Vamsoft ORF

Hacker claims 3.6 million Azure account records stolen from major companies
https://buff.ly/HsMcuau

Hacker claims 3.6 million Azure account records stolen from major companies A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials.

Windows Server 2022 reaches end of mainstream support in 60 days
https://ift.tt/ImT9NYq

Windows Server 2022 reaches end of mainstream support in 60 days Microsoft has reminded IT administrators that Windows Server 2022 is rapidly approaching its mainstream end date of October 2026, when it will switch to extended support.

Vulnerability giving attackers full control of Macs is under active exploitation
https://buff.ly/PaVBl61

Vulnerability giving attackers full control of Macs is under active exploitation Screen-sharing bug lets remote hackers log in without a password.

Terabytes of credentials leaked in massive supply-chain attack
https://buff.ly/Fcfgck0

Terabytes of credentials leaked in massive supply-chain attack The data was scraped and exfiltrated from 2,500 users of a compromised AI package.

Microsoft Plugs Nearly 400 Security Holes
https://ift.tt/RwSYLrT

Microsoft Plugs Nearly 400 Security Holes – Krebs on Security August 11, 2026 8 Comments Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today. Image: Shutt...

CISA: Microsoft SharePoint flaw now exploited in ransomware attacks
https://ift.tt/5sigPxd

CISA: Microsoft SharePoint flaw now exploited in ransomware attacks CISA confirmed today that ransomware gangs have begun abusing a high-severity Microsoft SharePoint remote code ex*****on vulnerability, which has been flagged as actively exploited since early July.

CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs
https://ift.tt/uPWEz0U

CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw.

Metabase SQLi zero-day exploited in customer data-theft attacks
https://ift.tt/YbVMEHZ

Metabase SQLi zero-day exploited in customer data-theft attacks A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally.

Unlimited Technology Systems breach impacts 3.8 million people
https://ift.tt/9fODMkH

Unlimited Technology Systems breach impacts 3.8 million people Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025.

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws
https://ift.tt/w2FXhI5

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws The U.S. Cybersecurity and Infrastructure Security Agency is giving federal agencies three days to mitigate vulnerabilities in IBM Langflow, N-central, and Apache Tomcat, all actively exploited.