshold
In a landmark decision for artificial intelligence governance and cybersecurity, OpenAI announced on August 8, 2026, that it has paused certain development and cap...