https://zerodayroom.com/2026-08-24 https://zerodayroom.com/news/suspected-iranian-hackers-shut/2026-08-24https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/suspected-iranian-hackers-shut.webpSuspected Iranian Hackers Shut UK Power Plant for Four DaysA British power plant was offline for four days in July 2026 after a suspected Iranian cyberattack, according to The Telegraph and Help Net Security. The incident was reported to the National... https://zerodayroom.com/news/reliaquest-targeted-shinyhunters-hackers/2026-08-24https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/reliaquest-targeted-shinyhunters-hackers.webpReliaQuest Targeted by ShinyHunters HackersReliaQuest Targeted by ShinyHunters Hackers (Source: SecurityWeek) https://zerodayroom.com/news/suspected-russian-hackers-abuse/2026-08-21https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/suspected-russian-hackers-abuse.webpSuspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack AccountsThree suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to compromise personal accounts across multiple platforms https://zerodayroom.com/news/cdn-tsunami-attack-abuses/2026-08-21https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/cdn-tsunami-attack-abuses.webpCDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS AmplificationCybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests... https://zerodayroom.com/news/rust-supply-chain-attack/2026-08-21https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/rust-supply-chain-attack.webpRust Supply Chain Attack Compromises Crates with 245 Million DownloadsA supply chain attack on the Rust programming language has compromised three widely used crates, potentially affecting 245 million downloads. The attack was carried out by a compromised maintainer... https://zerodayroom.com/news/manic-android-malware-uses/2026-08-21https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/manic-android-malware-uses.webpManic Android Malware Uses Novel Technique to Exfiltrate Data from Offline PhonesA new Android malware, codenamed Manic, has been discovered targeting financial institutions, government services, and messaging applications, with the ability to exfiltrate data from offline... https://zerodayroom.com/news/shady-ai-next-big/2026-08-20https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/shady-ai-next-big.webpShady AI: The Next Big Governance Problem in CybersecurityThe increasing use of approved AI tools in unapproved ways is creating a new governance problem for cybersecurity teams, known as 'shady AI' (Source: The Hacker News) https://zerodayroom.com/news/cryptographic-context-injection-attack/2026-08-20https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/cryptographic-context-injection-attack.webpNew Cryptographic Context Injection Attack Puts Grok Chat Data at RiskAdversa AI discloses a new attack technique that can cause xAI's Grok chatbot to send user data to an attacker-controlled server (Source: The Hacker News) https://zerodayroom.com/news/ai-generated-exploit-scripts/2026-08-20https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/ai-generated-exploit-scripts.webpAI-Generated Exploit Scripts Target US Critical InfrastructureThe US government has warned of an active threat targeting critical infrastructure organizations using AI-generated exploit scripts to target Siemens S7 Series Programmable Logic Controllers (PLCs). https://zerodayroom.com/news/toxicpanda-golddigger-expand-android/2026-08-20https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/toxicpanda-golddigger-expand-android.webpToxicPanda 2.0 and GoldDigger Expand Android Banking AttacksCybersecurity researchers have discovered updates to the ToxicPanda and GoldDigger Android malware, which now have enhanced capabilities to steal banking and cryptocurrency credentials https://zerodayroom.com/news/silkparasite-espionage-campaign-targets/2026-08-20https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/e7b50427-8c7b-435f-ad0c-18fd8c37b297.webpSilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATsA previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion set makes use of seven remote access tool (RAT)... https://zerodayroom.com/news/openai-halts-frontier-rl/2026-08-20https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/54a2e0fb-8b87-4a3b-820b-248c007d9aad.webpOpenAI Halts Frontier RL Training to Strengthen AI Safety MeasuresOpenAI temporarily pauses reinforcement learning training for its advanced AI models to enhance monitoring, alignment, and security safeguards. The move follows recent incidents where AI agents... https://zerodayroom.com/news/cloudflare-workers-vulnerable-spectre/2026-08-20https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/8d260844-5c76-48db-8589-42d6dbda8f0e.webpCloudflare Workers Vulnerable to Spectre Attack, Leaking JWT at 12 Bits/SecondCybersecurity researchers have disclosed a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12... https://zerodayroom.com/news/elementor-pro-flaw-exposes/2026-08-20https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/bdb02c42-1a2c-4b82-8fcc-c612dc5748a5.webpElementor Pro Flaw Exposes WordPress Sites to Remote Code ExecutionA critical vulnerability in the Elementor Pro plugin allows unauthenticated attackers to upload PHP files and execute code on affected systems. (Source: The Hacker News) https://zerodayroom.com/news/twinloot-abuses-sharepoint-teams/2026-08-19https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/twinloot-abuses-sharepoint-teams.webpTWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across NetworksCybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT, which abuses SharePoint and Teams to steal credentials and move across networks. https://zerodayroom.com/news/typosquatted-rubygems-packages-steal/2026-08-19https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/typosquatted-rubygems-packages-steal.webpTyposquatted RubyGems Packages Steal Browser Credentials and Crypto WalletsCybersecurity researchers have discovered a new typosquatting campaign targeting RubyGems users with a Windows-based information stealer. The campaign, dubbed StubMaker, has been tracked by... https://zerodayroom.com/news/safepal-hardware-wallet-maker/2026-08-19https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/safepal-hardware-wallet-maker.webpSafePal Hardware Wallet Maker Discloses Data Exposure Affecting Nearly 40,000 CustomersSafePal, a hardware wallet maker, has disclosed an authorization flaw in an order-tracking plug-in that exposed the data of approximately 39,798 customers. (Source: The Hacker News) https://zerodayroom.com/news/one-attacker-scrapes-salesforce/2026-08-19https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/one-attacker-scrapes-salesforce.webpOne Attacker Scrapes Salesforce and ServiceNow PortalsA single attacker has been scraping records from both Salesforce and ServiceNow customer portals across multiple industries for over a year. (Source: The Hacker News) https://zerodayroom.com/news/ransomware-affiliate-ransom-busters/2026-08-18https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/ransomware-affiliate-ransom-busters.webpRansomware Affiliate 'Ransom Busters' Claims to Delete Stolen Data for a FeeA ransomware affiliate, 'Ransom Busters', has been sending emails to victim organizations claiming to delete stolen data from ransomware groups' servers in exchange for a fee ranging from $20,000... https://zerodayroom.com/news/attackers-exploit-mlflow-ssrf/2026-08-18https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/attackers-exploit-mlflow-ssrf.webpAttackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and SecretsMalicious actors are targeting open-source AI platform MLflow and web-based SCADA software FUXA with critical vulnerabilities. (Source: The Hacker News) https://zerodayroom.com/news/ai-mind-viruses-demonstrate/2026-08-18https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/ai-mind-viruses-demonstrate.webpAI 'Mind Viruses' Demonstrate Self-Replicating Payloads Across Agent NetworksResearchers at Anthropic and EPFL have shown that AI agents can spread self-propagating payloads, dubbed 'mind viruses,' through persistent system prompt files. While no wild infections have been... https://zerodayroom.com/news/microsoft-copilot-personal-flaws/2026-08-18https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/microsoft-copilot-personal-flaws.webpMicrosoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected AppsVaronis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that could allow a single click on a crafted link to silently pull data from connected apps and other... https://zerodayroom.com/news/critical-gitlab-graphql-flaw/2026-08-18https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/critical-gitlab-graphql-flaw.webpCritical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public ProjectsGitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software. (Source: The Hacker News) https://zerodayroom.com/news/unisoc-volte-video-call/2026-08-18https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/unisoc-volte-video-call.webpUnisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel AccessSecurity researchers have discovered a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call. (Source: The Hacker News) https://zerodayroom.com/news/cisa-flags-actively-exploited/2026-08-18https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/cisa-flags-actively-exploited.webpCISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCEThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. https://zerodayroom.com/news/mcp-servers-hidden-gap/2026-08-18https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/mcp-servers-hidden-gap.webpMCP Servers: A Hidden Gap in Enterprise SecurityMCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access, and prompt injection, highlighting the need for robust security measures to protect... https://zerodayroom.com/news/cavern-c2-framework-evolves/2026-08-17https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/841b1969-3a25-430a-944d-85857c204802.webpCavern C2 Framework Evolves with New Communication Module and Google Apps Script RelayKaspersky researchers have discovered new components in the Cavern command-and-control framework used by Iranian nation-state hackers, expanding its communication capabilities and allowing it to... https://zerodayroom.com/news/cybersecurity-threats-week-review/2026-08-17https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/2fe7fdc4-1931-441a-9d3b-3663372a3bf3.webpCybersecurity Threats: A Week in ReviewA summary of the latest cybersecurity threats and vulnerabilities. (Source: The Hacker News) https://zerodayroom.com/news/snowflake-github-actions-flaw/2026-08-17https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/6e08b953-76fa-435c-a735-13e09856b9c7.webpSnowflake GitHub Actions Flaw Exposes Jira Credentials to Workflow Injection AttacksA vulnerability in Snowflake's public GitHub repository allowed attackers to inject commands into a workflow containing internal Jira credentials, potentially exposing sensitive information. https://zerodayroom.com/news/critical-flaws-wordpress-plugins/2026-08-17https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/504b1371-0f9b-4d09-a6cf-acde4ad0cb30.webpCritical Flaws in WordPress Plugins Expose Sites to Unauthenticated RCE and Auth Bypass AttacksTwo high-severity vulnerabilities have been discovered in popular WordPress plugins, Forminator Forms and User Profile Builder, allowing unauthenticated attackers to execute arbitrary code and... https://zerodayroom.com/news/microsoft-defender-patch-bypass-e95232/2026-08-17https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/a0ffabb7-0fa7-46ec-a674-a1a6db1479b0.webpMicrosoft Defender Patch Bypass Exploit Claims SYSTEM AccessA security researcher has released a proof-of-concept exploit for a Microsoft zero-day vulnerability, claiming it can bypass a previously released patch and grant an attacker SYSTEM-level privileges. https://zerodayroom.com/news/cisco-asa-ftd-flaw-ede96a/2026-08-17https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/0e2c42d9-2130-401d-b588-840a980ca8c5.webpCisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoSA high-severity vulnerability in Cisco's Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild, allowing an... https://zerodayroom.com/news/sap-commerce-cloud-vulnerability-9c4fb6/2026-08-17https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/7a6434c7-7601-4d24-986d-8c1f1fa1776f.webpSAP Commerce Cloud Vulnerability Allows Unauthenticated Attackers to Execute Arbitrary CodeSAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. (Source: The Hacker News) https://zerodayroom.com/news/microsoft-patches-flaws-including-73b10d/2026-08-17https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/9774a3db-e3a6-4a50-a16d-0abdb12fe42a.webpMicrosoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active AttackMicrosoft has released its monthly security updates, addressing 398 flaws, including a Windows driver zero-day under active attack. (Source: The Hacker News) https://zerodayroom.com/news/adobe-patches-critical-flaws-96b5e1/2026-08-16https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/adobe-patches-critical-flaws-96b5e1.webpAdobe Patches Critical Flaws in ColdFusion, Commerce, and Campaign ClassicAdobe releases updates to address multiple critical security vulnerabilities in ColdFusion, Commerce, and Campaign Classic, with some flaws having a CVSS score of 10.0. (Source: The Hacker News) https://zerodayroom.com/news/malicious-litellm-releases-may-1b59d6/2026-08-16https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/malicious-litellm-releases-may-1b59d6.webpMalicious LiteLLM Releases May Have Exposed Thousands of OrganizationsA recent investigation has revealed that two malicious LiteLLM releases were published on PyPI in March, potentially exposing over 2,500 organizations to credential-stealing code. https://zerodayroom.com/news/attackers-exploit-vmware-vcenter-a0ae0c/2026-08-16https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/attackers-exploit-vmware-vcenter-a0ae0c.webpAttackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote AccessThreat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability, CVE-2026-59310, is a... https://zerodayroom.com/news/enterprise-defenses-recovered-edge-2689d1/2026-08-16https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/enterprise-defenses-recovered-edge-2689d1.webpEnterprise Defenses Recovered at the Edge, Collapsed InsideA recent report by Picus Labs reveals that enterprise defenses have made significant improvements at the perimeter, but are struggling to prevent quiet attacks inside the network. https://zerodayroom.com/news/lazarus-group-exploits-windows-a82e1d/2026-08-16https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/lazarus-group-exploits-windows-a82e1d.webpLazarus Group Exploits Windows Zero-Day Vulnerability to Gain SYSTEM Access and Deploy BackdoorThe North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen... https://zerodayroom.com/news/chrome-vpn-extensions-caught-af9804/2026-08-16https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/chrome-vpn-extensions-caught-af9804.webp737 Chrome VPN Extensions Caught Routing Traffic Through ProxiesA set of 737 free VPN and proxy extensions have been found to target Russian-speaking users, intercepting browser traffic and routing it through a proxy infrastructure. (Source: The Hacker News) https://zerodayroom.com/news/flaw-ai-reasoning-apis-aa04ef/2026-08-16https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/flaw-ai-reasoning-apis-aa04ef.webpFlaw in AI Reasoning APIs Exposes Secrets and Private DataResearchers have discovered a vulnerability in the AI reasoning APIs of OpenAI, Anthropic, and Google, allowing them to recover internal reasoning and secrets from session logs, including API keys... https://zerodayroom.com/news/sharepoint-authentication-bypass-exploited-670241/2026-08-16https://pub-f44a693741274cceb4510229e592edc6.r2.dev/niche/zerodayroom/sharepoint-authentication-bypass-exploited-670241.webpSharePoint Authentication Bypass Exploited After PoC ReleaseThreat actors are actively exploiting a critical SharePoint vulnerability (CVE-2026-55040) after a proof-of-concept exploit was publicly released. The flaw allows unauthenticated attackers to... https://zerodayroom.com/vulnerabilities/2026-08-20 https://zerodayroom.com/threats/2026-08-24 https://zerodayroom.com/regulation-compliance/2026-08-20 https://zerodayroom.com/incidents/2026-08-24 https://zerodayroom.com/topics/sec-regulation-compliance/2026-08-20 https://zerodayroom.com/topics/sec-threats/2026-08-24 https://zerodayroom.com/topics/sec-vulnerabilities/2026-08-20 https://zerodayroom.com/about/ https://zerodayroom.com/sources-and-methods/ https://zerodayroom.com/corrections/