60
60
60
60
Microsoft Fixes Windows Defender Zero
60
60
60
60
CISA adds 15 new flaws to its Known Exploited Vulnerabilities Catalog
60
60
U.S. CISA adds Fortinet FortiOS flaw to its Known Exploited Vulnerabilities catalog
60
60
45
Microsoft Patches 398 Flaws Including a Windows Driver Zero
Microsoft's August Patch Tuesday fixes 398 CVEs, including actively exploited Windows zero-day CVE-2026-68820 used by Lazarus for SYSTEM privilege escalation.
Microsoft's August 2026 Patch Tuesday release addresses 398 new vulnerabilities, 62 rated Critical by the Zero Day Initiative, with CVE-2026-68820 (CVSS 7.0), a use-after-free in the afd.sys Windows kernel driver, the only flaw flagged as actively exploited. Check Point Research attributed exploitation of the privilege escalation bug to Lazarus' Operation Dream Job campaign. Four unauthenticated remote code execution flaws rated 9.8 affect Windows DNS Server (CVE-2026-62878, called wormable by ZDI), Windows Deployment Services (CVE-2026-62893), Microsoft QUIC (CVE-2026-62815) and HPC Pack (CVE-2026-59124). The release also completes a two-part SharePoint fix with RCE component CVE-2026-63520, following July's authentication bypass fix CVE-2026-55040.
82
CISA adds Sophos firewall bug to Known Exploited Vulnerabilities Catalog
60
60
CISA adds Stuxnet bug to Known Exploited Vulnerabilities Catalog
60
Microsoft patches actively exploited Windows zero-day (CVE-2021-40449)
60
60
60
60
60
Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)
60
60
60
60
Microsoft patches Windows flaw exploited in the wild (CVE-2022-41033)
60
December 2018 Patch Tuesday: Microsoft patches Windows zero-day exploited in the wild
60
60
August 2018 Microsoft Patch Tuesday fixes two flaws exploited in attacks in the wild
60
60
60
60
60
63 New Flaws (Including 0
60
57
U.S. CISA adds Microsoft and Adobe flaws to its Known Exploited Vulnerabilities catalog
60
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
Weekly recap: suspected China-nexus APT exploited VMware vCenter CVE-2026-59310, Lazarus used Windows zero-day CVE-2026-68820, and macOS flaw dropped Monero miners.
The week's top stories included a suspected China-nexus APT exploiting VMware vCenter CVE-2026-59310 (CVSS 9.8), a directory-traversal flaw enabling arbitrary code execution, with backdoors, reverse SSH and Babuk-derived ransomware deployed, per QUIRSO. NCSC-NL reported active exploitation of macOS Screen Sharing flaw CVE-2026-65400 (CVSS 9.8) to install Monero miners on systems with port 5900 exposed. Lazarus Group exploited Windows zero-day CVE-2026-68820 (CVSS 7.0) in Operation Dream Job, delivering ForestTiger and Troy backdoors to defense and aerospace targets. GeoServer patched a critical SQL injection flaw exploited within hours of disclosure, and Jamf analyzed the new Amnesia Stealer for macOS with live browser control.
78
60
60