https://zerodayroom.com/2026-08-21https://zerodayroom.com/share-home.svg https://zerodayroom.com/news/suspected-russian-hackers-abuse/2026-08-21https://zerodayroom.com/share-suspected-russian-hackers-abuse.svgEntrepreneur, cellular, phone, technology, marketing, social media.Three suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to compromise personal accounts across multiple platforms https://zerodayroom.com/news/cdn-tsunami-attack-abuses/2026-08-21https://zerodayroom.com/share-cdn-tsunami-attack-abuses.svgCyber security, hacker, code, fraud, technology, cyber.Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests... https://zerodayroom.com/news/rust-supply-chain-attack/2026-08-21https://zerodayroom.com/share-rust-supply-chain-attack.svgSteel, iron, industry, rusty, machine, wheel.A supply chain attack on the Rust programming language has compromised three widely used crates, potentially affecting 245 million downloads. The attack was carried out by a compromised maintainer... https://zerodayroom.com/news/manic-android-malware-uses/2026-08-21https://zerodayroom.com/share-manic-android-malware-uses.svgPersonal data, personal security, cyber attacks, hacking, malware, computer service.A new Android malware, codenamed Manic, has been discovered targeting financial institutions, government services, and messaging applications, with the ability to exfiltrate data from offline... https://zerodayroom.com/news/shady-ai-next-big/2026-08-20https://zerodayroom.com/share-shady-ai-next-big.svgVpn, vpn for android, vpn for mobile, vpn for iphone, free vpn, vpn for computer. CybersecurityThe increasing use of approved AI tools in unapproved ways is creating a new governance problem for cybersecurity teams, known as 'shady AI' (Source: The Hacker News) https://zerodayroom.com/news/cryptographic-context-injection-attack/2026-08-20https://zerodayroom.com/share-cryptographic-context-injection-attack.svgA man with a beard and eyeglasses looking at the camera, illuminated by binary code projection...Adversa AI discloses a new attack technique that can cause xAI's Grok chatbot to send user data to an attacker-controlled server (Source: The Hacker News) https://zerodayroom.com/news/ai-generated-exploit-scripts/2026-08-20https://zerodayroom.com/share-ai-generated-exploit-scripts.svgDesk, work, working, work space, white, minimal. Cybersecurity TechThe US government has warned of an active threat targeting critical infrastructure organizations using AI-generated exploit scripts to target Siemens S7 Series Programmable Logic Controllers (PLCs). https://zerodayroom.com/news/toxicpanda-golddigger-expand-android/2026-08-20https://zerodayroom.com/share-toxicpanda-golddigger-expand-android.svgA programmer working on code with a laptop and monitor setup in an office. CybersecurityCybersecurity researchers have discovered updates to the ToxicPanda and GoldDigger Android malware, which now have enhanced capabilities to steal banking and cryptocurrency credentials https://zerodayroom.com/news/silkparasite-espionage-campaign-targets/2026-08-20https://zerodayroom.com/share-silkparasite-espionage-campaign-targets.svgA close-up of a circuit board with a network cable plugged into it, partially hidden behind a...A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion set makes use of seven remote access tool (RAT)... https://zerodayroom.com/news/openai-halts-frontier-rl/2026-08-20https://zerodayroom.com/share-openai-halts-frontier-rl.svgA close-up of a technician's hands, fingers tracing over a printed circuit board with exposed...OpenAI temporarily pauses reinforcement learning training for its advanced AI models to enhance monitoring, alignment, and security safeguards. The move follows recent incidents where AI agents... https://zerodayroom.com/news/cloudflare-workers-vulnerable-spectre/2026-08-20https://zerodayroom.com/share-cloudflare-workers-vulnerable-spectre.svgA close-up of a Cloudflare Workers dashboard screen, with a cryptic error message and abstract...Cybersecurity researchers have disclosed a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12... https://zerodayroom.com/news/elementor-pro-flaw-exposes/2026-08-20https://zerodayroom.com/share-elementor-pro-flaw-exposes.svgA close-up of a computer screen displaying a cryptic error message on a WordPress website, with...A critical vulnerability in the Elementor Pro plugin allows unauthenticated attackers to upload PHP files and execute code on affected systems. (Source: The Hacker News) https://zerodayroom.com/news/twinloot-abuses-sharepoint-teams/2026-08-19https://zerodayroom.com/share-twinloot-abuses-sharepoint-teams.svgCreative collage with cut-out letters spelling 'Ethical Hacking' on a striped background...Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT, which abuses SharePoint and Teams to steal credentials and move across networks. https://zerodayroom.com/news/typosquatted-rubygems-packages-steal/2026-08-19https://zerodayroom.com/share-typosquatted-rubygems-packages-steal.svgVpn, vpn for home security, vpn for android, vpn for mobile, vpn for iphone, free vpn. CybersecurityCybersecurity researchers have discovered a new typosquatting campaign targeting RubyGems users with a Windows-based information stealer. The campaign, dubbed StubMaker, has been tracked by... https://zerodayroom.com/news/safepal-hardware-wallet-maker/2026-08-19https://zerodayroom.com/share-safepal-hardware-wallet-maker.svgKeyboard, computers, computer, equipment, electronics, black. Cybersecurity equipmentSafePal, a hardware wallet maker, has disclosed an authorization flaw in an order-tracking plug-in that exposed the data of approximately 39,798 customers. (Source: The Hacker News) https://zerodayroom.com/news/one-attacker-scrapes-salesforce/2026-08-19https://zerodayroom.com/share-one-attacker-scrapes-salesforce.svgRotterdam, maastoren, nature, erasmus bridge, clothesline, skyline. Cybersecurity modernA single attacker has been scraping records from both Salesforce and ServiceNow customer portals across multiple industries for over a year. (Source: The Hacker News) https://zerodayroom.com/news/ransomware-affiliate-ransom-busters/2026-08-18https://zerodayroom.com/share-ransomware-affiliate-ransom-busters.svgSheep tick, castor bean tick, taiga tick wood tick, free, free background, insect. Cybersecurity...A ransomware affiliate, 'Ransom Busters', has been sending emails to victim organizations claiming to delete stolen data from ransomware groups' servers in exchange for a fee ranging from $20,000... https://zerodayroom.com/news/attackers-exploit-mlflow-ssrf/2026-08-18https://zerodayroom.com/share-attackers-exploit-mlflow-ssrf.svgClose-up of a glowing laptop keypad with digital interface, representing futuristic technology...Malicious actors are targeting open-source AI platform MLflow and web-based SCADA software FUXA with critical vulnerabilities. (Source: The Hacker News) https://zerodayroom.com/news/ai-mind-viruses-demonstrate/2026-08-18https://zerodayroom.com/share-ai-mind-viruses-demonstrate.svgTechnology, cool backgrounds, background, metaverse, full, free background. CybersecurityResearchers at Anthropic and EPFL have shown that AI agents can spread self-propagating payloads, dubbed 'mind viruses,' through persistent system prompt files. While no wild infections have been... https://zerodayroom.com/news/microsoft-copilot-personal-flaws/2026-08-18https://zerodayroom.com/share-microsoft-copilot-personal-flaws.svgVpn, vpn for home security, vpn for android, vpn for mobile, vpn for iphone, free vpn. CybersecurityVaronis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that could allow a single click on a crafted link to silently pull data from connected apps and other... https://zerodayroom.com/news/critical-gitlab-graphql-flaw/2026-08-18https://zerodayroom.com/share-critical-gitlab-graphql-flaw.svgWooden tiles spell 'CYBERSEC' against a soft-focused green background. Cybersecurity close upGitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software. (Source: The Hacker News) https://zerodayroom.com/news/unisoc-volte-video-call/2026-08-18https://zerodayroom.com/share-unisoc-volte-video-call.svgVibrant green numbers on a computer screen, showcasing binary code and data streams...Security researchers have discovered a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call. (Source: The Hacker News) https://zerodayroom.com/news/cisa-flags-actively-exploited/2026-08-18https://zerodayroom.com/share-cisa-flags-actively-exploited.svgClose-up of a laptop displaying cybersecurity text, emphasizing digital security themes...The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. https://zerodayroom.com/news/mcp-servers-hidden-gap/2026-08-18https://zerodayroom.com/share-mcp-servers-hidden-gap.svgRyzen, processor, multi core, cpu, component, technology. Cybersecurity TechMCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access, and prompt injection, highlighting the need for robust security measures to protect... https://zerodayroom.com/news/cavern-c2-framework-evolves/2026-08-17https://zerodayroom.com/share-cavern-c2-framework-evolves.svgA close-up of a server rack's rear panel, with a shallow depth of field blurring the background...Kaspersky researchers have discovered new components in the Cavern command-and-control framework used by Iranian nation-state hackers, expanding its communication capabilities and allowing it to... https://zerodayroom.com/news/cybersecurity-threats-week-review/2026-08-17https://zerodayroom.com/share-cybersecurity-threats-week-review.svgA close-up of a cybersecurity analyst's hands, seen from behind, as they frantically type on a...A summary of the latest cybersecurity threats and vulnerabilities. (Source: The Hacker News) https://zerodayroom.com/news/snowflake-github-actions-flaw/2026-08-17https://zerodayroom.com/share-snowflake-github-actions-flaw.svgA close-up of a computer screen showing a GitHub Actions workflow with a red "error"...A vulnerability in Snowflake's public GitHub repository allowed attackers to inject commands into a workflow containing internal Jira credentials, potentially exposing sensitive information. https://zerodayroom.com/news/critical-flaws-wordpress-plugins/2026-08-17https://zerodayroom.com/share-critical-flaws-wordpress-plugins.svgA close-up of a person's hands typing on a laptop keyboard, with the screen displaying a...Two high-severity vulnerabilities have been discovered in popular WordPress plugins, Forminator Forms and User Profile Builder, allowing unauthenticated attackers to execute arbitrary code and... https://zerodayroom.com/news/microsoft-defender-patch-bypass-e95232/2026-08-17https://zerodayroom.com/share-microsoft-defender-patch-bypass-e95232.svgA close-up of a security researcher's hands, mid-action, as they frantically type on a keyboard...A security researcher has released a proof-of-concept exploit for a Microsoft zero-day vulnerability, claiming it can bypass a previously released patch and grant an attacker SYSTEM-level privileges. https://zerodayroom.com/news/cisco-asa-ftd-flaw-ede96a/2026-08-17https://zerodayroom.com/share-cisco-asa-ftd-flaw-ede96a.svgA close-up of a Cisco ASA firewall's circuit board, with a shallow depth of field emphasizing...A high-severity vulnerability in Cisco's Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild, allowing an... https://zerodayroom.com/news/sap-commerce-cloud-vulnerability-9c4fb6/2026-08-17https://zerodayroom.com/share-sap-commerce-cloud-vulnerability-9c4fb6.svgA close-up of a circuit board with a Data Hub Adapter chip at its center, its pins and...SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. (Source: The Hacker News) https://zerodayroom.com/news/microsoft-patches-flaws-including-73b10d/2026-08-17https://zerodayroom.com/share-microsoft-patches-flaws-including-73b10d.svgA close-up of a Windows Server administrator's hands, seen from behind, as they frantically...Microsoft has released its monthly security updates, addressing 398 flaws, including a Windows driver zero-day under active attack. (Source: The Hacker News) https://zerodayroom.com/news/adobe-patches-critical-flaws-96b5e1/2026-08-16https://zerodayroom.com/share-adobe-patches-critical-flaws-96b5e1.svgDesk, laptop, computer, macbook, business, work. Cybersecurity TechAdobe releases updates to address multiple critical security vulnerabilities in ColdFusion, Commerce, and Campaign Classic, with some flaws having a CVSS score of 10.0. (Source: The Hacker News) https://zerodayroom.com/news/malicious-litellm-releases-may-1b59d6/2026-08-16https://zerodayroom.com/share-malicious-litellm-releases-may-1b59d6.svgWoman using multiple screens for cybersecurity tasks in a cozy home office. Cybersecurity...A recent investigation has revealed that two malicious LiteLLM releases were published on PyPI in March, potentially exposing over 2,500 organizations to credential-stealing code. https://zerodayroom.com/news/attackers-exploit-vmware-vcenter-a0ae0c/2026-08-16https://zerodayroom.com/share-attackers-exploit-vmware-vcenter-a0ae0c.svgPerson holding anonymous mask near servers, hinting at cybersecurity and hacking themes...Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability, CVE-2026-59310, is a... https://zerodayroom.com/news/enterprise-defenses-recovered-edge-2689d1/2026-08-16https://zerodayroom.com/share-enterprise-defenses-recovered-edge-2689d1.svgClose-up of dual computer monitors with green coding interfaces in a dark room, highlighting...A recent report by Picus Labs reveals that enterprise defenses have made significant improvements at the perimeter, but are struggling to prevent quiet attacks inside the network. https://zerodayroom.com/news/lazarus-group-exploits-windows-a82e1d/2026-08-16https://zerodayroom.com/share-lazarus-group-exploits-windows-a82e1d.svgHacker, smartphone, fraud, personality, human, mask. CybersecurityThe North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen... https://zerodayroom.com/news/chrome-vpn-extensions-caught-af9804/2026-08-16https://zerodayroom.com/share-chrome-vpn-extensions-caught-af9804.svgVpn for entertainment, what is a vpn, data privacy, network security, cybersecurity, china vpn...A set of 737 free VPN and proxy extensions have been found to target Russian-speaking users, intercepting browser traffic and routing it through a proxy infrastructure. (Source: The Hacker News) https://zerodayroom.com/news/flaw-ai-reasoning-apis-aa04ef/2026-08-16https://zerodayroom.com/share-flaw-ai-reasoning-apis-aa04ef.svgSide view of crop anonymous male cyber thief accessing information on desktop computer screens...Researchers have discovered a vulnerability in the AI reasoning APIs of OpenAI, Anthropic, and Google, allowing them to recover internal reasoning and secrets from session logs, including API keys... https://zerodayroom.com/news/sharepoint-authentication-bypass-exploited-670241/2026-08-16https://zerodayroom.com/share-sharepoint-authentication-bypass-exploited-670241.svgCircuit, industry, element, terminals, connector. Cybersecurity industryThreat actors are actively exploiting a critical SharePoint vulnerability (CVE-2026-55040) after a proof-of-concept exploit was publicly released. The flaw allows unauthenticated attackers to... https://zerodayroom.com/vulnerabilities/2026-08-20 https://zerodayroom.com/threats/2026-08-21 https://zerodayroom.com/regulation-compliance/2026-08-20 https://zerodayroom.com/about/ https://zerodayroom.com/sources-and-methods/ https://zerodayroom.com/corrections/