📰 DAILY THREAT BRIEFING
Monday, August 17, 2026
12 News Items
HN · BleepingComputer · Krebs · Dark Reading · SANS · THN Intel · Unit 42 · Security.com

📰 Cybersecurity News Headlines

Top stories from leading cybersecurity publications as of August 17, 2026.

  1. SafePal data breach impacts 39,798 customers, stolen info for sale
    — Bleeping Computer

    Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to s…
  2. Anthropic confirms Claude is down in major outage affecting multiple services
    — Bleeping Computer

    Claude is experiencing a major outage, with users reporting login problems and degraded performance across several Anthropic services. […]
  3. Wireshark 4.6.8 Released, (Sun, Aug 16th)
    — SANS ISC

    Wireshark release 4.6.8 fixes 28 vulnerabilities and 25 bugs.
  4. Large-scale DDoS attacks disrupted Threema secure messaging service
    — Bleeping Computer

    Multiple distributed denial-of-service (DDoS) attacks targeted the Threema secure messaging service earlier this week, causing severe disrup…
  5. Mission-Driven Security: Inside a Global Bank's Defense
    — Dark Reading

    In this video interview, Standard Chartered's group CISO shares insights on transitioning from technical roles to strategic leadership, the …
  6. Amid AI-Driven Bug-Hunt Tsunami, NIST Looks to … AI
    — Dark Reading

    Driven by AI-augmented research and scanning, vulnerability volumes continue to surge, driving the National Institute of Standards and Techn…
  7. Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office
    — Dark Reading

    One Caledonian government agency reported a breach, thanks to a third party that may have serviced other agencies as well.
  8. Who’s Tracking You? Use This New Service to Find Out
    — Krebs on Security

    It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we…
  9. ISC Stormcast For Friday, August 14th, 2026 https://isc.sans.edu/podcastdetail/10052, (Fri, Aug 14th)
    — SANS ISC

    (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
  10. Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
    — The Hacker News

    Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) c…
  11. ISC Stormcast For Thursday, August 13th, 2026 https://isc.sans.edu/podcastdetail/10050, (Thu, Aug 13th)
    — SANS ISC

    (c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
  12. Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
    — The Hacker News

    The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impac…

🪲 NVD — Last 20 Scored Vulnerabilities

Latest scored CVEs from the National Vulnerability Database (11326 in last 30 days).
Critical: 3 · High: 9 · Medium: 6 · Low: 2. View full dashboard →

  1. CVE-2026-19961
    — CVSS 9.9 (CRITICAL)

    A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results in buffer overflow. The at…
  2. CVE-2026-19960
    — CVSS 7.4 (HIGH)

    A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The att…
  3. CVE-2026-19959
    — CVSS 9.9 (CRITICAL)

    A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflo…
  4. CVE-2026-19958
    — CVSS 6.3 (MEDIUM)

    A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of the file src/vm-executor.ts of the component execute Tool. The manipulation results in code injecti…
  5. CVE-2026-19957
    — CVSS 6.3 (MEDIUM)

    A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function fetch of the file src/tools.ts of the component ssrf-test Endpoint. Such manipulation of the argument url leads to server-si…
  6. CVE-2026-19956
    — CVSS 6.3 (MEDIUM)

    A vulnerability has been found in gomarble-ai facebook-ads-mcp-server 0.1.0. The impacted element is the function fetch_pagination_url of the file server.py. Such manipulation leads to server-side request forgery. The at…
  7. CVE-2026-19955
    — CVSS 3.5 (LOW)

    A vulnerability was detected in TrailDB 0.6. Impacted is the function tdb_open of the file /src/tdb.c of the component TOC Validation. The manipulation results in out-of-bounds read. It is possible to launch the attack r…
  8. CVE-2026-74797
    — CVSS 3.1 (LOW)

    OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip archives for provider or module packages. Attackers can cause excessive CPU usag…
  9. CVE-2026-74796
    — CVSS 6.1 (MEDIUM)

    OpenTofu before 1.11.7 fails to validate existing symlinks in the provider cache directory during initialization. Attackers can place a malicious symlink in a trusted working directory to cause tofu init to write provide…
  10. CVE-2026-74795
    — CVSS 7.5 (HIGH)

    Scriban before 6.6.0 contains an uncontrolled recursion vulnerability in its recursive-descent parser. The parser does not enforce a default expression depth limit (the ExpressionDepthLimit property in ParserOptions defa…
  11. CVE-2026-74794
    — CVSS 7.5 (HIGH)

    Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context,…
  12. CVE-2026-74792
    — CVSS 7.5 (HIGH)

    Scriban before 7.0.0 (affected versions <= 6.6.0) contains a stack overflow vulnerability in nested array initializer parsing. Deeply nested array initializers recurse through a path (ParseArrayInitializer → ParseExpre…
  13. CVE-2026-74791
    — CVSS 8.6 (HIGH)

    Scriban before 7.0.0 fails to clear the CachedTemplates dictionary when TemplateContext.Reset() is called, allowing cached templates to persist across reused contexts. Attackers can exploit request-dependent ITemplateLoa…
  14. CVE-2026-74790
    — CVSS 9.1 (CRITICAL)

    Scriban before 7.0.0 caches TypedObjectAccessor by Type only without considering MemberFilter changes, allowing reused TemplateContext instances to expose members that should be hidden. Attackers can access filtered prop…
  15. CVE-2026-74789
    — CVSS 7.5 (HIGH)

    Scriban before 7.0.0 (affected <= 6.6.0) applies its LoopLimit constraint only to script loop statements and not to expensive iteration performed inside built-in operators and functions. As a result, a single expression …
  16. CVE-2026-74788
    — CVSS 7.5 (HIGH)

    Scriban before 7.0.0 (affected versions <= 6.6.0) contains an uncontrolled memory allocation vulnerability in the string.pad_left and string.pad_right template functions, which perform no validation on the width paramete…
  17. CVE-2026-74787
    — CVSS 7.5 (HIGH)

    Scriban before 7.0.0 contains an uncontrolled recursion vulnerability in the object.to_json builtin function that lacks depth limits and circular reference detection. Attackers can craft templates with self-referencing o…
  18. CVE-2026-74786
    — CVSS 6.5 (MEDIUM)

    Scriban before 7.0.0 (affected versions <= 6.6.0) contains a denial-of-service vulnerability in which the LimitToString safety limit (default 1MB) can be bypassed because ObjectToString resets the per-call length counter…
  19. CVE-2026-74785
    — CVSS 6.5 (MEDIUM)

    Scriban before 7.0.0 contains three distinct denial-of-service vulnerabilities in expression evaluation that bypass existing safety controls through unbounded string multiplication, uncontrolled BigInteger shift operatio…
  20. CVE-2026-74783
    — CVSS 7.5 (HIGH)

    Scriban versions 6.6.0 through 7.2.0 contain a non-enforcing ExpressionDepthLimit guard that fails to stop recursive descent parsing of deeply nested expressions. Attackers can supply templates with deeply nested parenth…

Source: NVD CVE API 2.0

Generated by CryptXNet.ai Threat Intelligence Platform · August 17, 2026 · Sources: The Hacker News, Bleeping Computer, Krebs on Security, Dark Reading, SANS ISC, THN Threat Intel, Unit 42, Security.com