Today's cybersecurity landscape is marked by critical vulnerabilities across major platforms and significant threat actor activity. Several zero-day exploits impacting widely used software like Chrome, Microsoft products, and critical infrastructure components have been discovered and are actively being exploited, emphasizing the urgent need for timely patching.
Multiple Chinese APT Groups Exploit Chrome and Windows Zero-DaysThreat
At least four China-aligned state-sponsored groups have been observed using a new exploit kit, dubbed 'BlueMoon,' which leverages multiple previously unknown vulnerabilities in Microsoft Windows and Google Chrome. This sophisticated attack vector highlights a coordinated effort by advanced persistent threat actors.
Why it matters: Keeping your operating systems and web browsers updated is crucial, as nation-state actors are quickly exploiting newly discovered flaws in popular software like Chrome and Windows.
Read more at The Hacker News ↗
Actively Exploited Chrome V8 Zero-Day DiscoveredVulnerability
Google has released an urgent update for Chrome, patching a critical out-of-bounds write vulnerability in its V8 JavaScript engine (CVE-2026-87491). This flaw has been confirmed to be under active exploitation in the wild, making immediate updates essential for all users.
Why it matters: A zero-day exploit in your web browser can lead to significant compromise; ensure all your team's browsers are updated immediately to protect against active threats.
Read more at The Hacker News ↗
Microsoft Patches Over 970 Flaws, Including Two Actively Exploited Zero-DaysVulnerability
Microsoft's latest Patch Tuesday addresses an unprecedented number of vulnerabilities, including two critical Windows zero-day flaws actively exploited in attacks. These updates are vital for securing systems against a broad range of threats.
Why it matters: Timely application of Microsoft's security patches is non-negotiable for small businesses, as these updates address critical vulnerabilities, including those under active attack, that could compromise your systems.
Read more at The Hacker News ↗
New Microsoft Defender Zero-Day 'ShieldCrash' Allows System AccessVulnerability
A security researcher has disclosed a new zero-day vulnerability, 'ShieldCrash,' in Microsoft Defender, which bypasses a previously issued patch (CVE-2026-69414) and grants SYSTEM-level access. This indicates that Microsoft's earlier fix was insufficient, leaving systems still exposed.
Why it matters: Even with security software, vulnerabilities can persist; stay informed about newly disclosed bypasses to ensure your endpoint protection remains effective.
Read more at The Hacker News ↗
Critical RCE Flaw in N-able N-central Actively ExploitedVulnerability
CISA has added a maximum-severity pre-authentication Remote Code Execution (RCE) vulnerability (CVE-2026-86218) in N-able N-central to its Known Exploited Vulnerabilities catalog. This flaw is being actively exploited, posing a significant risk to affected organizations.
Why it matters: If your business uses N-able N-central, immediate patching is critical as this severe vulnerability is being actively exploited and could allow attackers to fully compromise your systems.
Read more at The Hacker News ↗
cPanel Flaw Allows Hosting Accounts to Gain Root AccessVulnerability
cPanel has patched a critical vulnerability that allowed an authenticated hosting account with mail privileges to escalate to root access on the entire server. This flaw affects all supported versions of cPanel and WHM, enabling a single compromised account to take full control.
Why it matters: If you use cPanel for your website hosting, apply the latest patches immediately to prevent a single compromised hosting account from leading to a full server takeover.
Read more at The Hacker News ↗
F5 BIG-IP APM Malware Uses In-Memory Web Shell to Evade DetectionThreat
Sophos reports that malware targeting F5 BIG-IP Access Policy Manager (APM) appliances is injecting a PHP web shell directly into memory, rather than storing it on disk. This stealthy approach allows the web shell to evade traditional file-based antivirus scans.
Why it matters: If your business uses F5 BIG-IP APM, be aware that advanced malware can hide in memory, bypassing disk scans; ensure you have robust memory monitoring and intrusion detection systems in place.
Read more at The Hacker News ↗
U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in CryptoPolicy
The U.S. Department of Justice has taken coordinated action against Xinbi Guarantee, an illicit online marketplace facilitating scam services. This operation involved seizing Telegram channels, freezing cryptocurrency wallets totaling $52.8 million, and assisting Madagascar in disrupting 13 scam compounds run by Chinese organized crime.
Why it matters: Law enforcement is actively pursuing cybercrime marketplaces, which helps reduce the availability of tools and services used for scams that often target small businesses and individuals.
Read more at The Hacker News ↗
Veradigm Confirms Patient Data Breach Following Ransomware ClaimBreach
Healthcare technology company Veradigm disclosed a data breach affecting patient information, stemming from a cybersecurity incident at a third-party vendor. This breach occurred after a ransomware gang claimed responsibility for an attack, highlighting the supply chain risks in healthcare data management.
Why it matters: Third-party vendors are a common weak point in data security; ensure your business thoroughly vets and monitors the security practices of all its service providers, especially those handling sensitive data.
Read more at BleepingComputer ↗
AdaptHealth Data Breach Exposes 4.1 Million IndividualsBreach
AdaptHealth, a healthcare provider, has confirmed a data breach from a July cyberattack by the ShinyHunters threat group, impacting the personal information of 4.1 million individuals. This incident underscores the ongoing vulnerability of healthcare organizations to sophisticated cyberattacks.
Why it matters: Healthcare data is a prime target; if your business handles health-related information, prioritize robust security measures and incident response plans to protect sensitive patient data.
Read more at BleepingComputer ↗
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.