Microsofts August 2026 Patch Tuesday addresses 94 security vulnerabilities across Windows, Office, Azure, and other products. Three of the patched vulnerabilities are confirmed zero-days actively exploited in the wild. Critical Zero-Days CVE-2026-38178 (CVSS 9.1) — Windows SmartScreen bypass allowing arbitrary Read more…
PortSwigger has released Burp Suite Professional 2026.8, featuring a major overhaul of the scanning engine with AI-assisted vulnerability detection and full HTTP/3 (QUIC) protocol support. Key Features AI-Assisted Scanning — Machine learning models trained on 500,000+ real-world vulnerabilities improve detection Read more…
Security researchers have identified a sophisticated new macOS malware strain dubbed “ShadowVault” that specifically targets Keychain credentials, browser-stored passwords, cryptocurrency wallets, and SSH keys on Apple systems. Unlike previous macOS information stealers, ShadowVault employs a novel persistence mechanism that abuses Read more…
HackerOne has announced a significant increase in maximum bug bounty payouts across its platform, with top-tier critical vulnerabilities now eligible for rewards up to $250,000 — a 67% increase from the previous $150,000 cap. The move comes as organizations increasingly Read more…
A significant data breach at MedSecure Health Systems has exposed the personal health information of approximately 4.2 million patients across 340 hospitals and clinics in North America. The breach, discovered on August 10, 2026, involved unauthorized access to the organizations Read more…
A critical remote code execution vulnerability (CVE-2026-41321) in Apache Struts has been discovered actively exploited in the wild. The flaw, rated CVSS 9.8, allows unauthenticated attackers to execute arbitrary commands on affected servers through crafted Content-Type headers. Apache has released Read more…
Ethical News delivers daily cybersecurity updates, vulnerability disclosures, threat intelligence, and security research insights to professionals and organizations worldwide. What We Cover Our coverage spans the full spectrum of cybersecurity: Vulnerability Alerts — Zero-day disclosures, CVE analysis, and patch advisories Read more…