https://zerodayroom.com/2026-08-20https://zerodayroom.com/share-home.svg https://zerodayroom.com/news/cryptographic-context-injection-attack/2026-08-20https://zerodayroom.com/share-cryptographic-context-injection-attack.svgNew Cryptographic Context Injection Attack Puts Grok Chat Data at RiskAdversa AI discloses a new attack technique that can cause xAI's Grok chatbot to send user data to an attacker-controlled server (Source: The Hacker News) https://zerodayroom.com/news/shady-ai-next-big/2026-08-20https://zerodayroom.com/share-shady-ai-next-big.svgShady AI: The Next Big Governance Problem in CybersecurityThe increasing use of approved AI tools in unapproved ways is creating a new governance problem for cybersecurity teams, known as 'shady AI' (Source: The Hacker News) https://zerodayroom.com/news/ai-generated-exploit-scripts/2026-08-20https://zerodayroom.com/share-ai-generated-exploit-scripts.svgAI-Generated Exploit Scripts Target US Critical InfrastructureThe US government has warned of an active threat targeting critical infrastructure organizations using AI-generated exploit scripts to target Siemens S7 Series Programmable Logic Controllers (PLCs). https://zerodayroom.com/news/toxicpanda-golddigger-expand-android/2026-08-20https://zerodayroom.com/share-toxicpanda-golddigger-expand-android.svgToxicPanda 2.0 and GoldDigger Expand Android Banking AttacksCybersecurity researchers have discovered updates to the ToxicPanda and GoldDigger Android malware, which now have enhanced capabilities to steal banking and cryptocurrency credentials https://zerodayroom.com/news/silkparasite-espionage-campaign-targets/2026-08-20https://zerodayroom.com/share-silkparasite-espionage-campaign-targets.svgSilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATsA previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion set makes use of seven remote access tool (RAT)... https://zerodayroom.com/news/openai-halts-frontier-rl/2026-08-20https://zerodayroom.com/share-openai-halts-frontier-rl.svgOpenAI Halts Frontier RL Training to Strengthen AI Safety MeasuresOpenAI temporarily pauses reinforcement learning training for its advanced AI models to enhance monitoring, alignment, and security safeguards. The move follows recent incidents where AI agents... https://zerodayroom.com/news/cloudflare-workers-vulnerable-spectre/2026-08-20https://zerodayroom.com/share-cloudflare-workers-vulnerable-spectre.svgCloudflare Workers Vulnerable to Spectre Attack, Leaking JWT at 12 Bits/SecondCybersecurity researchers have disclosed a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits... https://zerodayroom.com/news/elementor-pro-flaw-exposes/2026-08-20https://zerodayroom.com/share-elementor-pro-flaw-exposes.svgElementor Pro Flaw Exposes WordPress Sites to Remote Code ExecutionA critical vulnerability in the Elementor Pro plugin allows unauthenticated attackers to upload PHP files and execute code on affected systems. (Source: The Hacker News) https://zerodayroom.com/news/twinloot-abuses-sharepoint-teams/2026-08-19https://zerodayroom.com/share-twinloot-abuses-sharepoint-teams.svgTWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across NetworksCybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT, which abuses SharePoint and Teams to steal credentials and move across networks. https://zerodayroom.com/news/typosquatted-rubygems-packages-steal/2026-08-19https://zerodayroom.com/share-typosquatted-rubygems-packages-steal.svgTyposquatted RubyGems Packages Steal Browser Credentials and Crypto WalletsCybersecurity researchers have discovered a new typosquatting campaign targeting RubyGems users with a Windows-based information stealer. The campaign, dubbed StubMaker, has been tracked by... https://zerodayroom.com/news/one-attacker-scrapes-salesforce/2026-08-19https://zerodayroom.com/share-one-attacker-scrapes-salesforce.svgOne Attacker Scrapes Salesforce and ServiceNow PortalsA single attacker has been scraping records from both Salesforce and ServiceNow customer portals across multiple industries for over a year. (Source: The Hacker News) https://zerodayroom.com/news/safepal-hardware-wallet-maker/2026-08-19https://zerodayroom.com/share-safepal-hardware-wallet-maker.svgSafePal Hardware Wallet Maker Discloses Data Exposure Affecting Nearly 40,000 CustomersSafePal, a hardware wallet maker, has disclosed an authorization flaw in an order-tracking plug-in that exposed the data of approximately 39,798 customers. (Source: The Hacker News) https://zerodayroom.com/news/attackers-exploit-mlflow-ssrf/2026-08-18https://zerodayroom.com/share-attackers-exploit-mlflow-ssrf.svgAttackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and SecretsMalicious actors are targeting open-source AI platform MLflow and web-based SCADA software FUXA with critical vulnerabilities. (Source: The Hacker News) https://zerodayroom.com/news/ransomware-affiliate-ransom-busters/2026-08-18https://zerodayroom.com/share-ransomware-affiliate-ransom-busters.svgRansomware Affiliate 'Ransom Busters' Claims to Delete Stolen Data for a FeeA ransomware affiliate, 'Ransom Busters', has been sending emails to victim organizations claiming to delete stolen data from ransomware groups' servers in exchange for a fee ranging from $20,000 to... https://zerodayroom.com/news/ai-mind-viruses-demonstrate/2026-08-18https://zerodayroom.com/share-ai-mind-viruses-demonstrate.svgAI 'Mind Viruses' Demonstrate Self-Replicating Payloads Across Agent NetworksResearchers at Anthropic and EPFL have shown that AI agents can spread self-propagating payloads, dubbed 'mind viruses,' through persistent system prompt files. While no wild infections have been... https://zerodayroom.com/news/microsoft-copilot-personal-flaws/2026-08-18https://zerodayroom.com/share-microsoft-copilot-personal-flaws.svgMicrosoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected AppsVaronis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that could allow a single click on a crafted link to silently pull data from connected apps and other information... https://zerodayroom.com/news/cisa-flags-actively-exploited/2026-08-18https://zerodayroom.com/share-cisa-flags-actively-exploited.svgCISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCEThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. https://zerodayroom.com/news/critical-gitlab-graphql-flaw/2026-08-18https://zerodayroom.com/share-critical-gitlab-graphql-flaw.svgCritical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public ProjectsGitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software. (Source: The Hacker News) https://zerodayroom.com/news/unisoc-volte-video-call/2026-08-18https://zerodayroom.com/share-unisoc-volte-video-call.svgUnisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel AccessSecurity researchers have discovered a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call. (Source: The Hacker News) https://zerodayroom.com/news/mcp-servers-hidden-gap/2026-08-18https://zerodayroom.com/share-mcp-servers-hidden-gap.svgMCP Servers: A Hidden Gap in Enterprise SecurityMCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access, and prompt injection, highlighting the need for robust security measures to protect... https://zerodayroom.com/news/cavern-c2-framework-evolves/2026-08-17https://zerodayroom.com/share-cavern-c2-framework-evolves.svgCavern C2 Framework Evolves with New Communication Module and Google Apps Script RelayKaspersky researchers have discovered new components in the Cavern command-and-control framework used by Iranian nation-state hackers, expanding its communication capabilities and allowing it to... https://zerodayroom.com/news/cybersecurity-threats-week-review/2026-08-17https://zerodayroom.com/share-cybersecurity-threats-week-review.svgCybersecurity Threats: A Week in ReviewA summary of the latest cybersecurity threats and vulnerabilities. (Source: The Hacker News) https://zerodayroom.com/news/snowflake-github-actions-flaw/2026-08-17https://zerodayroom.com/share-snowflake-github-actions-flaw.svgSnowflake GitHub Actions Flaw Exposes Jira Credentials to Workflow Injection AttacksA vulnerability in Snowflake's public GitHub repository allowed attackers to inject commands into a workflow containing internal Jira credentials, potentially exposing sensitive information. https://zerodayroom.com/news/critical-flaws-wordpress-plugins/2026-08-17https://zerodayroom.com/share-critical-flaws-wordpress-plugins.svgCritical Flaws in WordPress Plugins Expose Sites to Unauthenticated RCE and Auth Bypass AttacksTwo high-severity vulnerabilities have been discovered in popular WordPress plugins, Forminator Forms and User Profile Builder, allowing unauthenticated attackers to execute arbitrary code and gain... https://zerodayroom.com/vulnerabilities/2026-08-20 https://zerodayroom.com/threats/2026-08-20 https://zerodayroom.com/about/ https://zerodayroom.com/sources-and-methods/ https://zerodayroom.com/corrections/