Compiled from 52 monitored sources · 1704 articles reviewed
Today’s Briefing
CVE-2026-69414 in the Microsoft Malware Protection Engine allows a low-privilege local attacker to escalate to SYSTEM, public PoC released 12 August, Microsoft assigned the CVE two days later, no patch available. CISA added CVE-2026-72529 and CVE-2026-72530 to the KEV catalogue, both authentication and code injection flaws in TrueConf Server exploitable via port 4307/TCP. Cisco Talos published research on UAT-10147, a Chinese-speaking adversary deploying the SPECTRE implant with cross-platform C2, Linux rootkit capability, and bring-your-own-vulnerable-driver EDR bypass, integrating agentic AI into post-compromise operations.
Top Stories
- Russian snoops add OAuth abuse to targeted phishing campaigns
- ShieldBreak: The Windows Defender Zero-Day With No Patch — Detect It, Mitigate It, With Qualys
- UAT-10147 deploys SPECTRE: A cross-platform implant with Linux rootkit and BYOVD capabilities
- UAT-10147: Chinese-speaking adversary integrates agentic AI into post-compromise operations
- CISA Adds Two Known Exploited Vulnerabilities to Catalog
Full brief available to subscribers
The complete operator brief — action items with patch deadlines, the vulnerability appendix and named actor activity — goes out by email each morning. Subscribe free to receive it.