https://zerodayroom.com/Cybersecurity, Asia. Organised around the vulnerability or campaign, and the patch or control that stops it.enhttps://zerodayroom.com/news/microsoft-defender-patch-bypass-e95232/https://zerodayroom.com/news/microsoft-defender-patch-bypass-e95232/A security researcher has released a proof-of-concept exploit for a Microsoft zero-day vulnerability, claiming it can bypass a previously released patch and grant an attacker SYSTEM-level privileges.17 August 2026https://zerodayroom.com/news/cisco-asa-ftd-flaw-ede96a/https://zerodayroom.com/news/cisco-asa-ftd-flaw-ede96a/A high-severity vulnerability in Cisco's Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild, allowing an unauthenticated attacker to trigger a denial-of-service (DoS) condition.17 August 2026https://zerodayroom.com/news/sap-commerce-cloud-vulnerability-9c4fb6/https://zerodayroom.com/news/sap-commerce-cloud-vulnerability-9c4fb6/SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution.17 August 2026https://zerodayroom.com/news/microsoft-patches-flaws-including-73b10d/https://zerodayroom.com/news/microsoft-patches-flaws-including-73b10d/Microsoft has released its monthly security updates, addressing 398 flaws, including a Windows driver zero-day under active attack.17 August 2026https://zerodayroom.com/news/enterprise-defenses-recovered-edge-2689d1/https://zerodayroom.com/news/enterprise-defenses-recovered-edge-2689d1/A recent report by Picus Labs reveals that enterprise defenses have made significant improvements at the perimeter, but are struggling to prevent quiet attacks inside the network.16 August 2026https://zerodayroom.com/news/adobe-patches-critical-flaws-96b5e1/https://zerodayroom.com/news/adobe-patches-critical-flaws-96b5e1/Adobe releases updates to address multiple critical security vulnerabilities in ColdFusion, Commerce, and Campaign Classic, with some flaws having a CVSS score of 10.0.16 August 2026https://zerodayroom.com/news/attackers-exploit-vmware-vcenter-a0ae0c/https://zerodayroom.com/news/attackers-exploit-vmware-vcenter-a0ae0c/Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability, CVE-2026-59310, is a directory-traversal vulnerability in the VMware vCenter server that can be exploited to execute arbitrary code.16 August 2026https://zerodayroom.com/news/malicious-litellm-releases-may-1b59d6/https://zerodayroom.com/news/malicious-litellm-releases-may-1b59d6/A recent investigation has revealed that two malicious LiteLLM releases were published on PyPI in March, potentially exposing over 2,500 organizations to credential-stealing code.16 August 2026https://zerodayroom.com/news/sharepoint-authentication-bypass-exploited-670241/https://zerodayroom.com/news/sharepoint-authentication-bypass-exploited-670241/Threat actors are actively exploiting a critical SharePoint vulnerability (CVE-2026-55040) after a proof-of-concept exploit was publicly released. The flaw allows unauthenticated attackers to bypass authentication and impersonate users, enabling file disclosure and data modification.16 August 2026https://zerodayroom.com/news/lazarus-group-exploits-windows-a82e1d/https://zerodayroom.com/news/lazarus-group-exploits-windows-a82e1d/The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen backdoor targeting defense and aerospace companies across France, Germany, Brazil, and India.16 August 2026https://zerodayroom.com/news/chrome-vpn-extensions-caught-af9804/https://zerodayroom.com/news/chrome-vpn-extensions-caught-af9804/A set of 737 free VPN and proxy extensions have been found to target Russian-speaking users, intercepting browser traffic and routing it through a proxy infrastructure.16 August 2026https://zerodayroom.com/news/flaw-ai-reasoning-apis-aa04ef/https://zerodayroom.com/news/flaw-ai-reasoning-apis-aa04ef/Researchers have discovered a vulnerability in the AI reasoning APIs of OpenAI, Anthropic, and Google, allowing them to recover internal reasoning and secrets from session logs, including API keys and passwords.16 August 2026