Search: “public-sector”

6 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 22 Vulnerability 14 Industry 12 Threat actor 9 Malware 7 AI industry 6 Exploit / PoC 6 Policy & legal 6 Data breach 5 Tools 3 Research 2 Phishing & fraud 1 AI safety & security 1 Advisory 1

SeverityAll critical 36 high 23 medium 10 low 9 info 17

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Weekly recap: suspected China-nexus APT exploited VMware vCenter CVE-2026-59310, Lazarus used Windows zero-day CVE-2026-68820, and macOS flaw dropped Monero miners.

The week's top stories included a suspected China-nexus APT exploiting VMware vCenter CVE-2026-59310 (CVSS 9.8), a directory-traversal flaw enabling arbitrary code execution, with backdoors, reverse SSH and Babuk-derived ransomware deployed, per QUIRSO. NCSC-NL reported active exploitation of macOS Screen Sharing flaw CVE-2026-65400 (CVSS 9.8) to install Monero miners on systems with port 5900 exposed. Lazarus Group exploited Windows zero-day CVE-2026-68820 (CVSS 7.0) in Operation Dream Job, delivering ForestTiger and Troy backdoors to defense and aerospace targets. GeoServer patched a critical SQL injection flaw exploited within hours of disclosure, and Jamf analyzed the new Amnesia Stealer for macOS with live browser control.

The Hacker NewsAug 17, 17:57 UTC · Aug 17, 2026Exploit / PoC in the wildCVE-2026-59310 CVE-2026-65400 CVE-2026-688201

GeoServer Zero-Day Is Already Being Probed. That’s the Problem

Unpatched GeoServer zero-day enabling SQL injection and possible RCE is being actively probed across exposed systems.

A zero-day in GeoServer's jsonArrayContains functionality allows unauthorized SQL injection and, in some configurations, remote code execution. Disclosed on August 12, 2026 without a CVE ID, it drew hundreds of exploitation probes from watchTowr within hours. No patch is available yet; GeoServer was previously mass-exploited via CVE-2024-36401.

Security AffairsAug 15, 07:18 UTC · Aug 15, 2026Exploit / PoC in the wildCVE-2024-36401

Search: “public-sector”

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

GeoServer Zero-Day Is Already Being Probed. That’s the Problem

ServiceNow agrees to buy cyber firm Armis for $7.75B

FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions

Researchers detect fresh wave of hacking attacks on Palestinian targets

How are businesses facing the cybersecurity challenges of increasing cloud adoption?