Vulnerability ManagementCISA adds Oracle WebLogic bug to its list of exploited vulnerabilitiesSteve ZurierAugust 25, 2026Experts say exploiting WebLogic middleware gives attackers access to an enterprise's core business apps.
MalwareCodex ClickFix installation lure spreads suspected AMOS infostealerLaura FrenchAugust 25, 2026The attack uses iframes embedded in Google Sites to deliver malicious content from a trusted domain.
IdentityMicrosoft says Entra ID identity software not exploited, revises CVESteve ZurierAugust 24, 2026While the urgency has changed, security pros say teams should still review Entra ID logs for anything suspicious before the patch.
Vulnerability ManagementCISA adds Zimbra Collaboration Suite bug to exploited vulnerabilities listSteve ZurierAugust 24, 2026Experts warn that it’s the fifth time Zimbra made the KEV this year.
Vulnerability ManagementTrueConf flaws enabling attacks on meeting participants added to KEV catalogLaura FrenchAugust 21, 2026The flaws have been used by the Head Mare APT hacktivist group to spread PhantomCore malware.
IdentityMicrosoft patches flaw in Entra ID identity softwareSteve ZurierAugust 21, 2026Microsoft fixed an exploited Entra ID flaw, but experts urge customers to check for compromise.
AI benefits/risksStudent thwarted real-world supply chain attack by rogue Mythos 5 agentLaura FrenchAugust 21, 2026The agent used social engineering against real people during testing by the UK AI Security Institute.
Critical Infrastructure SecurityUnspecified actors making AI-assisted attacks on critical infrastructureSteve ZurierAugust 20, 2026Feds warn that critical infrastructure organizations to treat attacks with the utmost urgency.
Black HatBlack Hat/DEF CON attendees targeted in malware scheme with Google Doc lureLaura FrenchAugust 20, 2026A malicious Google Apps Script sidebar leads to payloads for both macOS and Windows.
RansomwareMedusa ransomware group attacked more than 500 victims since 2021Steve ZurierAugust 19, 2026Medusa ransomware hit 500-plus victims, exploiting critical flaws at increasing speed.
