Threats · Aug 12, 2026
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone…
T
Threat Desk
Threat desk.
299 stories filedFiled by Threat Desk
CVE & Exploits · Aug 12, 2026
August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day
A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges. The post…
Malware · Aug 12, 2026
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign…
Threats · Aug 12, 2026
Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees
Delta Air Lines is investigating an unauthorized Wi-Fi network that appeared aboard a flight from Las Vegas to Atlanta…
CVE & Exploits · Aug 11, 2026
Microsoft Rolls Out KB5120249 Extended Security Update to Patch Windows 10 Vulnerabilities
Microsoft has officially deployed a new extended security update, designated as KB5120249, targeting older versions of…
CVE & Exploits · Aug 11, 2026
Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days
Today is Microsoft's August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including…
Phishing · Aug 11, 2026
Delta investigates in-flight Wi-Fi spoofing on post-DEF CON flight from Las Vegas
Delta Airlines said Tuesday it’s investigating an incident on a Monday flight where a passenger reportedly used…
CVE & Exploits · Aug 11, 2026
Zoom Patches “Zoomsday” Zero-Click Flaw Enabling Remote Code Execution
Zoom patches a zero-click flaw that could let a meeting participant execute code on another user’s computer through the…
CVE & Exploits · Aug 11, 2026
Windows 11 KB5121003 & KB5120240 cumulative updates released
Microsoft has released Windows 11 KB5121003 and KB5120240 cumulative updates for versions 25H2/24H2 and 23H2 to fix…
CVE & Exploits · Aug 11, 2026
Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws
The security defects could be exploited for arbitrary code execution and denial-of-service. The post Adobe Urges…
CVE & Exploits · Aug 11, 2026
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no…
Ransomware · Aug 11, 2026
ExfilSquad Targets New Victims, Shares Data via Torrents
ExfilSquad targets 13 organizations, exploiting cloud portals for data theft and using torrents to spread stolen…