Cyber Security News for August 14 2026 - Daily DefSec Brief

1. GeoServer zero-day exploited within hours, no patch yet — SecurityWeek https://www.securityweek.com/hackers-exploiting-unpatched-geoserver-zero-day/ · Cyber Security News https://cybersecuritynews.com/geoserver-0-day-vulnerability/
2. Citrix NetScaler pre-auth RCE detailed by researchers — CVE-2026-8452 (tentative) — watchTowr Labs https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/
3. VMware vCenter Syslog RCE hitting 361 IPs across 47 countries — CVE-2026-59310 — BleepingComputer https://www.bleepingcomputer.com/news/security/critical-vmware-vcenter-rce-flaw-exploited-for-reverse-ssh-access/ · Dark Reading https://www.darkreading.com/vulnerabilities-threats/global-threat-campaign-critical-vmware-vcenter-flaw
4. HoneyMyte CoolClient backdoor deploys signed kernel rootkit — Securelist https://securelist.com/honeymyte-coolclient-driver-rootkit/121028/
5. Adobe Commerce account-hijack flaw under active exploitation — CVE-2026-71362 — SecurityWeek https://www.securityweek.com/adobe-commerce-bug-targeted-immediately-after-disclosure/
6. AmnesiaStealer macOS malware via fake GitHub ClickFix pages — CVE-2020-9771 (referenced) — SecurityWeek https://www.securityweek.com/amnesiastealer-macos-malware-steals-data-controls-browser-sessions/
7. HACKERAI malware uses GitHub Gists for C2 — Cyber Security News https://cybersecuritynews.com/hackerai-malware/
8. Aeternum botnet stores C2 on Polygon blockchain — Cyber Security News https://cybersecuritynews.com/aeternum-botnet-uses-polygon/
9. Download More RAM attack disables Defender via memory aliasing — CVE-2026-23670 — Cyber Security News https://cybersecuritynews.com/download-more-ram-attack/
10. AI token jacking turns leaked API keys into ~$1M in charges — Cyber Security News https://cybersecuritynews.com/ai-token-jacking/
11. New Mirai variant Evooo1Bot adds stealth, targets common gear — The Record https://therecord.media/new-mirai-variant-adds-stealth-to-botnet-code
12. Crypter services sell Defender/EDR/SmartScreen bypasses — Cyber Security News https://cybersecuritynews.com/malware-crypter-services/
13. MessiahGPT criminal AI service marketed on BreachForums — Cyber Security News https://cybersecuritynews.com/messiahgpt-ai-tool/
14. Microsoft patches LegacyHive Windows User Profile Service zero-day — CVE-2026-62832 — BleepingComputer https://www.bleepingcomputer.com/news/microsoft/microsoft-patches-legacyhive-windows-zero-day-vulnerability/
15. White House authorizes vetted private firms to hack cybercrime groups — CyberScoop https://cyberscoop.com/trump-memo-private-sector-offensive-hacking/ · The Record https://therecord.media/trump-cyber-crime-offensive