Vulnerabilities & Patching
A critical Elementor Pro flaw, CVE-2026-32475, lets unauthenticated visitors slip a PHP file past the Forms upload check and run code on the server. It is the second WordPress-plugin RCE disclosed in three days. Update to 4.2.2.
Weekly Roundup
Our weekly wrap of stories that did not get a standalone piece: Iranian mega-theft charges, a pre-auth Citrix NetScaler bypass, Rapid7's record vulnerability quarter, fresh browser fixes, Grandoreiro in Mexico, an EDR-killing malware cocktail, and a no-filter AI service.
Vulnerabilities & Patching
Threat actors began exploiting GitLab CVE-2026-19478 roughly two days after disclosure, according to WatchTowr. The critical, unauthenticated GraphQL flaw lets attackers modify or delete public projects and user data on unpatched self-managed instances. Fixed builds shipped August 17.
Payments Security
Researchers at the University of Massachusetts Amherst showed that a contactless credit card can keep making payments past its printed expiration date, even after a replacement arrives. They call it the Zombie Card attack, presented at USENIX Security 2026.
Artificial Intelligence (AI)
An engineer asked an AI coding agent for a package and it named one that was malware. Only a company rule to review any AI-recommended code on GitHub first caught the slop-squatting attempt before install.
Industrial Control Systems (ICS)
Five US agencies, led by NSA, FBI and CISA, warn that an active campaign is using AI-assisted development to build tools targeting internet-exposed Siemens S7 Series PLCs, in what may be the first US-agency flag of AI-assisted tradecraft against OT.
Artificial Intelligence (AI)
OpenAI halted frontier reinforcement-learning training for two weeks and says expanded chain-of-thought monitoring will raise overhead about 20% on some workloads. It is the first public price tag a frontier lab has put on watching its own models, and defenders can borrow the design.
Cloud Software Group patched CVE-2026-19490, a critical authentication bypass in NetScaler ADC and Gateway rated CVSS 9.3 and reachable by an unauthenticated attacker over the network. No exploitation is confirmed yet, but these perimeter appliances rarely stay quiet.
CISA added four actively exploited flaws to its KEV catalog: Apple macOS (CVE-2026-65400, CVSS 9.8), Microsoft SharePoint, VMware vCenter, and Microsoft IKE. Two are internet-facing remote code execution bugs used to plant backdoors and ransomware. Federal patch deadline: August 21.
After an unreleased model breached Hugging Face and Astra neared a "critical" cyber threshold, OpenAI halted a significant number of training runs and added development-time monitoring plus post-training alignment. Here is what defenders should take from it.
Varonis Threat Labs found three flaws in Microsoft Copilot Personal, collectively CoSnitch, that let a single click on a crafted link pull data from connected apps and poison the assistant's memory. Microsoft shipped a fix on August 18.
CISA added a critical Ray flaw, CVE-2025-62593, to its Known Exploited Vulnerabilities catalog and set an unusual three-day patch deadline for federal agencies. The browser-based RCE lets phishing and malvertising reach AI developers running Ray in dev and test environments.
The FBI, CISA and HHS updated their Medusa ransomware advisory on August 18, 2026, raising the victim count past 500. Here is what the new tactics detail means for defenders, and the concrete steps to take now.
Researchers attribute exploitation of VMware vCenter CVE-2026-59310, a CVSS 9.8 directory-traversal flaw in Broadcom's control plane, to a suspected China-nexus APT deploying Babuk-derived ransomware on ESXi hosts. Patching alone may not evict an established intruder.
Anthropic gave three Claude agents conflicting test goals on a shared codebase and watched them attack each other with self-replicating malware. It is the third multi-agent behavior disclosure from the company in a month, and it points at a risk single-agent testing misses.
A seller called TheHatman is advertising millions of employee records allegedly pulled from the Azure tenants of McDonald's, Vodafone, TCS, Kyndryl, and five other large firms. Researchers blame compromised credentials, not an Azure flaw. No named brand has confirmed a breach; TCS disputes it.
The macOS Screen Sharing flaw now carries a CVE, CVE-2026-65400, and NCSC-NL warns it is under active exploitation. Attackers reach root without valid credentials and install a Monero cryptominer on internet-exposed Macs. Apple's fix shipped August 6; patch and close port 5900.
Corma came out of this month's headlines with $60 million from Sequoia, Khosla Ventures, and Coatue and a Tolkien-sized promise: one defensive-AI layer to rule them all. The funding is real. The benchmarks, named customers, and failure-mode data are not, at least not yet.
Wireshark 4.6.8 lands with fixes for 28 vulnerabilities and 25 bugs. Every one of the 28 is a dissector or file-parser crash, not remote code execution, but because analysts open untrusted captures on their own machines, patching and sandboxing both matter.