1. CISA adds actively exploited Oracle HTTP Server / WebLogic proxy plug-in flaw to KEV — CVE-2026-21962 — CISA KEV — https://www.cisa.gov/known-exploited-vulnerabilities-catalog
2. Critical Keycloak password-reset flaw allows unauthenticated account takeover — CVE-2026-18963 — The Hacker News — https://thehackernews.com/2026/08/critical-keycloak-password-reset-flaw.html
3. Five high-risk vulnerabilities disclosed in Palo Alto GlobalProtect VPN — Cyber Security News — https://cybersecuritynews.com/5-vulnerabilities-palo-alto-globalprotect/
4. TP-Link Archer routers hit by three root command-injection flaws — Cyber Security News — https://cybersecuritynews.com/tp-link-archer-command-injection-flaw/
5. WordlistLoader hides malware inside ordinary English words to drop Amatera stealer — Dark Reading — https://www.darkreading.com/data-privacy/wordlistloader-disguises-malware-ordinary-text
6. Doubloon Dredger abuses Notion and device-code phishing to steal auth tokens — Infosecurity Magazine — https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/
7. Malicious Firefox add-ons steal crypto seed phrases and browser credentials — Graham Cluley / Bitdefender — https://www.bitdefender.com/en-us/blog/hotforsecurity/malicious-firefox-add-ons-stealing-cryptowallet-seed-phrases-browser-credentials
8. Fake "SysScan" sites trick users into uninstalling their antivirus — Malwarebytes Labs — https://www.malwarebytes.com/blog/threat-intel/2026/08/fake-microsoft-security-scans-trick-victims-into-uninstalling-their-antivirus
9. TikTok credential-phishing pages target account and MFA codes — Malwarebytes Labs — https://www.malwarebytes.com/blog/threat-intel/2026/08/tiktok-phishing-how-to-spot-fake-login-and-verification-pages
10. OWASP Agentic Skills Top 10 flags SKILL.md files as prose that executes — https://adversa.ai/blog/owasp-agentic-skills-top-10-explained/
