LIVE · cybersecurity feed
Live wire
Oracle August 2026 Critical Security Patch Update Addresses 925 CVEsOpenAI Overhauls Safety Protocols After Its AI Agents Went RogueCVE-2026-68820 · CVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires NowMore than 200 victims of Medusa ransomware identified over the last year, CISA saysAttackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and SecretsHunting MacSync Stealer infrastructure through behavioral pivotsRansom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security MissedCISA gives feds 3 days to fix actively exploited Ray RCE bugEnterprise Software Has 4.31x More Critical Vulnerabilities
CVE-2026-33824

U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-33824 is a Windows Internet Key Exchan

zeroday.news ·

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, mandating that federal agencies patch them by August 21, 2026. The newly cataloged flaws affect Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft Internet Key Exchange (IKE) Service Extensions.

One of the critical vulnerabilities, CVE-2026-33824, is a double-free remote code execution flaw in Windows IKE Service Extensions, carrying a CVSS score of 9.8. This vulnerability could allow remote attackers to execute arbitrary code on systems where IKE is enabled. While blocking UDP ports 500 and 4500 can mitigate external threats, internal attackers could still exploit it for lateral movement, necessitating prompt patching.

Another significant entry is CVE-2026-55040, an authentication bypass in Microsoft SharePoint Server Subscription Edition with a CVSS score of 9.1. This flaw allows an unauthenticated attacker to forge JSON Web Tokens (JWTs) and impersonate any SharePoint user, including administrators. The exploit chain leverages a combination of weaknesses in JWT validation, including the ability to specify "alg: none" in the outer header to bypass signature requirements and misuse SharePoint's own STS certificate thumbprint. Researchers from Defused observed attackers actively exploiting this vulnerability against honeypots using a proof-of-concept developed by Rapid7.

Broadcom VMware vCenter is affected by CVE-2026-59310, a path traversal vulnerability in the Syslog server, also rated with a critical CVSSv3 base score of 9.8. This flaw enables a malicious actor with network access to vCenter to execute arbitrary code on the system.

Finally, CVE-2026-65400 addresses an improper authentication vulnerability in Apple macOS's built-in Screen Sharing feature. This flaw, which has no CVSS score provided, could allow an attacker on the network to authenticate to Screen Sharing without valid credentials. Apple released patches for this issue on August 15, 2026, with macOS Tahoe 26.6.1, macOS Sequoia 15.7.9, and macOS Sonoma 14.8.9. The Dutch National Cyber Security Centre confirmed active exploitation of this vulnerability less than two weeks after Apple issued the fix. Apple credited researcher Alfredo Pesoli of Bynario Atlas for discovering the flaw.

CISA's Binding Operational Directive (BOD) 22-01 requires all Federal Civilian Executive Branch (FCEB) agencies to remediate vulnerabilities listed in the KEV catalog by specified due dates to protect their networks. CISA also strongly recommends that private sector organizations review the catalog and address these vulnerabilities within their own infrastructures.

vulnerabilitycloud
ShareXLinkedInWhatsAppFacebook

More News

view all →
ai

OpenAI puts major frontier AI training run on hold over cyber risks

OpenAI temporarily paused reinforcement learning (RL) training on its latest models intended for deployment for two weeks while it hardened and red-teamed research environments and expanded monitoring. “Our largest planned frontier RL run remains on hold while we conduct smaller-scale training and evaluations to assess model behavior, validate our safeguards, and establish more evidence of alignme

security

UK Fraud Cases Hit Record High in 2026

Cifas data finds account takeover and identity fraud are driving a surge in fraud cases

breach

50,000 Stripe Secrets Leaked in Public Code

Over 50,000 exposed Stripe API keys show how leaked secrets can enable fraud, data access and account abuse within hours. Ransomnews researchers have documented a large-scale leak of Stripe merchant API keys found exposed in public code repositories, GitHub Actions logs, and misconfigured web servers, with over 50,000 unique keys identified in total. The research […]

security

Cyberattack forces UT San Antonio to delay start of fall semester

The University of Texas at San Antonio pushed back the start of its fall semester by three days after a cyberattack targeted its academic network over the weekend. Classes that were due to begin on Wednesday, August 19 will now start on Monday, August 24. UT San Antonio is one of the largest universities in Texas, serving more than 42,000 students. According to a statement issued by Andrea Marks,

patch

Prison for data analyst who tried to extort $2.5 million from his employer

When Cameron Curry discovered that his contract as a data analyst wasn't going to be renewed, he could have updated his LinkedIn profile. He could have started sending out his resume. But what the 27-year-old from Charlotte, North Carolina, did instead was turn to extortion. Read more in my article on the Hot for Security blog.

breach

CareCloud Data Breach Impact Grows to 3.7 Million Individuals

The data breach was initially believed to affect roughly 350,000 people, but the HHS breach tracker shows a far bigger impact. The post CareCloud Data Breach Impact Grows to 3.7 Million Individuals appeared first on SecurityWeek.