Security & Risk
169 analyses
Apollo Global Management confirmed a breach that exposed personal data of clients after a vishing attack by the UNC6671 group, which targeted dozens of Wall Street firms between July and August 2026.
The company admits to an intrusion in its systems but does not disclose the attack vector, exfiltrated data, or the number of affected clients. The base includes around 500 global organizations.
Code injection vulnerability in TrueConf Server enters CISA's list of exploited vulnerabilities. CVSS 9.0, no workaround, federal agencies have a standard three-week deadline to apply the patch.
Cloud Software Group disclosed on August 19 a CVSS 9.3 vulnerability in NetScaler that allows bypass of authentication on SSL VPN, ICA, RDP, and AAA gateways. Rapid7 advises an emergency patch.
A Check Point Research report published on the 17th details the Troy backdoor and the FudModule rootkit used to silence EDRs in aviation and defense companies in France, Germany, India, and Brazil.
A threat actor identified as "TheHatman" claims to have extracted corporate directories from Azure and Entra ID tenants of companies such as McDonald's (1.7 million records), TCS, and Vodafone. None of the organizations have publicly confirmed the breach.
The Ministry of Digitalization confirmed the theft of clinical data from 12,000 clinics via the MyDr platform, exposing prescriptions, schedules, and national identifiers of millions of citizens.
A paper by eight researchers decoded the internal reasoning of the APIs from OpenAI, Anthropic, and Google, extracting 182 valid credentials and 367 pieces of personally identifiable information from public developer sessions.
North Korean group used CVE-2026-68820 in AFD.sys to escalate privileges to SYSTEM in a global espionage campaign. Microsoft fixed it in August's Patch Tuesday just days after Check Point's disclosure.
CVSS 9.8 vulnerability allows remote code execution without authentication on JetBrains TeamCity servers. CISA added it to the KEV on August 5 with a three-day deadline.
Seven CVEs in IOS XE with a CVSS of 9.8 and five in Catalyst SD-WAN with a CVSS of 9.9, all discovered internally. Cisco states there is no workaround, only an update, with tight deadlines for network teams.
The U.S. agency added CVE-2026-18577 to the KEV catalog on August 3 after attackers exploited an authentication vulnerability in N-able's RMM to take over servers and pivot to managed endpoints.