A proc-macro1 typosquatted dependency executed a build-time payload during compilation, creating a credential-stealing risk for developers on Linux, Windows, and macOS. The payload reconstructed its infrastructure from base64-encoded fragments and chose host-matched code for each platform. It then targeted browser secrets from Chrome, Brave, and Edge while establishing persistence on the endpoint.

The arrayref maintainer account was compromised, and malicious crate releases on crates.io executed during compilation on developers’ systems, creating a supply-chain intrusion risk. The same account also poisoned append-only-vec and internment within a 23-minute window, widening exposure across widely used Rust packages. The fake dependency proc-macro1 used a `build.rs` script and platform-specific payloads to run on Linux, Windows, and macOS systems. The payload was built to collect host data and browser credentials, making the compromise a direct theft and persistence risk for developers.

Gogs fixed CVE-2026-52813, a maximum-severity flaw that could lead to remote code execution through Git hooks. The bug accepted organization names containing ../ path traversal sequences, letting attackers write repository data to unintended filesystem locations and overwrite hooks configuration. The issue was addressed in version 0.14.3.

The ErrTraffic framework is now being used to deliver Cruciferra through ClickFix lures, adding a BYOVD escalation path that can terminate security processes. The activity routes victims from compromised WordPress sites through an obfuscated JavaScript loader before fetching the next stage from a Polygon smart contract. Recent uses of the framework have also pushed Remus Stealer, Vidar Stealer, Okobot, LegionLoader, OnionDrop-related payloads, and BabaDedaLoader. The chain broadens the malware's reach and makes the delivery path harder to inspect.

The U.S. Department of Justice charged 17 Mabna Institute members in a cyberintrusion case, and the U.S. Department of State announced a $10 million reward tied to the investigation.

CVE-2026-73570 in Zimbra Collaboration Suite (ZCS) is now actively exploited, giving attackers unauthenticated remote code execution against exposed servers. The flaw is a command injection issue in the SNMP monitoring component when SNMP notifications are enabled. Zimbra 10.1.20 was released on July 20 to patch the vulnerability, and exposed deployments remain a live target.

CVE-2026-32475 in Elementor Pro lets an unauthenticated attacker bypass file-upload validation in the Forms module's File Upload field, write a PHP file into a public directory, and reach remote code execution on affected WordPress sites. The flaw affects plugin versions prior to and including 4.2.1 on sites that expose a published Elementor page with the vulnerable form field. Version 4.2.2 was released on 2026-08-19 to address the issue.

Elementor Pro released version 4.2.2 to fix CVE-2026-32475, closing an unauthenticated file-upload RCE path in the WordPress plugin. The update targets the Forms module's File Upload field and removes a flaw that could let an attacker write a PHP file into a public directory. Sites still running 4.2.1 or earlier need the patch to eliminate the exposed code-execution path.

Researchers disclosed Cryptographic Context Injection, an encrypted prompt-injection technique that can make xAI's Grok web chat leak private session data through an outbound tool call. The chain can expose a user's name, approximate location, subscription tier, and ongoing conversation prompts to an attacker-controlled server. The payload hides behind PBKDF2 and AES-256-GCM, so the malicious instructions are recovered inside the model runtime rather than being seen as ordinary page text.

JFrog has issued fixes for JFrog Artifactory after disclosure of CVE-2026-69106 and CVE-2026-65922, two flaws that could let anonymous or low-privileged users manipulate package metadata and create software supply chain compromise risk. The issues affect JFrog Artifactory deployments handling repository metadata, including paths that can be poisoned or trusted improperly. Administrators should move to the patched release and reduce exposure of anonymous access where it is not required.

JFrog Artifactory flaws let anonymous or low-privileged users manipulate package metadata and create software supply chain compromise risk. The issues are tracked as CVE-2026-69106 and CVE-2026-65922, and JFrog has issued fixes. One flaw affects X-Orig-Client-Uri handling, while the other allows writes into trusted .jfrog/ metadata paths.

Security fixes for isolated-vm now close a sandbox escape flaw in affected releases, reducing the risk of host memory corruption and potential host RCE. The patch covers all versions before and including 7.0.0 and ships in 6.2.0 and 7.0.1. The issue is tracked as GHSA-864f-rcv7-6rh4.

isolated-vm users face a critical ExternalCopy type confusion flaw that can let sandboxed JavaScript escape into the host process and corrupt memory across all versions through 7.0.0. The bug can crash the host with SIGSEGV and, in the maximum demonstrated case, reach control-flow hijack with potential remote code execution. Patched releases 6.2.0 and 7.0.1 are available, and earlier versions should be updated.

NCSC issued interim guidance for autonomous AI agents, recommending sandboxing, human oversight, and tightly controlled access to reduce the risk of unintended or malicious actions. The advice targets organizations building or operating agentic AI systems and calls for pre-deployment assessment of autonomy, prompts, tools, networks, and services. It also pushes default-deny network controls, distinct identities, short-lived credentials, and the ability to stop agent activity quickly when behavior changes.

US defense contractors and subcontractors are posting a five-year high in SPRS self-assessment scores while confidence in those scores is falling, widening a CMMC readiness gap across the DIB. The trust decline suggests self-reported compliance may be outpacing verified cybersecurity maturity. Only 65% of respondents said their score was accurate, down from 89% last year and 94% in 2024. Just 1% said they are completely prepared for CMMC certification.

Atlassian released fresh security updates for Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, and Jira after finding 10 critical and 162 high-severity issues in shared third-party dependencies. The release addresses about 109 unique CVEs and reduces exposure to RCE, DoS, information theft, MitM, authentication bypass, and SSRF across multiple products.

Atlassian released a Security Bulletin with fresh updates for Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, and Jira to address 10 critical and 162 high-severity third-party dependency issues. The bundled fixes cover about 109 unique CVEs and reduce exposure to RCE, DoS, information theft, MitM, authentication bypass, and SSRF. The bulletin makes the patch cycle relevant across multiple Atlassian product lines because shared libraries spread the defects beyond a single application.

Active scanning and exploitation of MLflow and FUXA vulnerabilities is putting exposed systems at risk of cloud credential theft and remote code execution. CVE-2026-64849 in MLflow and CVE-2026-25895 in FUXA are both being targeted in the wild. The activity spans internet-wide probing of public instances and abuse attempts against reachable systems. The wave surfaced on August 17-18, 2026 and remains active.

A Visa Kernel 3 expiry-binding flaw lets attackers rewrite the terminal-facing Application Expiration Date (5F24) so an expired contactless card can still be approved for in-store purchases.

Group-IB identified WindRelay, a previously unseen Android NFC relay malware family used with SpyNote RAT in live-call social engineering against victims in Czechia, Slovakia, and Slovenia. The activity matters because the malware relays active card traffic in real time, supporting payment abuse without altering the card's expiration data. Evidence links the operation to 23 samples and four C2 IP addresses.

Researchers disclosed CDN Tsunami, a DoS analysis showing that HTTP/3-to-HTTP/1.1 translation in major CDNs can amplify small request streams and overload origin resources. The study identified HBA and HCA across Alibaba, Baidu, Cloudflare, Amazon CloudFront, Fastly, and Tencent, with bandwidth amplification reaching up to 350x and backend connection pressure severe enough to disrupt normal service. The findings expose a deployment gap at the CDN edge where browser-facing HTTP/3 still maps to origin-facing HTTP/1.1.

Atalanta released Argo, a new AI-assisted security tool that applies software understanding to analyze software and internet-connected systems for vulnerabilities. The launch matters because the system is already being used to assess the resilience of Viasat’s satellite communications network against emerging adversary attacks. It packages advanced mathematics and AI into a commercially available capability for critical-system defense.

CVE-2026-64849 in MLflow is being actively exploited against exposed Tracking Server deployments, creating immediate risk of cloud credential and secret theft. Attackers are using the unauthenticated SSRF flaw to reach cloud metadata services and extract sensitive data from internal endpoints. Scanning for exposed MLflow instances began within hours of assignment on August 17, 2026, showing rapid abuse of internet-facing systems. Organizations running versions < 3.15.0 should patch affected systems and check for signs of compromise.

A GoldDigger Android banking campaign is driving mass infections in South Africa and the U.K., using fake airline and shopping apps to steal credentials and trigger fraudulent transactions. The operation extends the reach of GoldFactory’s malware tooling and raises the risk of account takeover and real-time financial fraud.

The ToxicPanda (aka TgToxic) Android malware family now ships with 167 remote commands and broader fraud features that raise the risk of credential theft and account takeover. The updated build adds PIN harvesting for 140+ banking and cryptocurrency apps and extends overlay-based theft against 349 financial institutions across 16 countries. It abuses the Android accessibility service and Wireless Debugging/ADB to gain privilege escalation and shell-level access. Delivery has also shifted to Amazon AWS-hosted buckets, and the family has been active since at least July 2022.

Manic is an Android malware activity that targets Ukrainian banks, government and identity services, messaging apps, and also Russian and European financial institutions plus fintech, cryptocurrency, and military-focused communications. It blends banking fraud with mobile spyware, using Android Accessibility and notification permissions for keylogging, PIN capture, screenshots, contacts/SMS theft, and remote control. ThreatFabric said the activity dates back to February 2026, with supporting wrapper and implant development through May and July 2026. Its standout capability is a Wi‑Fi Direct/Bluetooth/BLE relay that can move encrypted data through a nearby infected Android device when the victim phone cannot reach C2.

The ToxicPanda 2.0 Android banking trojan now steals PINs and overlay credentials, widening its reach to 140 banking and cryptocurrency apps and 349 financial institutions across 16 countries. It also abuses Android Accessibility Service and wireless debugging to obtain shell access and run high-privilege ADB commands. The malware can steal device lock credentials through a screen-overlay attack, helping attackers maintain persistent access to compromised devices. Compared with the first version’s 16 banking apps, the new variant is a much broader credential-theft threat.

A persistent phishing campaign used fake post-conference outreach and trusted file-sharing lures to target cybersecurity conference attendees, creating a path to credential theft and malware execution after Black Hat / Def Con. The actor first posed as CoinDesk's VP and head of marketing on X and then sent a Google Doc with a malicious Google Apps Script sidebar. When that did not work, the actor followed up with a Dropbox DocSend-style lure that delivered a counterfeit installer with platform-specific payloads, including AMOS on macOS. The sequence shows a repeated operation designed to keep targets engaged and trick them into running code.

A 40-extension Mozilla Firefox malware set is stealing cryptocurrency wallet secrets by impersonating OKX, Rabby Wallet, and TronLink, creating direct theft risk for extension users. The malicious set sits inside a broader cluster of 77 browser add-ons linked by shared code and infrastructure, and the operation has been active since March 2026. The extensions steal recovery phrases, private keys, serialized keyrings, credentials, and clipboard data using fake wallet pages, embedded theft logic, Cloudflare Workers, and hard-coded C2.

Researchers identified Ransom Busters as a suspected ransomware middleman that contacts victims before attacks are public, offering decryption and data-deletion help while potentially diverting ransom payments across multiple RaaS operations. The pattern raises payment integrity and trust risks for both victims and ransomware crews by inserting a rogue affiliate into the extortion chain. Evidence ties the activity to outreach around DragonForce, Settra, and Anubis, with claimed deletion prices of $20,000-$60,000.