August 2026 CVE Landscape
In August 2026, Insikt Group® identified 73 high-impact vulnerabilities that should be prioritized for remediation, 43 of which had a Very Critical Recorded Future Risk…
Author: Cybernoz
Shai-Hulud strikes again: CHAINDROP worm hits 400+ npm packages
On August 4, 2026, Elastic Security Labs identified a new Shai-Hulud campaign targeting the maintainer of keyv, a widely used key-value storage library. The attackers…
AdaptHealth confirms 4.1 million people exposed in July cyberattack
Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that was attributed to the ShinyHunters…
New N0va Phishkit Targets North America and EU: A Growing Identity Risk for SOCs
Recently, ANY.RUN researchers uncovered N0va, a new phishkit targeting organizations across North America and the EU, including government, technology, consulting, and healthcare. What makes N0va especially relevant for SOC…
NCSC Shadow AI – IT Security Guru
The UK’s National Cyber Security Centre (NCSC) has warned organisations about the security risks posed by “shadow AI”, as employees continue to turn to artificial…
Apple Doesn’t Want You to Worry About the New Apple Watch’s Listening Features
The new Apple Watch Series 12 and Ultra 4 come not just with better fitness tracking and upgraded noise reduction, but also a whole new…
OpenSSL’s new alpha build speeds up post-quantum crypto
The OpenSSL project released the first alpha of OpenSSL 4.1.0, giving developers an early look at a version built for encrypted communication over unreliable connections…
Four Spy Groups Used the Same Chrome and Windows Exploit Kit Within a Week
Multiple espionage-motivated threat activity clusters have been found deploying a previously undocumented exploit kit called BlueMoon that chains together multiple vulnerabilities in Microsoft Windows and…
Healthcare regs should include continuous AI monitoring
The National Commission into the Regulation of AI in Healthcare has published a report covering a set of recommendations for artificial intelligence (AI-)enabled healthcare. The…
ASD warns Aussie Adobe Commerce and Magento stores under attack
Key points A critical vulnerability tracked as CVE-2026-75650, rated 10.0 on the CVSS scale, allows unauthenticated remote code execution on Adobe Commerce and Magento Open…
AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns
Adversaries, both criminal and state-sponsored, are increasingly using AI to automate and scale their attacks, according to Google’s Threat Intelligence Group (GTIG). What started as…
Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day
Chaotic Eclipse Released ShieldCrash, A PoC For Microsoft Defender Zero-Day Pierluigi Paganini September 09, 2026 The researcher Chaotic Eclipse released ShieldCrash, a PoC exploit for a Microsoft…