Good morning. The week of August 10 brought an uncomfortably clear pattern: attackers are bypassing defenses by targeting the infrastructure that sits beneath applications—the tools developers rely on, the drivers systems trust, and the packages code depends on.
Microsoft released one of its largest patch bundles in recent memory, addressing 400 vulnerabilities including three zero-days. But around the edges of that effort, fresh privilege escalation flaws surfaced in Windows itself and in its own security tooling. Meanwhile, supply-chain attacks spread through npm and AI development packages, leaking credentials and evading conventional scans by hiding in installation artifacts rather than source code.
The stories below walk through each development without alarm, but together they describe a shift: the foundations are under more pressure than the applications built on top of them.
Security · 3 min readA new npm supply chain worm spreads through package installation itself, evading standard security tools by hiding in tarballs rather than source code.
Read the full story → | Security · 3 min read LegacyHive represents a Windows zero-day disclosed publicly before the regular monthly patch cycle, requiring an out-of-band security update. Read the story → |
|
| Security · 3 min read Compromised AI development packages can expose developer credentials at massive scale through dependency chains. Read the story → |
|
| Security · 3 min read Attack exploits Windows automatic driver installation to gain highest system privileges, requiring only physical USB access to compromise fully patched machines. Read the story → |
|
| Security · 3 min read The exploit enables attackers to escalate privileges on Windows systems immediately after Microsoft's August security updates, affecting enterprise endpoint protection. Read the story → |
|
| Security · 2 min read A use-after-free flaw in the Linux kernel's Unix socket handling allows attackers to break out of containerized environments, affecting cloud infrastructure security. Read the story → |
|
| Security · 3 min read One of the largest single-month security update releases in Microsoft history includes an actively exploited vulnerability affecting Windows systems. Read the story → |
|
| Security · 3 min read A leaked code signing key could allow attackers to distribute malware disguised as legitimate Firefox updates to hundreds of millions of users. Read the story → |
|
| Security · 2 min read Ransomware operators are actively exploiting two recently patched SonicWall enterprise gateway flaws, including a critical server-side request forgery vulnerability. Read the story → |
|
| Security · 3 min read Load balancers sit at the network edge of enterprise infrastructure, making command injection flaws especially dangerous for remote attackers. Read the story → |
|
