ICYMI: 2026-08-20
Latest Headlines
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments
CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification
Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices
NASA AIT-GUI Flaws Could Let Unauthenticated Attackers Issue Spacecraft Commands
ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks with On-Device Fraud
40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets
Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code
China Is Strapping ‘Digital Bombs’ to Civilian Infrastructure—Is the US Ready?
Hackers Target Zimbra Servers in Active Exploitation Campaign
Surveillance – Everything You Wanted to Know, But Were Afraid to Ask
Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities
Cisco Patches Critical Crosswork, Secure Workload Vulnerabilities
AI-Assisted Tool Helped Secure Satellite Communication System After 2022 Russian Hacking
OpenAI Overhauls Model Security With Sandboxing, 30-Minute Alerts, and Training Pauses
Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler
CRLF-Powered Desync Lets Attackers Poison CDN Cache and Serve XSS to Live Users
AWS Shows How to Stop a Hijacked AI Agent From Reading Data the User Cannot Access
Microsoft Defender Driver Can Be Weaponized to Disable EDR and AV From Windows Kernel
Popular Rust Packages With 244M Downloads Compromised to Run Malware
Critical NASA AIT-GUI Flaw Lets Unauthenticated Attackers Issue Spacecraft Commands
ToxicPanda Android Malware Can Steal Banking PINs and Gain Shell Access to Phones
Hackers Use Fake CAPTCHA to Install Malware That Kills 145 Security Processes
New Android Malware Steals Banking PINs and Relays Data Through Someone Else’s Infected Phones
Hackers Bypass Microsoft 365 MFA and Hijack Finance Mailbox to Steal Payments
Zyxel Patches Command Injection Flaw in 18 Access Points Allowing Root OS Command Execution
Hackers poison arrayref Rust crate to push infostealer malware
Critical Elementor Pro bug exposes WordPress sites to RCE attacks
Citrix urges admins to patch new NetScaler flaws as soon as possible
CISA warns of hackers exploiting critical MLflow vulnerability
New Manic Android malware can exfiltrate data through nearby devices
Microsoft says August Windows updates may cause gaming issues
– MTZ