August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day
Microsoft on Tuesday announced patches for 421 CVEs, including a high-severity vulnerability that has been exploited in the wild as a zero-day. The exploited flaw,…
Category: SecurityWeek
Zoom Patches Zero-Click Code Execution Vulnerability
Zoom on Tuesday announced rolling out patches for four vulnerabilities in its products, including a severe flaw that allowed zero-click remote code execution (RCE). Impacting…
Corma Raises $60 Million for Defensive Cybersecurity AI Model
Corma emerged from stealth mode on Monday with $60 million in funding for a foundation model designed specifically for defensive cybersecurity. Headquartered in Tel Aviv…
Mozilla Issues New Firefox GPG Key Following Exposure
Mozilla announced on Monday that it has issued a new GPG signing subkey used for some Firefox and Thunderbird artifacts after the previous key was…
Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC
Cisco on Friday warned that its Secure Endpoint Connector products on Windows, macOS, and Linux are affected by seven ClamAV vulnerabilities that could lead to…
Stealthium Targets Security Blind Spots in AI Accelerators and Neo-Clouds
Use of accelerators is growing in line with the growth of AI. These accelerators are specialized chips that are neither CPUs nor GPUs – they…
OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns
OpenAI has flagged its upcoming AI model, Astra, for potentially reaching a ‘critical’ cybersecurity risk threshold, prompting the company to suspend internal development activities that…
New Jersey, Alabama Join States Targeted in Water Cyberattacks
New Jersey and Alabama have joined the list of US states that confirmed their water and wastewater facilities have been targeted in a hacking campaign…
Critical Flaws Discovered in Belgian eID Software Used by 2 Million People
DEF CON — A security researcher has revealed severe, now-resolved security vulnerabilities in the Connective digital identity system, a browser extension used by over two…
Critical Vulnerabilities Patched With Chrome 151 Update
Google on Thursday rolled out a fresh Chrome 151 update that patches 41 critical- and high-severity vulnerabilities. Over two dozen security defects are memory safety…
Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data
DEF CON — Varonis Threat Labs has disclosed a one-click vulnerability in Rovo, Atlassian’s enterprise AI assistant, that let a specially crafted link seed attacker-controlled…
Microsoft, Apple Release Fresh Security Updates
Microsoft and Apple on Thursday announced fixes for multiple vulnerabilities across their products. The charge was led by Microsoft, which patched over a dozen vulnerabilities…