Vulnerability Intelligence Archives - Page 4 of 26

ASEC Weekly Report Highlights DragonForce, Qilin, and ShinyHunters Activity Across Education, Manufacturing, and Healthcare Sectors in August 2026

ASEC’s August 12, 2026 threat report details ransomware attacks by DragonForce on a Korean online education provider and Qilin on a Korean motor/robotics manufacturer, alongside ShinyHunters’ data theft claim against a U.S. digital healthcare firm, reflecting ongoing regional ransomware trends targeting critical sectors in East Asia and North America. Read more

August 13, 2026 Cloud Security Incidents & Breaches Security Operations Vulnerability Intelligence

GovCERT.HK Warns of Actively Exploited Cisco Firewall DoS Flaw CVE-2026-20349

GovCERT.HK issued a High Threat Security Alert (A26-08-17) on 12 August 2026 warning of active exploitation of CVE-2026-20349, a denial-of-service vulnerability in Cisco Secure Firewall ASA and Threat Defense software. Administrators must apply patches immediately to prevent service disruption. Read more

August 11, 2026 AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

GovCERT.HK Issues High Threat Alert on Linux Kernel Privilege Escalation Flaws Zapscape and SCTPhantom

GovCERT.HK has issued a High Threat Security Alert (A26-08-15) for two elevation-of-privilege vulnerabilities in the Linux kernel—Zapscape (CVE-2026-64561) and SCTPhantom (CVE-2026-64564)—with public PoC exploit code available for Zapscape, posing immediate risk of VM escape and host compromise. Read more

August 6, 2026 AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

GovCERT.HK Issues High Threat Alert for Linux Kernel Open vSwitch Privilege Escalation Flaw (CVE-2026-64531)

GovCERT.HK has issued a High Threat Security Alert (A26-08-05) for a local elevation of privilege vulnerability (OVSwrap, CVE-2026-64531) in the Linux Kernel Open vSwitch Datapath, affecting multiple kernel versions and enabling unprivileged local attackers to gain root access via memory corruption, with public PoC exploit code available. Read more

August 6, 2026 AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

GovCERT.HK Issues Alert on OpenSSL Denial-of-Service Vulnerability Patched in Versions 3.6.4 and 4.0.2

GovCERT.HK has issued Security Alert A26-08-07 regarding a denial-of-service vulnerability in OpenSSL versions prior to 3.6.4 and 4.0.2, tracked as CVE-2026-54876, with patches now available via OpenSSL security advisory 20260805. Read more

August 6, 2026November 8, 2026 AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

Minimum Fields to Capture for a CVE Watchlist Entry

A Practical Workflow for Minimum fields to capture for a CVE watchlist entry — 5 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more

August 5, 2026November 8, 2026 AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

Monitoring Singapore CSA Advisories for SaaS and Managed-Service Risk

A Practical Workflow for Monitoring Singapore CSA advisories for SaaS and managed-service risk — 5 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more

August 5, 2026November 8, 2026 AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

East Asia AI Model Abuse Signals That Should Stay Monitor-Only

A Practical Workflow for East Asia AI model abuse signals that should stay monitor-only — 5 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more

August 4, 2026 AI Security Identity & Governance Security Operations Vulnerability Intelligence

Friendly Fire Attack Exposes Fundamental Trust Boundary Flaw in AI Coding Agents

The Friendly Fire proof-of-concept demonstrates how attackers can weaponize AI coding agents through prompt injection in project documentation, achieving remote code execution by exploiting the agent's inability to distinguish between data and executable instructions without modifying the agent itself. Read more

August 4, 2026November 8, 2026 AI Security Cloud Security Incidents & Breaches Vulnerability Intelligence

Turn a Single CVE Mention in an East Asia Advisory into an Internal Verification Task List

A Practical Workflow for Turn a single CVE mention in an East Asia advisory into an internal verification task list — 4 August 2026 Review helps security, cloud, and supplier-risk teams keep an East Asia cyber or AI-risk signal under review when there is no fresh publish-ready news item. It explains how to preserve the original link, separate visible evidence from assumptions, and route unclear findings without inventing unsupported claims. Read more