Bleeping Computer

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch a vulnerability. This directive addresses an actively exploited flaw found in Zimbra Collaboration Suite (ZCS), requiring action within three days.

Microsoft has provided a temporary fix for gaming issues that are ongoing. These technical difficulties were reportedly caused by Windows 11 updates that were released during the August 2026 Patch Tuesday.

Microsoft has issued a warning and subsequently patched a maximum-severity vulnerability found within the Entra ID identity and access management (IAM) platform. This critical flaw had been actively exploited in attacks, prompting the immediate security response from Microsoft.

Threat actors are currently abusing FTP server banners to conceal commands. This method is used to deliver two previously undocumented types of malware, namely the remote access trojans E4del and PINHOLE, which target Windows.

Toronto's Hospital for Sick Children (SickKids) confirmed a cybersecurity incident exposed personal information belonging to current and former employees and job applicants. This exposure resulted from a flaw found in third-party software. The hospital stated that clinical systems and patient records were not affected.

Citrix has issued a warning to customers regarding two newly discovered vulnerabilities affecting NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances. The company urges administrators to patch their systems immediately to secure them against these flaws.

The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are currently exploiting a critical vulnerability. This vulnerability resides within the MLflow open-source AI engineering platform.

A new malware named Manic has been identified for the Android platform. This malicious software specifically targets users located in multiple European countries. It possesses a sophisticated fallback data exfiltration mechanism that utilizes nearby infected devices.

CERT Polska warned that attackers have begun actively exploiting a critical vulnerability in Zimbra Collaboration Suite (ZCS). This flaw represents a Remote Code Execution (RCE) vulnerability. The warning highlights an ongoing threat from malicious actors.

Microsoft is investigating a potential issue concerning the August 2026 updates. These updates may affect affected Windows 11 systems by potentially preventing some games from launching or causing them to crash.

Microsoft has resolved a bug that caused Windows Defender to crash following a recent security update. The issue resulted in 0xc0000005 access violation errors on some systems.

CISA warned that hackers are actively exploiting a critical-severity remote code execution (RCE) flaw. This vulnerability resides within the Windows Internet Key Exchange (IKE) Service Extensions component.

Microsoft has notified customers that certain systems running Windows 11 24H2 Home and Pro editions will cease receiving updates. This end of support is scheduled to happen in two months.

The FBI reported that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the United States since June 2021. The incident was highlighted by CISA, noting the significant threat posed to these crucial sectors.

Microsoft has started testing several enhancements for Windows 11, including a faster File Explorer and a more customizable context menu. These updates are contained within Windows 11 preview builds that are rolling out to Insiders this week.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are actively exploiting a high-severity flaw. This vulnerability concerns Windows Task Host, which had previously been flagged as being exploited in April.

Microsoft has confirmed that some users are experiencing service issues related to searching within Microsoft 365 applications. The outage affects multiple services, specifically including Outlook on the web, Outlook desktop, SharePoint Online, and OneDrive.

Microsoft announced the removal of the Windows Management Instrumentation Command-line (WMIC) tool. This removal effort affects multiple versions, including Windows 11 24H2 and 25H2. The action was taken because the WMIC tool is known to be used by cybercriminals.

Tech giants General Electric (GE) and Philips confirmed that they are investigating data theft claims. These claims allege that the Clop ransomware gang breached their systems and stole sensitive data.

The French Ministry of the Economy and Finance disclosed a data breach involving an attacker who accessed the General Directorate of Public Finances (DGFiP) systems. This security incident resulted in the theft of data belonging to 678,000 individuals.