#уязвимости
-
CoSnitch: One Click Steals Data from Copilot Personal
Varonis Threat Labs has disclosed three vulnerabilities in the consumer version of Microsoft Copilot: following a crafted link let attackers silently siphon off emails, files and chat history from connected services. Microsoft shipped a fix on August 18, 2026.
-
CISA Adds Actively Exploited Ray Vulnerability to KEV Catalog
The critical CVE-2025-62593 vulnerability in the Ray distributed computing framework allows arbitrary code execution through a developer's browser via a DNS rebinding attack.
-
Critical GraphQL Flaw in GitLab Lets Attackers Delete Public Projects Without Authorization
GitLab has shipped an out-of-band security update closing the critical flaw CVE-2026-19478, rated CVSS 9.4, which under certain conditions gives an unauthenticated attacker the ability to modify and delete public projects and user data.
-
Chinese APT Group Exploits VMware vCenter Flaw and Deploys Babuk-Based Ransomware
German firm QUIRSO has attributed the exploitation of a fresh vulnerability, CVE-2026-59310, with moderate confidence to a Chinese-speaking group that has hit 361 systems across 47 countries.
-
Zoom Hacked in a Single Day: AI Finds a Zero-Click Flaw in Annotations
A Security has discovered a critical vulnerability in Zoom that lets an attacker take over the device of any call participant without a single click. The real story isn't the bug itself, but the fact that a “nation-state-grade” exploit was put together using publicly available AI models in less than a day.
-
Attacks on SharePoint: Public PoC Fuels Exploitation of an Authentication Bypass
After Rapid7 published a proof-of-concept exploit, attackers began actively exploiting the critical CVE-2026-55040 vulnerability in Microsoft SharePoint, which allows a JWT to be forged and lets an attacker impersonate any user.
-
Device Takeover via Screen Sharing in Zoom — an AI Found the Flaw in 20 Prompts
Researchers uncovered vulnerabilities in Zoom that allowed an attacker to silently seize control of the device of any participant in a screen-sharing video call. The alarming part: the hole was found by a public AI tool in fewer than twenty prompts.
-
Attack on VMware vCenter: CVE-2026-59310 exploited for stealthy remote access
Just five days after the public disclosure of a critical vulnerability in VMware vCenter, attackers began actively exploiting it, gaining a foothold on servers via reverse_ssh. According to QUIRSO, a suspected APT group is behind the campaign.
-
ShieldBreak: PoC Bypasses Patch for Microsoft Defender Vulnerability
A researcher going by the handle Chaotic Eclipse has published a proof-of-concept that, by his account, fully bypasses Microsoft's fix for the RoguePlanet vulnerability and hands an attacker SYSTEM privileges.
-
SAP Patches a Critical 10-out-of-10 Vulnerability in Commerce Cloud
SAP has released fixes for a maximum-severity flaw in Commerce Cloud that let an unauthenticated attacker execute arbitrary code. Alongside it, the August update also closes three more critical holes.
-
SonicWall SMA1000 Vulnerabilities Now Weaponized by Ransomware Operators
CISA has confirmed that ransomware gangs have begun exploiting two recently patched vulnerabilities in SonicWall SMA1000 remote access gateways, including a critical SSRF flaw.
-
CISA Adds Critical Progress Kemp LoadMaster Vulnerability to KEV Catalog
CVE-2026-8037, rated CVSS 9.6, lets an unauthenticated attacker run arbitrary commands on the load balancer. Over 41 days, 792 exploitation attempts were recorded.
-
SCTPhantom: An 18-Year-Old Flaw in Linux's SCTP Stack Leads to Root and Container Escape
A use-after-free in the SCTP networking code, present since 2008, lets a local user gain root. Tencent researchers claim they used it to break out of a container onto the host.
-
HTTP Terminator: PortSwigger's AI System Finds Novel HTTP Desync Techniques and a 0-Day in Apache
James Kettle's research system churned through 30,000 attack vectors to surface fresh HTTP desync tricks, while a parallel investigation laid bare a zero-day in Apache Traffic Server.
-
CoreBreak: AWS, Google and Vercel Agents Tricked Into Running Tools Without the Model
At Black Hat USA 2026, researchers from Stealth demonstrated a general class of attacks in which forged tool calls reach an AI agent's execution layer without the language model ever taking a turn. AWS, Google and Vercel have shipped fixes.
-
CISA: Critical JetBrains TeamCity Vulnerability Already Under Active Exploitation
The newly disclosed vulnerability CVE-2026-63077 (CVSS 9.8) in on-premise versions of TeamCity lets an unauthenticated attacker execute arbitrary commands. CISA reports active attacks and is requiring federal agencies to apply the patch by August 8.
-
Three Paperclip Vulnerabilities Allow Command Execution via Malicious Agent Import
Three flaws — including a critical one with a maximum CVSS score of 10.0 — have been found in Paperclip, the open-source platform for managing teams of AI agents. All of them boil down to the same thing: an agent's configuration turns into executable code.
-
Critical Gitea Vulnerability: Reading Server Files via Org Markup Without Logging In
In Gitea versions 1.22.1 through 1.27.0, an unauthenticated attacker could read any file accessible to the service account. All it took was a public repository and specially crafted Org markup.
-
CISA Adds Actively Exploited Flaws in Langflow, Tomcat and N-central to Its Catalog
On August 5, 2026, CISA added three vulnerabilities to its KEV catalog, citing evidence that they are being exploited in real-world attacks. One of the flaws is tied to an autonomous AI-driven hacking campaign.
-
TP-Link Patches 15 Vulnerabilities in the ZTP Mechanism of Omada Devices
Forescout researchers showed how a chain of new and previously disclosed vulnerabilities in Omada's automatic provisioning system lets attackers break into corporate networks and execute arbitrary code.
- More