Apple Patches 122 Flaws including macOS Screen Sharing Flaw (CVE-2026-65400)
Apple shipped four security updates on August 17, 2026, fixing 122 vulnerabilities in iOS 18.7.10 and iPadOS 18.7.10, 29 in iOS 26.6.1 and iPadOS 26.…
Security
Copilot Autofix Bug Exposed Snowflake's Internal Jira
Wiz Research's autonomous "Red Agent" found and exploited a script injection flaw in Snowflake's public snowflake-connector-net re…
Microsoft's SCCM Hotfix Fixes Only One of Four RCE Bugs
Security researcher Omri Baso has disclosed a remote code execution chain in Microsoft Configuration Manager (SCCM/ConfigMgr) that lets an ordinary…
Apple Warns iPhone Users of Mercenary Spyware Attacks
Apple sent a fresh round of mercenary spyware threat notifications to users in 110 countries on Thursday, and for the first time, the warning lands a…
Trezor Says ShipMonk Breach Exposed 13,689 Customers
Nearly 14,000 people who bought a Trezor hardware wallet this summer now have their names and home addresses sitting in the hands of an unknown attac…
CVE-2026-63520: SharePoint RCE Patched by Microsoft
Rapid7 and Microsoft have disclosed CVE-2026-63520 , a remote code execution flaw in Microsoft SharePoint that completes an unauthenticated exploit c…
LiteLLM Breach Exposed 434,000 CI/CD Pipelines, 2,500 Firms
Two threat intelligence firms have published victim data from the March 2026 LiteLLM supply chain attack, and the scale is far beyond anything known …
ShieldBreak PoC Bypasses Microsoft's RoguePlanet Defender Fix
Security researcher Nightmare Eclipse has released ShieldBreak , a proof-of-concept exploit that defeats the patch Microsoft shipped five weeks ago f…
Microsoft Leaves Windows Passkey Prompt Spoofing Unfixed
Three weeks before Microsoft makes passkeys the default sign-in method for Entra ID , new research shows that the Windows dialog protecting them can …
Windows 11 Kernel 0day PoC Drops Before Patch Tuesday
An anonymous researcher has published proof-of-concept (PoC) code for what they describe as an unpatched local privilege-escalation flaw in Windows 1…
DeadLock Ransomware Puts Its Negotiation Portal On-Chain
Every ransomware crew eventually loses its website. DeadLock's operators appear to have decided not to have one. Microsoft Threat Intelligence ha…