🐛 COMMON VULNERABILITIES AND EXPOSURES 2[−]
15 AugmacOS Screen Sharing Flaw Exploited to Deploy Monero MinersHackers are exploiting a macOS Screen Sharing flaw to gain root access and install Monero miners on Macs with port 5900 exposed online. The Dutch National Cyber Security Centre confirmed active exploitation of a critical macOS authentication flaw, tracked as CVE-2026-65400 (CVSS …SECURITYAFFAIRS.COM
15 Aug KEVSAP Commerce Cloud CVE-2026-58231 Exploited in the WildAttackers are actively exploiting a maximum severity SAP Commerce Cloud vulnerability, tracked as CVE-2026-58231, just days after SAP released a patch. A critical SAP Commerce Cloud vulnerability, tracked as CVE-2026-58231 (CVSS score of 10.0), is under active exploitation just d…SECURITYAFFAIRS.COM
⚠️ VULNERABILITY DISCLOSURE 8[−]
15 AugPresident Trump authorizes private-sector companies to hack cybercriminals.Trivy, not LiteLLM, was the original source of the 2,500-organization supply chain attack. Patch Tuesday notes: Microsoft fixes three zero-days.THECYBERWIRE.COM
15 AugGeoServer Zero-Day Is Already Being Probed. That’s the ProblemGeoServer faces an unpatched zero-day enabling SQL injection and potentially RCE, with attackers already probing exposed systems. A newly disclosed GeoServer zero-day is already attracting active exploitation attempts, and there is no patch available yet. Organisations running th…SECURITYAFFAIRS.COM
15 AugCISA Unveils New Cybersecurity Resources for K-12 Schools and DistrictsA recent report claims ransomware attacks on K-12 are down for the first half of 2026, while another news story’s headline today claims schools are becoming a new cybersecurity battleground. New? We don’t think it’s new. But the education sector has long been ch…DATABREACHES.NET
15 AugAI Code Has No Security LayersOpen-source software has accumulated layers of security controls over years, including code signing, provenance, version control, maintainer tracking, and MFA for commits. AI MCPs, skills, and AI-generated code can look like ordinary software, but the same security infrastructure…YOUTUBE.COM
15 AugUK: ICO reprimands ACRO Criminal Records Office after data breachThe Information Commissioner (the Commissioner) recently issued a reprimand to ACRO Criminal Records Office for infringements of Articles 32(1), 32(1)(b) and 32(1)(d) of the UK GDPR. ACRO Criminal Records Office (ACRO) is a national police unit providing a range of public service…DATABREACHES.NET
15 AugKR: Sogang University data breach exposes 180,000 student, staff accountsHyeon Ye-Seul reports: Personal information belonging to roughly 180,000 students, alumni and staff at Sogang University was exposed in a cyberattack, the university said Saturday. The university said it had confirmed signs that some data tied to its integrated login accounts had…DATABREACHES.NET
15 AugTime ran out for victims; CRPx0 puts data up for saleCRPx0 made the news last month for its somewhat novel approach of offering free OnlyFans accounts to get victims to click links that would deploy its malware. Since August 7, when it launched a leak site on both the clear net and dark web, CRPx0 has listed 47 victims that did not…DATABREACHES.NET
15 AugCrooks Are Buying Your Expired Domains and Using Them to Deliver MalwareAttackers are buying expired domains to exploit their reputation, traffic and DNS history, using them for malware delivery, scams and C2 infrastructure. Every day, roughly 65,000 domain names that once belonged to someone else get re-registered by a new owner. Infoblox Threat Int…SECURITYAFFAIRS.COM
📢 SECURITY ADVISORIES 1[−]
15 AugCybersecurity Today Weekend Month in Review: August 2026AI Agents Hacking, Passkey Phishing, and Water Utility Attacks In this weekend month-in-review episode of Cyber Security Today, Jim is joined by David Shipley and Laura Paine to recap major July developments. David shares highlights from Harvard's cybersecurity and public policy …CYBERSECURITYTODAY.LIBSYN.COM
🔥 INCIDENT REPORTING 1[−]
15 AugHow to tell if your AI platforms’ accounts have been hackedA guide on how to check if hackers have broken into your accounts on the most popular AI platforms.TECHCRUNCH.COM
🌐 CYBER THREAT LANDSCAPE 1[−]
15 AugNew Evooo1Bot Linux botnet turns routers into traffic relay nodesA new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning them into SOCKS5 traffic relay nodes. [...]BLEEPINGCOMPUTER.COM