https://zerodayroom.com/2026-08-21https://zerodayroom.com/share-home.svg https://zerodayroom.com/news/suspected-russian-hackers-abuse/2026-08-21https://zerodayroom.com/share-suspected-russian-hackers-abuse.svgA hand with a lock superimposed over it, surrounded by a circle with the words "CYBER SECURITY"...Three suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to compromise personal accounts across multiple platforms https://zerodayroom.com/news/cdn-tsunami-attack-abuses/2026-08-21https://zerodayroom.com/share-cdn-tsunami-attack-abuses.svgA close-up view of a network switch with cables plugged into it.Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests... https://zerodayroom.com/news/rust-supply-chain-attack/2026-08-21https://zerodayroom.com/share-rust-supply-chain-attack.svgTwo green Ethernet cables plugged into a server rack, with multiple ports and labels visible.A supply chain attack on the Rust programming language has compromised three widely used crates, potentially affecting 245 million downloads. The attack was carried out by a compromised maintainer... https://zerodayroom.com/news/manic-android-malware-uses/2026-08-21https://zerodayroom.com/share-manic-android-malware-uses.svgA woman sitting at a desk with a laptop, accompanied by a shield with the letters "VPN" and a...A new Android malware, codenamed Manic, has been discovered targeting financial institutions, government services, and messaging applications, with the ability to exfiltrate data from offline... https://zerodayroom.com/news/shady-ai-next-big/2026-08-20https://zerodayroom.com/share-shady-ai-next-big.svgA person is holding a tablet with a VPN app on the screen.The increasing use of approved AI tools in unapproved ways is creating a new governance problem for cybersecurity teams, known as 'shady AI' (Source: The Hacker News) https://zerodayroom.com/news/cryptographic-context-injection-attack/2026-08-20https://zerodayroom.com/share-cryptographic-context-injection-attack.svgThe image displays the words "CYBER ATTACK" in large, light-brown letters against a dark background.Adversa AI discloses a new attack technique that can cause xAI's Grok chatbot to send user data to an attacker-controlled server (Source: The Hacker News) https://zerodayroom.com/news/ai-generated-exploit-scripts/2026-08-20https://zerodayroom.com/share-ai-generated-exploit-scripts.svgA list of text in a programming language, with various words and phrases highlighted in...The US government has warned of an active threat targeting critical infrastructure organizations using AI-generated exploit scripts to target Siemens S7 Series Programmable Logic Controllers (PLCs). https://zerodayroom.com/news/toxicpanda-golddigger-expand-android/2026-08-20https://zerodayroom.com/share-toxicpanda-golddigger-expand-android.svgA tablet displaying a stock market graph, a red cell phone, a stack of cash, and a wallet on a...Cybersecurity researchers have discovered updates to the ToxicPanda and GoldDigger Android malware, which now have enhanced capabilities to steal banking and cryptocurrency credentials https://zerodayroom.com/news/silkparasite-espionage-campaign-targets/2026-08-20https://zerodayroom.com/share-silkparasite-espionage-campaign-targets.svgA close-up of a circuit board with a network cable plugged into it, partially hidden behind a...A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion set makes use of seven remote access tool (RAT)... https://zerodayroom.com/news/openai-halts-frontier-rl/2026-08-20https://zerodayroom.com/share-openai-halts-frontier-rl.svgA close-up of a technician's hands, fingers tracing over a printed circuit board with exposed...OpenAI temporarily pauses reinforcement learning training for its advanced AI models to enhance monitoring, alignment, and security safeguards. The move follows recent incidents where AI agents... https://zerodayroom.com/news/cloudflare-workers-vulnerable-spectre/2026-08-20https://zerodayroom.com/share-cloudflare-workers-vulnerable-spectre.svgA close-up of a Cloudflare Workers dashboard screen, with a cryptic error message and abstract...Cybersecurity researchers have disclosed a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12... https://zerodayroom.com/news/elementor-pro-flaw-exposes/2026-08-20https://zerodayroom.com/share-elementor-pro-flaw-exposes.svgA computer screen displaying a code snippet in green text on a black background.A critical vulnerability in the Elementor Pro plugin allows unauthenticated attackers to upload PHP files and execute code on affected systems. (Source: The Hacker News) https://zerodayroom.com/news/twinloot-abuses-sharepoint-teams/2026-08-19https://zerodayroom.com/share-twinloot-abuses-sharepoint-teams.svgThe image displays the words "ETHICAL HACKING" in a collage style, with each letter cut out from...Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT, which abuses SharePoint and Teams to steal credentials and move across networks. https://zerodayroom.com/news/typosquatted-rubygems-packages-steal/2026-08-19https://zerodayroom.com/share-typosquatted-rubygems-packages-steal.svgA laptop with a VPN app open on its screen, sitting on a white table next to a cell phone...Cybersecurity researchers have discovered a new typosquatting campaign targeting RubyGems users with a Windows-based information stealer. The campaign, dubbed StubMaker, has been tracked by... https://zerodayroom.com/news/safepal-hardware-wallet-maker/2026-08-19https://zerodayroom.com/share-safepal-hardware-wallet-maker.svgThe internal components of a laptop computer, including the motherboard and RAM, with a...SafePal, a hardware wallet maker, has disclosed an authorization flaw in an order-tracking plug-in that exposed the data of approximately 39,798 customers. (Source: The Hacker News) https://zerodayroom.com/news/one-attacker-scrapes-salesforce/2026-08-19https://zerodayroom.com/share-one-attacker-scrapes-salesforce.svgA long hallway lined with rows of servers, featuring a prominent cloud icon at its center.A single attacker has been scraping records from both Salesforce and ServiceNow customer portals across multiple industries for over a year. (Source: The Hacker News) https://zerodayroom.com/news/ransomware-affiliate-ransom-busters/2026-08-18https://zerodayroom.com/share-ransomware-affiliate-ransom-busters.svgThe image displays the words "DATA BREACH" in large, light-colored letters on a dark background.A ransomware affiliate, 'Ransom Busters', has been sending emails to victim organizations claiming to delete stolen data from ransomware groups' servers in exchange for a fee ranging from $20,000... https://zerodayroom.com/news/attackers-exploit-mlflow-ssrf/2026-08-18https://zerodayroom.com/share-attackers-exploit-mlflow-ssrf.svgA man in a gray suit and white mask is leaning over a large server rack, adjusting a blue cable.Malicious actors are targeting open-source AI platform MLflow and web-based SCADA software FUXA with critical vulnerabilities. (Source: The Hacker News) https://zerodayroom.com/news/ai-mind-viruses-demonstrate/2026-08-18https://zerodayroom.com/share-ai-mind-viruses-demonstrate.svgA circular object with a white and blue border, surrounded by a blue and white background.Researchers at Anthropic and EPFL have shown that AI agents can spread self-propagating payloads, dubbed 'mind viruses,' through persistent system prompt files. While no wild infections have been... https://zerodayroom.com/news/microsoft-copilot-personal-flaws/2026-08-18https://zerodayroom.com/share-microsoft-copilot-personal-flaws.svgA person holding a blue sticker with the words "hacker inside" in white text, set against a...Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that could allow a single click on a crafted link to silently pull data from connected apps and other... https://zerodayroom.com/news/critical-gitlab-graphql-flaw/2026-08-18https://zerodayroom.com/share-critical-gitlab-graphql-flaw.svgA row of Scrabble tiles arranged horizontally on a reflective surface, with the word "CYBERSEC"...GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software. (Source: The Hacker News) https://zerodayroom.com/news/unisoc-volte-video-call/2026-08-18https://zerodayroom.com/share-unisoc-volte-video-call.svgA red padlock sitting on a black keyboard.Security researchers have discovered a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call. (Source: The Hacker News) https://zerodayroom.com/news/cisa-flags-actively-exploited/2026-08-18https://zerodayroom.com/share-cisa-flags-actively-exploited.svgClose-up of a laptop displaying cybersecurity text, emphasizing digital security themes.The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. https://zerodayroom.com/news/mcp-servers-hidden-gap/2026-08-18https://zerodayroom.com/share-mcp-servers-hidden-gap.svgA server with a row of lights and a series of buttons.MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access, and prompt injection, highlighting the need for robust security measures to protect... https://zerodayroom.com/news/cavern-c2-framework-evolves/2026-08-17https://zerodayroom.com/share-cavern-c2-framework-evolves.svgA person stands in front of a server room, holding a white Anonymous mask in their right hand.Kaspersky researchers have discovered new components in the Cavern command-and-control framework used by Iranian nation-state hackers, expanding its communication capabilities and allowing it to... https://zerodayroom.com/news/cybersecurity-threats-week-review/2026-08-17https://zerodayroom.com/share-cybersecurity-threats-week-review.svgA green binary code on a black background.A summary of the latest cybersecurity threats and vulnerabilities. (Source: The Hacker News) https://zerodayroom.com/news/snowflake-github-actions-flaw/2026-08-17https://zerodayroom.com/share-snowflake-github-actions-flaw.svgA close-up of a computer screen showing a GitHub Actions workflow with a red "error"...A vulnerability in Snowflake's public GitHub repository allowed attackers to inject commands into a workflow containing internal Jira credentials, potentially exposing sensitive information. https://zerodayroom.com/news/critical-flaws-wordpress-plugins/2026-08-17https://zerodayroom.com/share-critical-flaws-wordpress-plugins.svgA Samsung tablet displaying a login screen with a username and password field, accompanied by a...Two high-severity vulnerabilities have been discovered in popular WordPress plugins, Forminator Forms and User Profile Builder, allowing unauthenticated attackers to execute arbitrary code and... https://zerodayroom.com/news/microsoft-defender-patch-bypass-e95232/2026-08-17https://zerodayroom.com/share-microsoft-defender-patch-bypass-e95232.svgA laptop with the words "CYBER SECURITY" on its screen, sitting on a table or desk.A security researcher has released a proof-of-concept exploit for a Microsoft zero-day vulnerability, claiming it can bypass a previously released patch and grant an attacker SYSTEM-level privileges. https://zerodayroom.com/news/cisco-asa-ftd-flaw-ede96a/2026-08-17https://zerodayroom.com/share-cisco-asa-ftd-flaw-ede96a.svgA network switch with multiple cables connected to it, likely in a data center or server room...A high-severity vulnerability in Cisco's Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild, allowing an... https://zerodayroom.com/news/sap-commerce-cloud-vulnerability-9c4fb6/2026-08-17https://zerodayroom.com/share-sap-commerce-cloud-vulnerability-9c4fb6.svgA close-up of a circuit board with a Data Hub Adapter chip at its center, its pins and...SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. (Source: The Hacker News) https://zerodayroom.com/news/microsoft-patches-flaws-including-73b10d/2026-08-17https://zerodayroom.com/share-microsoft-patches-flaws-including-73b10d.svgA padlock sitting on top of a laptop keyboard.Microsoft has released its monthly security updates, addressing 398 flaws, including a Windows driver zero-day under active attack. (Source: The Hacker News) https://zerodayroom.com/news/adobe-patches-critical-flaws-96b5e1/2026-08-16https://zerodayroom.com/share-adobe-patches-critical-flaws-96b5e1.svgA wooden Scrabble game board with the words "CYBER SECURITY" spelled out on it.Adobe releases updates to address multiple critical security vulnerabilities in ColdFusion, Commerce, and Campaign Classic, with some flaws having a CVSS score of 10.0. (Source: The Hacker News) https://zerodayroom.com/news/malicious-litellm-releases-may-1b59d6/2026-08-16https://zerodayroom.com/share-malicious-litellm-releases-may-1b59d6.svgA woman sitting at a desk with two computer monitors, a laptop, and a mouse.A recent investigation has revealed that two malicious LiteLLM releases were published on PyPI in March, potentially exposing over 2,500 organizations to credential-stealing code. https://zerodayroom.com/news/attackers-exploit-vmware-vcenter-a0ae0c/2026-08-16https://zerodayroom.com/share-attackers-exploit-vmware-vcenter-a0ae0c.svgA person wearing a gray beanie and a brown hoodie, standing in front of a green digital...Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability, CVE-2026-59310, is a... https://zerodayroom.com/news/enterprise-defenses-recovered-edge-2689d1/2026-08-16https://zerodayroom.com/share-enterprise-defenses-recovered-edge-2689d1.svgTwo computer monitors displaying green text on a black background, sitting on a desk in a dimly...A recent report by Picus Labs reveals that enterprise defenses have made significant improvements at the perimeter, but are struggling to prevent quiet attacks inside the network. https://zerodayroom.com/news/lazarus-group-exploits-windows-a82e1d/2026-08-16https://zerodayroom.com/share-lazarus-group-exploits-windows-a82e1d.svgA person is visible holding a tablet in front of a blue background with binary code displayed on it.The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen... https://zerodayroom.com/news/chrome-vpn-extensions-caught-af9804/2026-08-16https://zerodayroom.com/share-chrome-vpn-extensions-caught-af9804.svgA woman sitting on the floor, holding a smartphone with a VPN app open on the screen.A set of 737 free VPN and proxy extensions have been found to target Russian-speaking users, intercepting browser traffic and routing it through a proxy infrastructure. (Source: The Hacker News) https://zerodayroom.com/news/flaw-ai-reasoning-apis-aa04ef/2026-08-16https://zerodayroom.com/share-flaw-ai-reasoning-apis-aa04ef.svgA close-up of a computer screen displaying a programming code in a dark room.Researchers have discovered a vulnerability in the AI reasoning APIs of OpenAI, Anthropic, and Google, allowing them to recover internal reasoning and secrets from session logs, including API keys... https://zerodayroom.com/news/sharepoint-authentication-bypass-exploited-670241/2026-08-16https://zerodayroom.com/share-sharepoint-authentication-bypass-exploited-670241.svgA wooden letter holder with the words "CYBER SECURITY" spelled out in individual letters.Threat actors are actively exploiting a critical SharePoint vulnerability (CVE-2026-55040) after a proof-of-concept exploit was publicly released. The flaw allows unauthenticated attackers to... https://zerodayroom.com/vulnerabilities/2026-08-20 https://zerodayroom.com/threats/2026-08-21 https://zerodayroom.com/regulation-compliance/2026-08-20 https://zerodayroom.com/topics/sec-regulation-compliance/2026-08-20 https://zerodayroom.com/topics/sec-threats/2026-08-21 https://zerodayroom.com/topics/sec-vulnerabilities/2026-08-20 https://zerodayroom.com/about/ https://zerodayroom.com/sources-and-methods/ https://zerodayroom.com/corrections/