The highest-impact items — the "if you only read one thing today" list, pulled from across every section.

Friday, August 21, 2026

CRITICALMicrosoft Defender Driver Can Be Abused to Delete Security Softwarewindows · privilege-escalation · edr-bypass · microsoft-defenderCRITICALMicrosoft Patches Critical Entra ID Flaw (CVSS 10.0)microsoft · entra-id · rce · vulnerability

Thursday, August 20, 2026

CRITICALRust Crates Compromised in Supply Chain Attack, Delivering Malwaresupply-chain · rust · malware · developer-toolsCRITICALCritical NetScaler Flaw Allows Authentication Bypasscitrix · netscaler · authentication-bypass · vulnerability

Wednesday, August 19, 2026

CRITICALCISA Warns of Actively Exploited macOS, SharePoint, vCenter, and Microsoft IKE Flawscisa · kev · vulnerabilities · exploitation

Friday, August 14, 2026

CRITICALMaximum Severity SAP Commerce Cloud Flaw Actively Exploitedsap · rce · exploit · vulnerabilityCRITICALCitrix NetScaler Pre-Auth RCE Vulnerability Disclosedcitrix · rce · pre-auth · vulnerability

Wednesday, August 12, 2026

CRITICALAdobe Patches Critical ColdFusion and Campaign Classic Flawsadobe · coldfusion · rce · vulnerabilityCRITICALAttackers Actively Exploiting VMware vCenter Vulnerability for Persistent Accessvmware · vcenter · rce · exploit

Tuesday, August 11, 2026

CRITICALMicrosoft Patches 398 Flaws, Including a Windows Driver Zero-Day Under Active Attackmicrosoft · patch-tuesday · zero-day · privilege-escalation

Saturday, August 8, 2026

CRITICALMetabase Zero-Day SQLi Actively Exploited for Data Theftzero-day · sql-injection · data-breach · metabaseCRITICALProgress Kemp LoadMaster Flaw Added to CISA KEV After Exploitationcve · command-injection · kev · progress-kemp

Friday, August 7, 2026

CRITICALNearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealernpm · supply-chain · malware · infostealerCRITICAL18-Year-Old Linux SCTP Flaw Allows Root and Container Escapelinux · container-escape · privilege-escalation · vulnerability

Saturday, August 1, 2026

CRITICALColdcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Thefthardware-wallet · bitcoin · vulnerability · theftCRITICALRails Patches Critical Active Storage RCE Vulnerabilityrails · rce · vulnerability · web-application

Friday, July 31, 2026

CRITICALHacker Uses DeepSeek AI for Autonomous Server Attacksai · autonomous-attack · threat-actor · deepseekCRITICALCISA Warns of Cyberattacks Disrupting U.S. Water Utilitiescritical-infrastructure · ics · ot-security · cisaCRITICALAnthropic's Claude AI Breached Three Organizations During Security Testsai · breach · red-teaming · malware

Saturday, July 25, 2026

CRITICALFastjson 1.x RCE Vulnerability Actively Exploited, No Patch Availablecve · rce · java · fastjsonCRITICALCl0p Affiliates Exploit PTC Windchill and FlexPLM for Data Extortioncl0p · ransomware · data-breach · exploit

Friday, July 24, 2026

CRITICALCertighost Exploit Allows Low-Privileged AD Users to Impersonate Domain Controllersactive-directory · privilege-escalation · exploitCRITICALBing Images Flaws Allowed RCE as SYSTEM on Microsoft Serversrce · microsoft · vulnerability · svg

Thursday, July 23, 2026

CRITICALRussian Espionage Group Exploits Zimbra Zero-Day to Steal Mail and 2FA Codeszero-day · zimbra · espionage · threat-actor

Friday, July 17, 2026

CRITICALPublic Exploits Released for WordPress Core 'wp2shell' RCE Flawswordpress · rce · exploit · patch-nowHIGHOpenSSL 'HollowByte' DoS Flaw Exploitable with 11-Byte TLS Requestsopenssl · dos · vulnerability · hollowbyteCRITICALInc Ransomware Exploits SonicWall SMA Zero-Days for Root Accesssonicwall · zero-day · ransomware · exploitCRITICALNew Windows 'LegacyHive' Zero-Day Grants Admin Privilegeswindows · zero-day · privilege-escalation · exploitCRITICALCISA Urges Immediate Patching for Actively Exploited Fortinet FortiSandbox Flawsfortinet · cisa · exploit · patch-now

Saturday, July 11, 2026

CRITICALCompromised jscrambler npm Package Drops Rust Infostealersupply-chain · malware · npm · infostealerHIGH'Ghostcommit' Hides Prompt Injection in Images to Exfiltrate Secrets from AI Agentsai-security · prompt-injection · data-exfiltration · ai-agents

Friday, July 10, 2026

CRITICALProgress Software Urges ShareFile Customers to Shut Down Storage Zone Controllers Due to Credible Threatvulnerability · data-breach · incident-response · sharefileCRITICALInjective Labs GitHub Compromise Leads to Crypto Wallet Stealer via npmsupply-chain · cryptocurrency · malware · npm

Thursday, July 9, 2026

CRITICALGhostApproval Symlink Flaws Allow Malicious Repos to Execute Code in AI Coding Assistantsai-security · supply-chain · code-execution · ai-agents

Saturday, July 4, 2026

CRITICALJadePuffer Ransomware Uses AI Agent for Automated Attacksransomware · ai · automation

Friday, July 3, 2026

CRITICALUnpatched Flaws in FatFs Filesystem Affect Millions of Embedded Devicesembedded-devices · vulnerability · filesystemCRITICALNew 'Bad Epoll' Linux Kernel Flaw Allows Unprivileged Users to Gain Rootlinux · kernel · privilege-escalation

Wednesday, July 1, 2026

CRITICALAdobe Patches Multiple Critical RCE Flaws in ColdFusion and Campaign Classicadobe · coldfusion · rce · patchCRITICALCritical Cursor AI Editor Flaws Allow Prompt Injection to Escape Sandbox and Run Commandsai · prompt-injection · rce · vulnerability

Saturday, June 27, 2026

HIGHMalicious GitHub Repo Tricks AI Coding Agents into Running Malwareai-security · supply-chain · malware · github

Friday, June 26, 2026

CRITICALFBI and CISA Warn of Russian Intelligence Targeting Signal Backup Keysapt · phishing · signal · russiaCRITICALNew 'pedit COW' Linux Kernel Exploit Grants Root Accesscve · linux · privilege-escalation · exploitCRITICALAmazon Q Developer Flaw Allowed Code Execution and Credential Theftcve · cloud-security · ai-security · supply-chain

Wednesday, June 24, 2026

CRITICALCisco Unified CM Flaw Actively Exploited for Root Accesscve · exploit · cisco · rce

Saturday, June 20, 2026

CRITICALMicrosoft Surface Devices Vulnerable to Local Privilege Escalationprivilege-escalation · microsoft-surface · windowsHIGHMicrosoft Attributes Mastra AI Supply Chain Attack to North Korean Hackerssupply-chain · north-korea · npm · ai

Friday, June 19, 2026

HIGHKlue OAuth Breach Exposes Salesforce Customer Data, Icarus Group Claims Attackdata-breach · oauth-tokens · salesforce · supply-chainCRITICALUnpatchable 'usbliter8' Exploit Affects Apple A12 and A13 SecureROMapple · secure-rom · exploit · hardwareCRITICALCISA Warns of Active Exploitation in FortiBleed Campaign Targeting Fortinet Devicesfortinet · fortigate · cisa · credential-theft

Monday, June 15, 2026

CRITICAL56 Million Accounts Exposed in June 2026 Stealer Log Dumpdata-breach · infostealer · passwords · credential-stuffingCRITICALCisco Patches SD-WAN vManage Zero-Day Exploited for Root Privilegescve · zero-day · cisco · privilege-escalationCRITICALOne-Click 'SearchLeak' Attack on Microsoft 365 Copilot Could Steal Sensitive Datamicrosoft-365 · copilot · prompt-injection · data-exfiltration

Friday, June 12, 2026

CRITICALOver 400 Arch Linux AUR Packages Hijacked with Infostealer and eBPF Rootkitsupply-chain · linux · aur · infostealer

Thursday, June 11, 2026

CRITICALShinyHunters Exploits Oracle PeopleSoft Zero-Day to Breach Universitieszero-day · oracle · peoplesoft · data-breach