OSINT / CyberSec report 21.08.2026 00:06

1. Attackers are actively exploiting a critical remote code execution vulnerability in the Zimbra Collaboration Suite. (BleepingComputer)

2. A critical vulnerability tracked as CVE-2026-32475 in the Elementor Pro WordPress plugin allows unauthenticated attackers to upload malicious files and execute code. (The Hacker News)

3. The new Manic Android malware targets users in Europe and utilizes nearby infected devices for data exfiltration. (BleepingComputer)

4. A campaign dubbed CameraSwarm has compromised over 14500 Dahua IP cameras across Ukraine and Russia over a 35 day period. (BleepingComputer)

5. US agencies warn that threat actors are using AI generated scripts to exploit Siemens S7 Series programmable logic controllers in critical infrastructure. (BleepingComputer)

6. Sakura Internet reported a data breach exposing the personal information of up to 1.36 million customer accounts. (BleepingComputer)

7. Healthcare firm CareCloud confirmed that a data breach impacted more than 3.7 million patients. (BleepingComputer)

8. A ransomware affiliate group known as Ransom Busters is posing as a recovery service to extort victims for payments between 20000 and 60000 dollars. (The Hacker News)

9. Password spraying attacks have surged 155 times in the first half of 2026 due to gaps in legacy authentication and multi factor authentication policies. (BleepingComputer)

10. The Clop ransomware gang created a custom Java web shell specifically designed to steal data from PTC Windchill and FlexPLM servers. (BleepingComputer)

11. Researchers identified a meta hacking technique named CoSnitch that allows attackers to manipulate Microsoft Copilot into revealing internal architecture and security weaknesses. (The Hacker News)

12. A Chinese nexus group identified as SilkParasite is conducting spear phishing campaigns against Central Asian organizations using remote access trojans. (Dark Reading)

13. Latvian officials are facing calls to resign following a major cyberattack that exposed the data of approximately 1.2 million citizens. (The Record)

14. The University of Texas at San Antonio was forced to take systems offline following the detection of unauthorized threat activity. (The Record)

15. Berlin state ministries were isolated from government networks as a precautionary measure following a security breach. (The Record)