60
Week in review: 17 free AWS cybersecurity courses, exploited Chrome zero-day
60
Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flaw
60
Week in review: 3FA, Fortinet firewalls under attack, and the riskiest connected devices
60
60
60
60
60
60
60
Week in review: Microsoft fixes two exploited zero-days, SOC teams are losing trust in security tools
60
60
60
60
Microsoft fixes 4 exploited zero-days and a code defect that nixed earlier security fixes
60
Microsoft Condemns
60
60
60
ProxyLogon fixes for unsupported Microsoft Exchange versions released
60
Microsoft fixes exploited zero-day in Windows CSRSS (CVE-2022-22047)
60
63 New Flaws (Including 0
60
Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024
60
60
60
60
60
60
Week in review: Linux rootkit deployed on F5 BIG-IP APM devices, Cisco FMC bugs exploited
Weekly roundup: Cisco FMC and N-able N-central zero-days exploited in the wild, MikroTik RouterOS hijacks, Microsoft Patch Tuesday ships two exploited zero-days.
State-sponsored and financially-motivated attackers are actively exploiting CVE-2026-20079, a critical authentication bypass in Cisco Secure Firewall Management Center (FMC), alongside CVE-2026-20316. N-able issued an emergency hotfix for CVE-2026-86218, a critical pre-auth RCE in the N-central RMM platform exploited in the wild. CERT Polska disclosed six RouterOS vulnerabilities being chained to hijack internet-exposed MikroTik devices. Microsoft's September 2026 Patch Tuesday shipped a record patch count including two zero-days, while roughly 67,000 Trezor customers faced phishing after a shipping-partner breach and researchers privately disclosed a zero-click WeChat worm to Tencent.
70
Week in review: PoC for Splunk Enterprise RCE flaw released, scope of Okta breach widens
60
60
60
4 New BlueKeep-like 'Wormable' Windows Remote Desktop Flaws Discovered
60
60
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
CISA adds actively exploited SharePoint RCE CVE-2026-45659 (CVSS 8.8) to KEV; an August 11 update confirms ransomware groups are exploiting the flaw.
CVE-2026-45659 is a deserialization of untrusted data RCE in Microsoft SharePoint Server affecting Subscription Edition, 2019, and 2016, patched by Microsoft in May 2026. An authenticated attacker with at least Site Member permissions can execute code remotely over the network. CISA added the flaw to its KEV catalog on July 2 with a July 4 deadline for federal agencies, and on August 11 confirmed ransomware groups are exploiting it. Microsoft separately described Storm-2603 (Warlock ransomware) and an unrelated actor co-existing in one network, with initial access likely via the Gladinet Triofox flaw CVE-2025-11371 (CVSS 9.1).
78
60
Microsoft Finds Critical Bugs in Pre-Installed Apps on Millions of Android Devices
60
60
Microsoft Releases Record
60
Microsoft releases IOC Detection Tool for Microsoft Exchange Server flaws
60
60