SecurityTicks

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More 2026-08-17 at 16:23 By The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access 2026-08-17 at 15:50 By Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call, with no fix from the chipset maker. The advisory, published

How MCP Servers Can Expose Enterprise Secrets 2026-08-17 at 15:50 By MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt injection, often before security teams even know the server is running. As more organizations adopt AI agents into their systems, that exposure can silently become a major gap in MCP

Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner 2026-08-17 at 14:25 By A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyber Security Centre (NCSC) has warned. The vulnerability in question is CVE-2026-65400 (CVSS score:

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch 2026-08-17 at 14:25 By A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts. The vulnerability, tracked as CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It relates to an instance of insufficient authorization checks and input validation. “SAP Commerce

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware 2026-08-17 at 14:25 By Threat actors are acquiring expired domains to inherit website traffic and reputation to redirect victims to scams and malware on a large scale. DNS threat intelligence firm Infoblox has given the name dropcatch domains to those

No Apologies for Symantec CBX 2026-08-17 at 13:00 By Paul Miller When people are chiming in, it’s a sign that what you’re doing is working This article is an excerpt from SECURITY.COM View Original Source

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies 2026-08-17 at 12:29 By Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functionality from the Mirai botnet source code and is equipped to turn internet-facing devices into SOCKS proxies. “While the malware reuses the

Wheel and Spoke Too Soon 2026-08-17 at 12:00 By Recently, a well-meaning LinkedIn colleague posted a “wheel of privilege” exercise. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source