What happened at a glance Actor or group Lazarus (DPRK-linked), per Check Point Research Activity type Spear-phishing, trojanized software, zero-day exploitation Targets Defense, aerospace, and av…

TL;DR Microsoft August 2026 Patch Tuesday fixes 421 vulnerabilities, with 62 rated critical. One flaw, CVE-2026-68820, is already exploited in the wild. Microsoft also patched two other zero-days …

TL;DR Zoom released four security bulletins on August 11, 2026. Two of the flaws allow remote code execution against meeting participants. Each Zoom security vulnerability now has a fix, so users …

TL;DR A researcher has published a public PoC called ShieldBreak. It bypasses Microsoft’s July patch for the RoguePlanet Windows Defender flaw, CVE-2026-50656. The exploit escalates a standa…

TL;DR Siemens has disclosed CVE-2026-58115, a maximum-severity flaw in SIMATIC IoT2050 Advanced devices. The bug scores a perfect CVSS 10.0 and enables remote code execution through Node-RED. An u…

TL;DR Rapid7 has published a technical analysis and a working proof-of-concept for CVE-2026-55040. The flaw is a critical SharePoint authentication bypass that lets a remote, unauthenticated attac…

1. Ringkasan Eksekutif

TL;DR A critical Nuxt DevTools vulnerability lets an attacker run arbitrary commands on a developer’s machine. Tracked as CVE-2026-71319, it scores 9.6 on CVSS. The Nuxt package sees more th…

TL;DR Two critical Puwell IP Camera vulnerabilities now have public details and proof-of-concept exploit code. Both score 9.3 on the CVSS scale. Together they let a remote attacker bypass login an…

TL;DR Dell patched two critical flaws in Virtual Storage Integrator (VSI) for VMware vSphere Client. The worst, CVE-2026-67261, allows unauthenticated remote code execution as root, scoring CVSS 9…