Sunday, August 23, 2026 · generated · about 5 min read
Morning Brief
Patch today vendors with the most new CVEs today
- Linux 138
- fabrikar.com 17
- WordPress 2 critical 16
- nltk 11
- Unknown 9
- WWBN 7
- HashiCorp 5
- siyuan-note 4
- SourceCodester 4
- TRENDnet 1 critical 3
Ranked by CVE count. Each vendor opens the CVE Feed filtered to that vendor and these dates.
Top developments ranked by cross-source trending
-
Image: The Hacker News Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kernel-level file and registry operations on Windows systems ranging from Windows 7 through Windows 11 25H2, with no software flaw exploited and no driver imported from outside the machine. The driver, BTR.sys (Boot Time Removal Tool), is a
Also in Bleeping Computer Bleeping Computer Bleeping Computer +3
-
Apple Detected Something on These iPhones | Threat Wire
⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️ @endingwithali → Twitch: https://twitch.tv/endingwithali Twitter: https://twitter.com/endingwithali YouTube: https://youtube.com/@endingwithali Everywhere else: https://links.ali.dev Want to work with Ali? hak5@endingwithali.com [❗] Join the Patreon→ https://patreon.com/threatwire 0:00 0 - Intro 1 - Apple’s Threat Notifs 2 - US Hacks Back 3 - Worms R Back 4 - BSides News 5 - Outro LINKS 🔗 Story 1: Apple’s Threat Notifs https://thehackernews.com/2026/08/apple-warns-users-in-110-countries-they.html https://support.apple.com/en-us/102174 🔗 Story 2…
Also in Wired Security CCCS Alerts & Advisories The Register Security
-
Top 10 Best Wireless / Wi-Fi Security Solutions in 2026
Cisco Meraki scores highest in our 2026 evaluation of automatic Wi-Fi security solutions , combining cloud-managed simplicity with strong policy enforcement, while HPE Aruba leads on enterprise-grade wireless security depth, and Juniper Mist wins on AI-driven operations. Wi-Fi security solutions protect wireless networks through encryption (WPA3), authentication (802.1X), rogue access point detection, and client isolation, and in 2026 they increasingly enforce zero-trust policy at the point of connection. Here are the ten best, scored. The 2026 Wi-Fi Security Scorecard Each platform scored…
Also in The Hacker News The Register Security CCCS Alerts & Advisories
-
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. Kaspersky, which discovered the threat in June 2026, said the end goal of the malware is to serve a multi-stage downloader to enable ad fraud and creation of a proxy botnet. "The malware spread through the built-in updaters of
Also in Bleeping Computer Kaspersky Securelist
-
AWS Security makes an inscrutable choice
One of the best ways to lower your AWS bill by 99 percent or more is by not checking your keys into public GitHub repositories. Many of us have done this inadvertently over the years, and the defenses against it have improved dramatically (my personal favorite being "using non-ephemeral credentials derived from OIDC or SSO is an anti-pattern"), but it still happens. On Friday, BleepingComputer reported on a Truffle Security finding that hundreds of leaked AWS keys are root keys and are somehow still active and valid. AWS Security is full of very smart people who care deeply about a number of…
-
Named Pipes Under Attack: Securing Windows Interprocess Communication
Windows named pipes provide fast interprocess communication, but weak access controls can expose privileged services to untrusted processes. ThreatLocker explains how endpoint verification, command authorization, strict input validation, and narrowly scoped privileges can help secure named-pipe communication.
Also in Microsoft Security Microsoft Security Microsoft Security +1
-
What 45 Million wp2shell Exploit Attempts Reveal About the New Vulnerability Response Window
The latest wp2shell vulnerability was one of the biggest WordPress security events in history. The critical vulnerability chain combined two flaws that allowed unauthenticated attackers to exploit vulnerable sites and ultimately execute malicious code remotely, potentially taking control of them. In the first week after the disclosure, more than 45 million exploit attempts from nearly 150,000 unique network sources were made. And as the volume continued climbing, we saw just how fast vulnerability disclosure can turn into mass exploitation. For comparison, this scale was roughly 20x what was…
Also in Bleeping Computer
-
GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring
Also in CCCS Alerts & Advisories
-
Microsoft Expands Mailbox Storage From 50 GB to 100 GB for Users
Microsoft has started expanding primary mailbox storage for Microsoft 365 Business Basic, Business Standard, and Business Premium users. Eligible users can now receive up to 100 GB of Exchange Online mailbox capacity , doubling the previous 50 GB entitlement. The change is part of Microsoft’s 2026 packaging updates, which began rolling out in June and are expected to continue through September. Microsoft also issued advance tenant notifications through the Message Center before the service-plan changes became available. The increased capacity applies only to the primary mailbox. It does not…
Also in Microsoft Security Microsoft Security
-
Twitch wants your content for Amazon AI training. Here’s how to opt out
The Dutch Autoriteit Persoonsgegevens (AP) has advised Twitch users to opt out of sharing data with Amazon AI. Twitch launched as a live-video platform and is currently owned by Amazon. Its core product is live broadcasting with a built-in chat culture: streamers broadcast gameplay, commentary, performances or other live content while viewers interact in real time. Twitch is one of the world’s largest livestreaming platforms, with millions of people broadcasting and watching content every month. Last week we learned that Twitch allows Amazon to use content from its platform to train…
Also in Bleeping Computer
Vulnerability watch what to look at, most urgent first
| Details | CVE | Product | Severity | CVSS | EPSS | KEV | Fix | In the news | |
|---|---|---|---|---|---|---|---|---|---|
| Highest scoring today 10new CVEs, highest CVSS first | |||||||||
| CVE-2026-77946 | TEW-821DAPTRENDnet | Critical | 10.0 | — | — | — | — | CVSS 10.0 | |
What it isA vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected by this vulnerability is the function uci_safe_get of the file /cgi-bin/apply_time.cgi of the component NTP Timezone Configuration Handler. Executing a manipulation o… Attack
Exploitation
|
|||||||||
| CVE-2026-78050 | CF-N1-SComfast | Critical | 9.9 | — | — | — | — | CVSS 9.9 | |
What it isA vulnerability was found in Comfast CF-N1-S 2.6.0.1. The affected element is the function sub_41AD7C of the file /cgi-bin/mbox-config?method=SET§ion=ntp_timezone of the component Web Management. The manipulation of the argument timestr… Attack
Exploitation
|
|||||||||
| CVE-2026-78003 | Mailgun for WordPressWordPress | Critical | 9.8 | 0.5% | — | — | — | EPSS 0.5%CVSS 9.8 | |
What it isThe Mailgun for WordPress plugin for WordPress is vulnerable to Server-Side Request Forgery (SSRF) via path traversal in versions up to and including 2.2.0. This is due to insufficient input validation in the add_list() function, which acce… Attack
Exploitation
|
|||||||||
| CVE-2026-4703 | WS Form LITE – Drag & Drop Contact Form BuilderWordPress | Critical | 9.8 | — | — | — | — | CVSS 9.8 | |
What it isThe WS Form LITE – Drag & Drop Contact Form Builder plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.10.80 via deserialization of untrusted input from form submission meta values. This makes… Attack
Exploitation
|
|||||||||
| CVE-2026-59808 | AVideoWWBN | High | 8.8 | — | — | — | — | CVSS 8.8 | |
What it isAVideo through commit 9c39d8c8 contains an authentication bypass vulnerability where deduplicateByEncoderQueueId() returns video_id_hash credentials for any video by encoder_queue_id without ownership verification, and useVideoHashOrLogin()… Attack
Exploitation
|
|||||||||
| CVE-2026-71513 | nltknltk | High | 8.8 | — | — | — | — | CVSS 8.8 | |
What it isNLTK before 3.10.3 contains a remote code execution vulnerability in AllowlistUnpickler that validates only the pickle module string and not the global name, allowing attackers to resolve dotted names by attribute traversal to callables out… Attack
Exploitation
|
|||||||||
| CVE-2026-0551 | PPWP – Password Protect PagesWordPress | High | 8.8 | — | — | — | — | CVSS 8.8 | |
What it isThe PPWP – Password Protect Pages plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.9.18 via deserialization of untrusted input from the 'post_protection_roles' vulnerable parameter. This mak… Attack
Exploitation
|
|||||||||
| CVE-2026-16149 | Security HardenerWordPress | High | 8.8 | — | — | — | — | CVSS 8.8 | |
What it isThe Security Hardener plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.4.4. The vulnerability exists because the plugin's user-enumeration protection, which is enabled by default, hooks the… Attack
Exploitation
|
|||||||||
| CVE-2026-60084 | siyuansiyuan-note | High | 8.7 | — | — | — | — | CVSS 8.7 | |
What it isSiYuan versions before v3.7.4 contain an arbitrary file deletion vulnerability in the /api/search/removeTemplate endpoint that accepts an unvalidated path parameter passed directly to os.RemoveAll. Authenticated admin attackers can supply a… Attack
Exploitation
|
|||||||||
| CVE-2026-57998 | better-npm-auditjeemok | High | 7.8 | — | — | — | — | CVSS 7.8 | |
What it isbetter-npm-audit through 3.11.0, and the 4.0.0-rc.2 prerelease, builds its npm audit command by interpolating the user-supplied --registry option into a command string in src/handlers/handleInput.ts without validation or quoting, then passe… Attack
Exploitation
|
|||||||||
Click a row, or press +, to expand it.EPSS is FIRST's estimated chance of exploitation in the next 30 days.Full CVE Feed
Assembled automatically, once a day, from data the Security Feed and CVE Feed already collect and score. No AI writes any of this, and every number traces back to something already published on those two tools.
Top developments come from the Security Feed's cross-source trending detection. Vulnerability watch comes from the CVE Feed's daily NVD and CISA KEV sync.