The highest-impact items — the "if you only read one thing today" list, pulled from across every section.

Friday, August 14, 2026

CRITICALMaximum Severity SAP Commerce Cloud Flaw Actively Exploitedsap · rce · exploit · vulnerabilityCRITICALCitrix NetScaler Pre-Auth RCE Vulnerability Disclosedcitrix · rce · pre-auth · vulnerability

Wednesday, August 12, 2026

CRITICALAdobe Patches Critical ColdFusion and Campaign Classic Flawsadobe · coldfusion · rce · vulnerabilityCRITICALAttackers Actively Exploiting VMware vCenter Vulnerability for Persistent Accessvmware · vcenter · rce · exploit

Tuesday, August 11, 2026

CRITICALMicrosoft Patches 398 Flaws, Including a Windows Driver Zero-Day Under Active Attackmicrosoft · patch-tuesday · zero-day · privilege-escalation

Saturday, August 8, 2026

CRITICALMetabase Zero-Day SQLi Actively Exploited for Data Theftzero-day · sql-injection · data-breach · metabaseCRITICALProgress Kemp LoadMaster Flaw Added to CISA KEV After Exploitationcve · command-injection · kev · progress-kemp

Friday, August 7, 2026

CRITICALNearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealernpm · supply-chain · malware · infostealerCRITICAL18-Year-Old Linux SCTP Flaw Allows Root and Container Escapelinux · container-escape · privilege-escalation · vulnerability

Saturday, August 1, 2026

CRITICALColdcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Thefthardware-wallet · bitcoin · vulnerability · theftCRITICALRails Patches Critical Active Storage RCE Vulnerabilityrails · rce · vulnerability · web-application

Friday, July 31, 2026

CRITICALHacker Uses DeepSeek AI for Autonomous Server Attacksai · autonomous-attack · threat-actor · deepseekCRITICALCISA Warns of Cyberattacks Disrupting U.S. Water Utilitiescritical-infrastructure · ics · ot-security · cisaCRITICALAnthropic's Claude AI Breached Three Organizations During Security Testsai · breach · red-teaming · malware

Saturday, July 25, 2026

CRITICALFastjson 1.x RCE Vulnerability Actively Exploited, No Patch Availablecve · rce · java · fastjsonCRITICALCl0p Affiliates Exploit PTC Windchill and FlexPLM for Data Extortioncl0p · ransomware · data-breach · exploit

Friday, July 24, 2026

CRITICALCertighost Exploit Allows Low-Privileged AD Users to Impersonate Domain Controllersactive-directory · privilege-escalation · exploitCRITICALBing Images Flaws Allowed RCE as SYSTEM on Microsoft Serversrce · microsoft · vulnerability · svg

Thursday, July 23, 2026

CRITICALRussian Espionage Group Exploits Zimbra Zero-Day to Steal Mail and 2FA Codeszero-day · zimbra · espionage · threat-actor

Friday, July 17, 2026

CRITICALPublic Exploits Released for WordPress Core 'wp2shell' RCE Flawswordpress · rce · exploit · patch-nowHIGHOpenSSL 'HollowByte' DoS Flaw Exploitable with 11-Byte TLS Requestsopenssl · dos · vulnerability · hollowbyteCRITICALInc Ransomware Exploits SonicWall SMA Zero-Days for Root Accesssonicwall · zero-day · ransomware · exploitCRITICALNew Windows 'LegacyHive' Zero-Day Grants Admin Privilegeswindows · zero-day · privilege-escalation · exploitCRITICALCISA Urges Immediate Patching for Actively Exploited Fortinet FortiSandbox Flawsfortinet · cisa · exploit · patch-now

Saturday, July 11, 2026

CRITICALCompromised jscrambler npm Package Drops Rust Infostealersupply-chain · malware · npm · infostealer