August 10, 2026 CISA has added a critical Progress LoadMaster vulnerability to its Known Exploited Vulnerabilities catalog after attackers were observed targeting exposed devices. Tracked as CVE-2026-8037, the flaw affects …
Windows WalletService Vulnerability Allows Attackers to Escalate Privileges – PoC Released
August 10, 2026 Microsoft has patched a Windows WalletService vulnerability that could let local attackers gain SYSTEM privileges, with a public proof of concept urging organizations to deploy the July …
GitHub Expands Supply Chain Malware Detection From npm to 8 Package Registries
August 10, 2026 GitHub has expanded its malware detection capabilities beyond npm, providing developers with broader protection against malicious open-source packages. Dependabot alerts can now identify harmful dependencies across 8 …
Fake GoogleTranslate Chrome Extension Lets Attackers Remotely Control Your Browsers
August 10, 2026 A malicious Chrome extension masquerading as GoogleTranslate that can steal sensitive browser data, live-stream web sessions, and allow threat actors to remotely interact with Chrome windows while …
Google Play Apps Use Stealth Loaders to Deliver Anatsa Banking Malware
August 10, 2026 Android users are facing a fresh reminder that a familiar app-store listing can hide a financial threat. Researchers have observed malicious loaders on Google Play that can …
Ransomware Operators Disable EDR, Backup Software and Windows Telemetry Before Encryption
August 10, 2026 Ransomware crews are increasingly trying to blind a victim before they encrypt anything. Analysis shows that attackers can disable endpoint detection and response tools, interrupt Windows telemetry, …
Apple Private Cloud Compute Flaw Enables Root File Writes and AI Inference Telemetry Leakage
August 10, 2026 CVE-2026-20685 is a path traversal vulnerability affecting Apple’s Private Cloud Compute (PCC), potentially allowing attackers to write files as root during node boot and redirect sensitive AI …
Ransomware Attackers Target Managers to Steal Data and Move Deeper Into Corporate Networks
August 10, 2026 Ransomware campaigns are increasingly starting with people who hold the keys to everyday business decisions. Attackers are compromising managers whose accounts can open doors to contracts, payments, …
Kimsuky Uses Local LLMs, AI-Generated Lures and GitHub C2 to Deploy AsyncRAT
August 10, 2026 Kimsuky has been observed blending polished AI-made documents with familiar phishing tactics to push AsyncRAT, a remote-access trojan. The campaign shows how old delivery methods can gain …
Connective eID Extension Flaws Let Attackers Steal Belgian ID PINs and Trigger Drive-By RCE
August 10, 2026 Critical flaws have been found in the Connective Signing Extension, a browser component used by more than 2 million people in Belgium to access electronic identity cards …