August 13, 2026 Security teams managing Cisco edge infrastructure face a high-priority patching deadline after Cisco confirmed active exploitation of a newly disclosed zero-day in its firewall VPN stack. Tracked …
WordPress Imagick RCE Vulnerability Allows Authors to Execute Code via Malicious PNG File
August 13, 2026 WordPress has released version 7.0.4, a security-focused update that closes a remote code execution vulnerability affecting sites that process images with the Imagick extension and Ghostscript. The …
Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access
August 12, 2026 Palo Alto Networks Patches 11 New Vulnerabilities Across PAN-OS, GlobalProtect, and Prisma Access Palo Alto Networks has released its August 12, 2026 security bulletin, disclosing 11 new …
New “City-Forum” Hackers Attacking Salesforce and ServiceNow Instances Worldwide
August 12, 2026 New “City-Forum” Hackers Attacking Salesforce and ServiceNow Instances Worldwide A newly identified threat actor is running a large-scale, long-running cyber campaign targeting Salesforce Experience Cloud sites and …
China-linked Hackers Using AI Agents to Attack Taiwan Government Websites
August 12, 2026 Suspected China-linked attackers have carried out what researchers describe as the first fully autonomous cyberattack on a foreign government, using open-source artificial intelligence tools to breach Taiwanese …
Critical Adobe ColdFusion Vulnerabilities Allow Attackers to Execute Arbitrary Code
Adobe has issued critical security updates for ColdFusion 2025 and ColdFusion 2023, addressing multiple vulnerabilities that could allow threat actors to execute arbitrary code, bypass security controls, escalate privileges, expose …
WhatsApp Unveils New Scam Alert Feature to Protect Users from Social Engineering Attacks
WhatsApp has announced a new optional feature called Scam Alert, designed to warn users about potential scam messages using an on-device machine learning model, without compromising the platform’s end-to-end encryption. …
Eclipse Ransomware Launches RaaS Platform Targeting Windows, Linux, and ESXi Infrastructure
August 12, 2026 Eclipse Ransomware Launches RaaS Platform Targeting Windows, Linux, and ESXi Infrastructure A threat actor operating under the handle EclipseSupport is actively promoting a new Ransomware-as-a-Service (RaaS) operation …
Google Chrome 151 Patches Five High-Severity Use-After-Free Flaws in V8, Blink, and Extensions
August 12, 2026 Google Chrome 151 Patches Five High-Severity Use-After-Free Flaws in V8, Blink, and Extensions Google has officially released Chrome 151 to the Stable channel, mitigating five high-severity security …
Hackers Actively Exploiting VMware vCenter Systems to Gain and Maintain Remote Access
August 12, 2026 Hackers Actively Exploiting VMware vCenter Systems to Gain and Maintain Remote Access An active cyberattack campaign targeting internet-accessible VMware vCenter instances. During recent incident-response engagements, security analysts …