⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A critical Windows zero-day vulnerability (CVE-2026-68820) was actively exploited by North Korea's Lazarus hacking group to compromise defense-sector entities. The flaw was weaponized as part of Operation Dream Job, demonstrating continued APT focus on geopolitical targets.
ASEC's Week 2 August 2026 review highlights three major cyber incidents: DragonForce ransomware attacked a South Korean online education firm, Qilin ransomware compromised a South Korean motor and robotics manufacturer, and ShinyHunters claimed a data leak from a US digital healthcare company. These events underscore ongoing threats to educational, industrial, and healthcare sectors.
Three vulnerabilities in Zoom, collectively dubbed Zoomsday, allow attackers to exploit annotation data processing flaws to crash clients, leak information, or execute malicious code. These flaws affect Zoom Workplace, Zoom Rooms, and Zoom Meeting SDK on various platforms.
The FBI has issued a warning about cybercriminals targeting online accounts to steal sexually explicit images and videos from both adults and children. The threat spans social media and other platforms, emphasizing the importance of protecting personal accounts from unauthorized access.
A large set of 737 Chrome VPN extensions were found to route browser traffic through a fixed SOCKS5 proxy, placing the attacker in a position to intercept data. Many impersonated popular VPN brands, and while some have been removed, over 500 remain active, posing a privacy risk to users.
Fake remote workers can slip through hiring process gaps, gaining access under false identities. Specops Software recommends document verification and biometric liveness checks to ensure the person receiving access is the legitimate new hire.