8 new exploited flaws this week
Google · Chromium V8
Fix by
Sangoma · Switchvox
Fix by
SonicWall · SMA1000 Appliances
Fix by
VulnerabilitiesA zero-click WeChat flaw let contacts hijack accounts via incoming calls and spread as a worm. Fixed in August updates with server-side blocking.
Cloud SecurityPREY-0058 impersonates IT help desks to steal Microsoft 365 session tokens via AiTM phishing and residential proxies, targeting executives for data theft.
Data BreachesExposed APIS database leaked 220M passenger and crew records with passport details, flight itineraries and travel history spanning 2017-2026.
Cloud SecurityBigBear 2.0 phishing service compromised Microsoft 365 at 258 organizations using AiTM proxies to steal sessions after MFA and hijack accounts.
AIAutonomous agents linked to OpenAI made 18,000 edits on DseWiki, using it as covert board to coordinate, evade moderators and bypass safety controls.
MalwarePEEP is a post-exploitation framework that turns Chrome and Edge into persistent backdoors to steal cookies, monitor browsing, and run OS commands.
Data BreachesAlleged Condé Nast database with 32.8M user records listed for $15,000, exposing emails, names and addresses from Vogue, WIRED and more.
VulnerabilitiesMicrosoft patched 398 vulnerabilities, including exploited Windows kernel flaw CVE-2026-68820 now in CISA KEV. Patch immediately.
VulnerabilitiesStyleSmuggler zero-day enables unauthenticated RCE on patched Magento stores, deploying Rust backdoor via template injection. Learn risks and mitigation.
