CISA added 10 vulnerabilities to its Known Exploited Vulnerabilities catalog between 31 August and 6 September 2026, split across three batches: two on 31 August, seven on 2 September, one on 4 September. Six of the ten carry a CVSS score of 9.0 or higher, all ten have confirmed in-the-wild exploitation behind their KEV listing,… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 31 Aug to 06 Sep 2026
CISA added 9 vulnerabilities to the Known Exploited Vulnerabilities catalog between 17 and 23 August 2026, across five separate batches. Seven of the nine carry CVSS scores of 9.0 or above, all nine have confirmed in-the-wild exploitation, and one, the Microsoft SharePoint flaw CVE-2026-55040, was exploited within days of a public proof of concept. Patch… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 17 Aug to 23 Aug 2026
CISA added 3 vulnerabilities to its Known Exploited Vulnerabilities catalog between 10 and 16 August 2026, all in a single batch on 11 August. Five newly disclosed CVEs reached CVSS 9.0 or above in the window, all of them in SAP’s 11 August Patch Day. Four of the five critical CVEs this week covered in… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 10 Aug to 16 Aug 2026
The week of 13 to 19 July 2026 was defined by operational disruption. A ransomware attack shut down all US production at Coca-Cola’s Fairlife dairy subsidiary, attackers stole client tax documents from EY through a third-party support platform, and a previously undocumented threat actor exploited SonicWall VPN zero-days for weeks before public disclosure. One incident… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 13 Jul to 19 Jul 2026
Critical vulnerabilities dominated with Microsoft Patch Tuesday addressing 6 zero-days (CVE-2026-21510, CVE-2026-21513, CVE-2026-21514, CVE-2026-21519, CVE-2026-21533) exploited in Windows Shell and Office. ZLAN ICS devices face complete takeover via CVE-2026-XXXX series. Warlock ransomware exploited CVE-2026-23760 in SmarterMail. TeamPCP worm compromised 60K cloud servers. North Korea’s UNC1069 deployed AI deepfakes against crypto firms. FileZen command injection (CVE-2026-25108)… Read More »Weekly Report: New Hacking Techniques and Critical CVEs 10 Feb – 16 Feb 2026