{"vulnerability": "CVE-2026-5341", "sightings": [{"uuid": "804cc203-1841-47d9-af0d-8f4b55ff48ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5341", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mldrd3ilzy2i", "content": "CVE-2026-5341 - NMR Strava activities\nCVE ID : CVE-2026-5341\n \n Published : May 8, 2026, 10:16 a.m. | 2\u00a0hours, 9\u00a0minutes ago\n \n Description : The NMR Strava activities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `strava_nmr_connect` short...", "creation_timestamp": "2026-05-08T12:49:00.144795Z"}, {"uuid": "13a17793-e488-47e6-b963-bb21618af2c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/CyberDispatch/2291", "content": "CVE-2026-53412 affects the Desktop Client, VDI Client, and Meeting SDK.", "creation_timestamp": "2026-08-30T00:00:28.662161Z"}, {"uuid": "30078121-f4a9-41bc-98b8-26f6441e6235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-53413", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d1d68b37-fe59-4031-ba0b-bd808b0975dc", "content": "", "creation_timestamp": "2026-08-20T06:40:22.599637Z"}, {"uuid": "0adc63ad-71ae-478d-a8c4-ca72affe8608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-53415", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d1d68b37-fe59-4031-ba0b-bd808b0975dc", "content": "", "creation_timestamp": "2026-08-20T06:40:22.599637Z"}, {"uuid": "5ceb6036-4af6-4d24-921b-465b06b27bad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2026-53414", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/d1d68b37-fe59-4031-ba0b-bd808b0975dc", "content": "", "creation_timestamp": "2026-08-20T06:40:22.599637Z"}, {"uuid": "27047ce4-c31d-47a5-81f3-5d963287927f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-f489df32-e09466c2552dd19d", "content": "This Week in Security: BugTraq, AI Hacks, and Being Dumb On Planes\nAfter a multi-year hiatus, the venerable BugTraq mailing list is back!\nFor decades, BugTraq was the place where vulnerabilities were disclosed, from the early days when nearly all vendors viewed all security research as a hostile force, through to the modern era of working with vendors to coordinate disclosing bugs. With the rise of bug bounty programs and other social changes, the mailing list slowly died: what started in 1993 ended in 2021 is returning. The new maintainer, Jonathan Brossard, says in his announcement \u201cThe mission is unchanged: full disclosure, researcher-first, no corporate filter.\u201d\nDon\u2019t Be Dumb on Planes\nIn the unlikely event anyone here needs to be told: Don\u2019t do dumb things on planes.\nIt seems that someone coming home from from the DEF CON hacker conference in Las Vegas decided to mess with the in-plane WiFi, and is likely now in the \u201cfind out\u201d phase of doing something dumb. There hasn\u2019t been any public followup beyond the original reports: a passenger on a Delta flight leaving Las Vegas brought up a fake WiFi hotspot named \u201cDelta WiFi FAST\u201d to trick other passengers into connecting, and attempted to disable the in-flight WiFi using a denial of service attack.\nThe recorded messages from the pilots mention that the legitimate WiFi network was \u201cjammed\u201d, though this is unlikely technically correct. While any radio communications can be jammed by transmitting interference, most WiFi networks are susceptible to several basic denial of service attacks due to oversights in the WiFi standards design; by injecting WiFi management packets that tell the clients that a connection to the access point is no longer valid, and the device will attempt to reconnect.\nBy spamming the these disconnect packets continually, the network becomes essentially unusable, but unlike jamming, the interference is caused entirely by legitimate packets causing expected behavior. More recent extensions to the WiFi standards mitigate some of the most trivial attacks by adding additional validation that the packets were actually sent by the access point, but very few networks and clients use the newer options.\nBy rendering the legitimate network useless, the attackers hoped that users would select their fake network instead. None of the reports have included detailed information, but the fake network would likely have prompted the user to enter credentials for another site, such as Google or Facebook. The commercial hotspot model is particularly vulnerable to these sorts of attacks: many hotels, airlines, and businesses run an open, unauthenticated access point, and count on a web page the user must click through to gain access. Users are accustomed to clicking through web pages and providing room or booking numbers, names, or other credentials. Since there is no way to authenticate an open WiFi network, creating a look-alike network can be easy.\nIn lieu of additional official news, Youtuber [ThioJoe] tracked down some information, or the lack thereof, looking for further clarification; it appears that, contrary to some of the more excited online reports, law enforcement was not present when the plane landed, and it\u2019s unclear if there was even an attempt to kick users from the legitimate WiFi network or a sustained \u201cjamming\u201d or denial-of-service. In an official statement from Delta, they say that no in-flight systems were at risk, which is as it should be: customer-facing WiFi is unlikely to be interfaced with airplane flight systems, and even a true jamming attack generating radio interference would be in the WiFi spectrum where radio noise is already expected.\nBut we repeat: an airplane is an exquisitely bad location for illegal shenanigans.\nSteam Hardware Orders Leaked\nThe European handler of Steam hardware orders, CEVA, was breached in July, exposing customer order information such as phone numbers, and email addresses.\nSteam account details were not compromised, but the order information is plenty to arm scammers with enough information to make a convincing phishing attempt. Valve is already explicitly warning impacted customers to expect fake messages pertaining to their orders.\nNo additional information has been available on how the attack compromised CEVA. It appears this only impacts Steam hardware preorders in Europe.\nZoom Exploit\nZoom, the meeting software, has patched three serious vulnerabilities that would allow members of a call to execute arbitrary code on other members of the call.\nCVE-2026-53413 looks to be a typical buffer overflow, where the length of incoming data is not checked properly and overruns the memory space available for it, crashing the Zoom client or potentially allowing code to be executed. CVE-2026-53414 is a closely related buffer size bug, where the buffer allocated is too small for the read operation, crashing the Zoom client. Finally, CVE-2026-53415 is a use-after-free bug, where memory is referenced after it has been released, allowing code execution. The researchers have branded the three vulnerabilities as \u201cZoomsday\u201d.\nThe bad news is that Zoom is a high-profile target for business compromise. All platforms are affected, so if you\u2019re on Zoom, time to update before the next call!\nAI Agent Hacks a Reservation System\nThe Australian Broadcasting Corporation reports on an OpenClaw agent finding flaws in the booking system of a gym when asked to make a reservation. Details are relatively thin, with no complete transcript of the interaction with the OpenClaw agent, but supposedly the agent found that the easiest way to make a booking in the full class was to explore the API of the booking site, discovering that the reservation API was protected, but the cancellation API was not.\nWithin minutes the Claude-backed agent had booked a gym appointment and pushed the user to the top of the list by cancelling other customers. When asked to undo its work, the agent contritely stated that the insertion API was protected and it was impossible, and that it should have performed a test run first before removing users from a live web service.\nWith so few details available it\u2019s difficult to ascertain how accurate the report is. Claude has certainly been caught overstepping bounds recently, and the AI frontier companies seem happy for the press of declaring they accidentally hacked other companies, so it all seems plausible. This does nothing but increase the confusion about legal liability.\nUnder almost any jurisdiction, deliberately hacking the reservation system of a company to jump the line would be considered illegal, but when an agent does it, nobody seems concerned, including the user who launched the request: per the ABC article, \u201cIt\u2019s not the end of the world, so I didn\u2019t beat myself up about it, but it certainly was a warning signal to use it responsibly.\u201d\nUnited States to Authorize Private Companies for Cyber Operations\nAfter brain-draining existing government cyber agencies like CISA, this week the US Government issued a memo authorizing the National Coordination Center, part of the Department of Homeland Security to use private companies to perform cyber security responses on behalf of the United States.\nThe memo requires companies to obey the US Constitution and federal law, and requires a one million dollar bond for each company, but still represents a massive change in the posture of the US government with regards to cyber security. Previously, cyber incidents and responses would often by handled by CISA, the US Army Cyber Command, or the NSA. Allowing private companies to respond on behalf of the country feels almost like a return to letters of marque authorizing piracy and freebooting in the 1800s.\nLiteLLM Supply Chain\nSome weeks ago we mentioned the compromise of the open source supply chain vulnerability scanner, Trivy. Infected with a supply chain worm which steals credentials and infects every package and build it can now access, the worm has continued to spread, now compromising LiteLLM which is an AI proxy and gateway package used by thousands of enterprises.\nLiteLLM was infected because they utilized Trivy as part of the automated build workflow, and the compromise was not detected. Once the worm had access to the LiteLLM publishing credentials, it pushed new versions of the LiteLLM packages, of course infected with the same credential, authentication token, and cryptocurrency stealing code. Like the NPM node.js based worms, this code triggered using the Python startup hooks, causing it to execute as soon as Python indexed available libraries, even if the infected libraries themselves were never used.\nThe firm Hudson Rock was able to obtain the archive of dumped credentials and data, saying it was 153 GB of compressed content. Trivy, in turn, was compromised in March of 2026 after a misconfigured GitHub workflow allowed a pull request to extract authentication keys. The keys were not fully disabled, and the attacker returned weeks later to infect over 50 Trivy packages and workflows.\nAnalyzing the contents of the stolen data, the list of credentials stolen is staggering, including GitHub and GitLab credentials for Boeing, Orange Telecom, Roku, and multiple government agencies and labs, as well as Slack credentials, SSH keys, and cloud computing access. Hudson Rock has created a site to look up domain to see if your company has been impacted.\nSupply chain compromises continue to spread and impact thousands of packages, but the final goal clearly isn\u2019t to simply spread between packages. When high profile heavily used packages are compromised, the stolen tokens will be used to breach the affected companies sooner or later. The various package ecosystems are still struggling to find solutions to poisoned packages that don\u2019t break existing automation processes, and until those are solved, we can expect continual hacks like these to succeed.\nHacking Solar Inverters, Part 2\nRecently, unauthenticated flaws over radio were discovered in solar inverter systems popular as \u201cpatio solar\u201d installs in Europe. this week, SaiFlow details vulnerabilities in the REST API of FIMER inverters.\nInverters convert between DC and AC current, and optionally between DC and DC for hybrid systems. They are a core part of energy systems that interface solar, battery, and power grids. SaiFlow targeted FIMER inverters because, in their own words, \u201cbatteries catch fire\u201d if the system goes wrong badly enough. They found that the inverters are made of several interconnected components, but at the heart is an embedded Linux system built with buildroot, a system framework similar to traditional distributions or a framework like OpenWRT. Due to a misconfiguration in the nginx webserver, API requests can be sent with no authentication at all, and one of the endpoints allows direct injection of commands over a proprietary protocol.\nThe proprietary protocol, Aurora, predates internet connectivity on the devices, and lacks any modern protection or authentication. SaiFlow discovered that Aurora uses a six-digit PIN, which would be simple to brute force if the function to read the PIN from flash weren\u2019t also available, with no authentication. And the PIN is disabled by default.\nSince Aurora was designed as an internal low-level protocol for controlling the hardware, it has access to critical safety features and the ability to override them. The most significant finding was the ability to enable feeding power to the grid, even if the grid is detected as being disabled. This could damage the inverter itself as it tries to power the whole neighborhood, but worse, like a generator plugged in incorrectly, it could electrocute repair workers handling the power lines. SaiFlow points out this could be enabled fully remotely through the unauthenticated web interface. Other exposed commands allow writing arbitrary data to flash, corrupting the unit, changing the country standards, generating incorrect power exported to the grid, and control over charge and discharge rates and battery charge control.\nVulnerabilities in infrastructure components can be difficult to fix, and SaiFlow reports they have received no meaningful response from FIMER months after reporting them. Hopefully effective patches can be developed soon. \nhackaday.com/2026/08/14/this-w\u2026", "creation_timestamp": "2026-08-14T14:24:46.314813Z"}, {"uuid": "291c8585-5171-4078-908c-11006ed03dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53414", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-f489df32-e09466c2552dd19d", "content": "This Week in Security: BugTraq, AI Hacks, and Being Dumb On Planes\nAfter a multi-year hiatus, the venerable BugTraq mailing list is back!\nFor decades, BugTraq was the place where vulnerabilities were disclosed, from the early days when nearly all vendors viewed all security research as a hostile force, through to the modern era of working with vendors to coordinate disclosing bugs. With the rise of bug bounty programs and other social changes, the mailing list slowly died: what started in 1993 ended in 2021 is returning. The new maintainer, Jonathan Brossard, says in his announcement \u201cThe mission is unchanged: full disclosure, researcher-first, no corporate filter.\u201d\nDon\u2019t Be Dumb on Planes\nIn the unlikely event anyone here needs to be told: Don\u2019t do dumb things on planes.\nIt seems that someone coming home from from the DEF CON hacker conference in Las Vegas decided to mess with the in-plane WiFi, and is likely now in the \u201cfind out\u201d phase of doing something dumb. There hasn\u2019t been any public followup beyond the original reports: a passenger on a Delta flight leaving Las Vegas brought up a fake WiFi hotspot named \u201cDelta WiFi FAST\u201d to trick other passengers into connecting, and attempted to disable the in-flight WiFi using a denial of service attack.\nThe recorded messages from the pilots mention that the legitimate WiFi network was \u201cjammed\u201d, though this is unlikely technically correct. While any radio communications can be jammed by transmitting interference, most WiFi networks are susceptible to several basic denial of service attacks due to oversights in the WiFi standards design; by injecting WiFi management packets that tell the clients that a connection to the access point is no longer valid, and the device will attempt to reconnect.\nBy spamming the these disconnect packets continually, the network becomes essentially unusable, but unlike jamming, the interference is caused entirely by legitimate packets causing expected behavior. More recent extensions to the WiFi standards mitigate some of the most trivial attacks by adding additional validation that the packets were actually sent by the access point, but very few networks and clients use the newer options.\nBy rendering the legitimate network useless, the attackers hoped that users would select their fake network instead. None of the reports have included detailed information, but the fake network would likely have prompted the user to enter credentials for another site, such as Google or Facebook. The commercial hotspot model is particularly vulnerable to these sorts of attacks: many hotels, airlines, and businesses run an open, unauthenticated access point, and count on a web page the user must click through to gain access. Users are accustomed to clicking through web pages and providing room or booking numbers, names, or other credentials. Since there is no way to authenticate an open WiFi network, creating a look-alike network can be easy.\nIn lieu of additional official news, Youtuber [ThioJoe] tracked down some information, or the lack thereof, looking for further clarification; it appears that, contrary to some of the more excited online reports, law enforcement was not present when the plane landed, and it\u2019s unclear if there was even an attempt to kick users from the legitimate WiFi network or a sustained \u201cjamming\u201d or denial-of-service. In an official statement from Delta, they say that no in-flight systems were at risk, which is as it should be: customer-facing WiFi is unlikely to be interfaced with airplane flight systems, and even a true jamming attack generating radio interference would be in the WiFi spectrum where radio noise is already expected.\nBut we repeat: an airplane is an exquisitely bad location for illegal shenanigans.\nSteam Hardware Orders Leaked\nThe European handler of Steam hardware orders, CEVA, was breached in July, exposing customer order information such as phone numbers, and email addresses.\nSteam account details were not compromised, but the order information is plenty to arm scammers with enough information to make a convincing phishing attempt. Valve is already explicitly warning impacted customers to expect fake messages pertaining to their orders.\nNo additional information has been available on how the attack compromised CEVA. It appears this only impacts Steam hardware preorders in Europe.\nZoom Exploit\nZoom, the meeting software, has patched three serious vulnerabilities that would allow members of a call to execute arbitrary code on other members of the call.\nCVE-2026-53413 looks to be a typical buffer overflow, where the length of incoming data is not checked properly and overruns the memory space available for it, crashing the Zoom client or potentially allowing code to be executed. CVE-2026-53414 is a closely related buffer size bug, where the buffer allocated is too small for the read operation, crashing the Zoom client. Finally, CVE-2026-53415 is a use-after-free bug, where memory is referenced after it has been released, allowing code execution. The researchers have branded the three vulnerabilities as \u201cZoomsday\u201d.\nThe bad news is that Zoom is a high-profile target for business compromise. All platforms are affected, so if you\u2019re on Zoom, time to update before the next call!\nAI Agent Hacks a Reservation System\nThe Australian Broadcasting Corporation reports on an OpenClaw agent finding flaws in the booking system of a gym when asked to make a reservation. Details are relatively thin, with no complete transcript of the interaction with the OpenClaw agent, but supposedly the agent found that the easiest way to make a booking in the full class was to explore the API of the booking site, discovering that the reservation API was protected, but the cancellation API was not.\nWithin minutes the Claude-backed agent had booked a gym appointment and pushed the user to the top of the list by cancelling other customers. When asked to undo its work, the agent contritely stated that the insertion API was protected and it was impossible, and that it should have performed a test run first before removing users from a live web service.\nWith so few details available it\u2019s difficult to ascertain how accurate the report is. Claude has certainly been caught overstepping bounds recently, and the AI frontier companies seem happy for the press of declaring they accidentally hacked other companies, so it all seems plausible. This does nothing but increase the confusion about legal liability.\nUnder almost any jurisdiction, deliberately hacking the reservation system of a company to jump the line would be considered illegal, but when an agent does it, nobody seems concerned, including the user who launched the request: per the ABC article, \u201cIt\u2019s not the end of the world, so I didn\u2019t beat myself up about it, but it certainly was a warning signal to use it responsibly.\u201d\nUnited States to Authorize Private Companies for Cyber Operations\nAfter brain-draining existing government cyber agencies like CISA, this week the US Government issued a memo authorizing the National Coordination Center, part of the Department of Homeland Security to use private companies to perform cyber security responses on behalf of the United States.\nThe memo requires companies to obey the US Constitution and federal law, and requires a one million dollar bond for each company, but still represents a massive change in the posture of the US government with regards to cyber security. Previously, cyber incidents and responses would often by handled by CISA, the US Army Cyber Command, or the NSA. Allowing private companies to respond on behalf of the country feels almost like a return to letters of marque authorizing piracy and freebooting in the 1800s.\nLiteLLM Supply Chain\nSome weeks ago we mentioned the compromise of the open source supply chain vulnerability scanner, Trivy. Infected with a supply chain worm which steals credentials and infects every package and build it can now access, the worm has continued to spread, now compromising LiteLLM which is an AI proxy and gateway package used by thousands of enterprises.\nLiteLLM was infected because they utilized Trivy as part of the automated build workflow, and the compromise was not detected. Once the worm had access to the LiteLLM publishing credentials, it pushed new versions of the LiteLLM packages, of course infected with the same credential, authentication token, and cryptocurrency stealing code. Like the NPM node.js based worms, this code triggered using the Python startup hooks, causing it to execute as soon as Python indexed available libraries, even if the infected libraries themselves were never used.\nThe firm Hudson Rock was able to obtain the archive of dumped credentials and data, saying it was 153 GB of compressed content. Trivy, in turn, was compromised in March of 2026 after a misconfigured GitHub workflow allowed a pull request to extract authentication keys. The keys were not fully disabled, and the attacker returned weeks later to infect over 50 Trivy packages and workflows.\nAnalyzing the contents of the stolen data, the list of credentials stolen is staggering, including GitHub and GitLab credentials for Boeing, Orange Telecom, Roku, and multiple government agencies and labs, as well as Slack credentials, SSH keys, and cloud computing access. Hudson Rock has created a site to look up domain to see if your company has been impacted.\nSupply chain compromises continue to spread and impact thousands of packages, but the final goal clearly isn\u2019t to simply spread between packages. When high profile heavily used packages are compromised, the stolen tokens will be used to breach the affected companies sooner or later. The various package ecosystems are still struggling to find solutions to poisoned packages that don\u2019t break existing automation processes, and until those are solved, we can expect continual hacks like these to succeed.\nHacking Solar Inverters, Part 2\nRecently, unauthenticated flaws over radio were discovered in solar inverter systems popular as \u201cpatio solar\u201d installs in Europe. this week, SaiFlow details vulnerabilities in the REST API of FIMER inverters.\nInverters convert between DC and AC current, and optionally between DC and DC for hybrid systems. They are a core part of energy systems that interface solar, battery, and power grids. SaiFlow targeted FIMER inverters because, in their own words, \u201cbatteries catch fire\u201d if the system goes wrong badly enough. They found that the inverters are made of several interconnected components, but at the heart is an embedded Linux system built with buildroot, a system framework similar to traditional distributions or a framework like OpenWRT. Due to a misconfiguration in the nginx webserver, API requests can be sent with no authentication at all, and one of the endpoints allows direct injection of commands over a proprietary protocol.\nThe proprietary protocol, Aurora, predates internet connectivity on the devices, and lacks any modern protection or authentication. SaiFlow discovered that Aurora uses a six-digit PIN, which would be simple to brute force if the function to read the PIN from flash weren\u2019t also available, with no authentication. And the PIN is disabled by default.\nSince Aurora was designed as an internal low-level protocol for controlling the hardware, it has access to critical safety features and the ability to override them. The most significant finding was the ability to enable feeding power to the grid, even if the grid is detected as being disabled. This could damage the inverter itself as it tries to power the whole neighborhood, but worse, like a generator plugged in incorrectly, it could electrocute repair workers handling the power lines. SaiFlow points out this could be enabled fully remotely through the unauthenticated web interface. Other exposed commands allow writing arbitrary data to flash, corrupting the unit, changing the country standards, generating incorrect power exported to the grid, and control over charge and discharge rates and battery charge control.\nVulnerabilities in infrastructure components can be difficult to fix, and SaiFlow reports they have received no meaningful response from FIMER months after reporting them. Hopefully effective patches can be developed soon. \nhackaday.com/2026/08/14/this-w\u2026", "creation_timestamp": "2026-08-14T14:24:46.362513Z"}, {"uuid": "615a08e1-f64c-4962-ace6-775eba4d87d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53415", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-f489df32-e09466c2552dd19d", "content": "This Week in Security: BugTraq, AI Hacks, and Being Dumb On Planes\nAfter a multi-year hiatus, the venerable BugTraq mailing list is back!\nFor decades, BugTraq was the place where vulnerabilities were disclosed, from the early days when nearly all vendors viewed all security research as a hostile force, through to the modern era of working with vendors to coordinate disclosing bugs. With the rise of bug bounty programs and other social changes, the mailing list slowly died: what started in 1993 ended in 2021 is returning. The new maintainer, Jonathan Brossard, says in his announcement \u201cThe mission is unchanged: full disclosure, researcher-first, no corporate filter.\u201d\nDon\u2019t Be Dumb on Planes\nIn the unlikely event anyone here needs to be told: Don\u2019t do dumb things on planes.\nIt seems that someone coming home from from the DEF CON hacker conference in Las Vegas decided to mess with the in-plane WiFi, and is likely now in the \u201cfind out\u201d phase of doing something dumb. There hasn\u2019t been any public followup beyond the original reports: a passenger on a Delta flight leaving Las Vegas brought up a fake WiFi hotspot named \u201cDelta WiFi FAST\u201d to trick other passengers into connecting, and attempted to disable the in-flight WiFi using a denial of service attack.\nThe recorded messages from the pilots mention that the legitimate WiFi network was \u201cjammed\u201d, though this is unlikely technically correct. While any radio communications can be jammed by transmitting interference, most WiFi networks are susceptible to several basic denial of service attacks due to oversights in the WiFi standards design; by injecting WiFi management packets that tell the clients that a connection to the access point is no longer valid, and the device will attempt to reconnect.\nBy spamming the these disconnect packets continually, the network becomes essentially unusable, but unlike jamming, the interference is caused entirely by legitimate packets causing expected behavior. More recent extensions to the WiFi standards mitigate some of the most trivial attacks by adding additional validation that the packets were actually sent by the access point, but very few networks and clients use the newer options.\nBy rendering the legitimate network useless, the attackers hoped that users would select their fake network instead. None of the reports have included detailed information, but the fake network would likely have prompted the user to enter credentials for another site, such as Google or Facebook. The commercial hotspot model is particularly vulnerable to these sorts of attacks: many hotels, airlines, and businesses run an open, unauthenticated access point, and count on a web page the user must click through to gain access. Users are accustomed to clicking through web pages and providing room or booking numbers, names, or other credentials. Since there is no way to authenticate an open WiFi network, creating a look-alike network can be easy.\nIn lieu of additional official news, Youtuber [ThioJoe] tracked down some information, or the lack thereof, looking for further clarification; it appears that, contrary to some of the more excited online reports, law enforcement was not present when the plane landed, and it\u2019s unclear if there was even an attempt to kick users from the legitimate WiFi network or a sustained \u201cjamming\u201d or denial-of-service. In an official statement from Delta, they say that no in-flight systems were at risk, which is as it should be: customer-facing WiFi is unlikely to be interfaced with airplane flight systems, and even a true jamming attack generating radio interference would be in the WiFi spectrum where radio noise is already expected.\nBut we repeat: an airplane is an exquisitely bad location for illegal shenanigans.\nSteam Hardware Orders Leaked\nThe European handler of Steam hardware orders, CEVA, was breached in July, exposing customer order information such as phone numbers, and email addresses.\nSteam account details were not compromised, but the order information is plenty to arm scammers with enough information to make a convincing phishing attempt. Valve is already explicitly warning impacted customers to expect fake messages pertaining to their orders.\nNo additional information has been available on how the attack compromised CEVA. It appears this only impacts Steam hardware preorders in Europe.\nZoom Exploit\nZoom, the meeting software, has patched three serious vulnerabilities that would allow members of a call to execute arbitrary code on other members of the call.\nCVE-2026-53413 looks to be a typical buffer overflow, where the length of incoming data is not checked properly and overruns the memory space available for it, crashing the Zoom client or potentially allowing code to be executed. CVE-2026-53414 is a closely related buffer size bug, where the buffer allocated is too small for the read operation, crashing the Zoom client. Finally, CVE-2026-53415 is a use-after-free bug, where memory is referenced after it has been released, allowing code execution. The researchers have branded the three vulnerabilities as \u201cZoomsday\u201d.\nThe bad news is that Zoom is a high-profile target for business compromise. All platforms are affected, so if you\u2019re on Zoom, time to update before the next call!\nAI Agent Hacks a Reservation System\nThe Australian Broadcasting Corporation reports on an OpenClaw agent finding flaws in the booking system of a gym when asked to make a reservation. Details are relatively thin, with no complete transcript of the interaction with the OpenClaw agent, but supposedly the agent found that the easiest way to make a booking in the full class was to explore the API of the booking site, discovering that the reservation API was protected, but the cancellation API was not.\nWithin minutes the Claude-backed agent had booked a gym appointment and pushed the user to the top of the list by cancelling other customers. When asked to undo its work, the agent contritely stated that the insertion API was protected and it was impossible, and that it should have performed a test run first before removing users from a live web service.\nWith so few details available it\u2019s difficult to ascertain how accurate the report is. Claude has certainly been caught overstepping bounds recently, and the AI frontier companies seem happy for the press of declaring they accidentally hacked other companies, so it all seems plausible. This does nothing but increase the confusion about legal liability.\nUnder almost any jurisdiction, deliberately hacking the reservation system of a company to jump the line would be considered illegal, but when an agent does it, nobody seems concerned, including the user who launched the request: per the ABC article, \u201cIt\u2019s not the end of the world, so I didn\u2019t beat myself up about it, but it certainly was a warning signal to use it responsibly.\u201d\nUnited States to Authorize Private Companies for Cyber Operations\nAfter brain-draining existing government cyber agencies like CISA, this week the US Government issued a memo authorizing the National Coordination Center, part of the Department of Homeland Security to use private companies to perform cyber security responses on behalf of the United States.\nThe memo requires companies to obey the US Constitution and federal law, and requires a one million dollar bond for each company, but still represents a massive change in the posture of the US government with regards to cyber security. Previously, cyber incidents and responses would often by handled by CISA, the US Army Cyber Command, or the NSA. Allowing private companies to respond on behalf of the country feels almost like a return to letters of marque authorizing piracy and freebooting in the 1800s.\nLiteLLM Supply Chain\nSome weeks ago we mentioned the compromise of the open source supply chain vulnerability scanner, Trivy. Infected with a supply chain worm which steals credentials and infects every package and build it can now access, the worm has continued to spread, now compromising LiteLLM which is an AI proxy and gateway package used by thousands of enterprises.\nLiteLLM was infected because they utilized Trivy as part of the automated build workflow, and the compromise was not detected. Once the worm had access to the LiteLLM publishing credentials, it pushed new versions of the LiteLLM packages, of course infected with the same credential, authentication token, and cryptocurrency stealing code. Like the NPM node.js based worms, this code triggered using the Python startup hooks, causing it to execute as soon as Python indexed available libraries, even if the infected libraries themselves were never used.\nThe firm Hudson Rock was able to obtain the archive of dumped credentials and data, saying it was 153 GB of compressed content. Trivy, in turn, was compromised in March of 2026 after a misconfigured GitHub workflow allowed a pull request to extract authentication keys. The keys were not fully disabled, and the attacker returned weeks later to infect over 50 Trivy packages and workflows.\nAnalyzing the contents of the stolen data, the list of credentials stolen is staggering, including GitHub and GitLab credentials for Boeing, Orange Telecom, Roku, and multiple government agencies and labs, as well as Slack credentials, SSH keys, and cloud computing access. Hudson Rock has created a site to look up domain to see if your company has been impacted.\nSupply chain compromises continue to spread and impact thousands of packages, but the final goal clearly isn\u2019t to simply spread between packages. When high profile heavily used packages are compromised, the stolen tokens will be used to breach the affected companies sooner or later. The various package ecosystems are still struggling to find solutions to poisoned packages that don\u2019t break existing automation processes, and until those are solved, we can expect continual hacks like these to succeed.\nHacking Solar Inverters, Part 2\nRecently, unauthenticated flaws over radio were discovered in solar inverter systems popular as \u201cpatio solar\u201d installs in Europe. this week, SaiFlow details vulnerabilities in the REST API of FIMER inverters.\nInverters convert between DC and AC current, and optionally between DC and DC for hybrid systems. They are a core part of energy systems that interface solar, battery, and power grids. SaiFlow targeted FIMER inverters because, in their own words, \u201cbatteries catch fire\u201d if the system goes wrong badly enough. They found that the inverters are made of several interconnected components, but at the heart is an embedded Linux system built with buildroot, a system framework similar to traditional distributions or a framework like OpenWRT. Due to a misconfiguration in the nginx webserver, API requests can be sent with no authentication at all, and one of the endpoints allows direct injection of commands over a proprietary protocol.\nThe proprietary protocol, Aurora, predates internet connectivity on the devices, and lacks any modern protection or authentication. SaiFlow discovered that Aurora uses a six-digit PIN, which would be simple to brute force if the function to read the PIN from flash weren\u2019t also available, with no authentication. And the PIN is disabled by default.\nSince Aurora was designed as an internal low-level protocol for controlling the hardware, it has access to critical safety features and the ability to override them. The most significant finding was the ability to enable feeding power to the grid, even if the grid is detected as being disabled. This could damage the inverter itself as it tries to power the whole neighborhood, but worse, like a generator plugged in incorrectly, it could electrocute repair workers handling the power lines. SaiFlow points out this could be enabled fully remotely through the unauthenticated web interface. Other exposed commands allow writing arbitrary data to flash, corrupting the unit, changing the country standards, generating incorrect power exported to the grid, and control over charge and discharge rates and battery charge control.\nVulnerabilities in infrastructure components can be difficult to fix, and SaiFlow reports they have received no meaningful response from FIMER months after reporting them. Hopefully effective patches can be developed soon. \nhackaday.com/2026/08/14/this-w\u2026", "creation_timestamp": "2026-08-14T14:24:46.405555Z"}, {"uuid": "dda4a57a-f7d3-4aac-a45b-61be764e2a75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "seen", "source": "https://t.me/bhhub/1211", "content": "Weekly 8 AI & Cyber signals to act on (Aug 10\u201317, 2026)\n\n#AISecurity@bhhub\n\n\u2728 Encrypted reasoning traces leak across LLM sessions\nClient-returned AI reasoning is a cross-user attack surface: researchers moved encrypted blocks into a weaker model from the same provider and recovered plaintext across Anthropic, OpenAI, and Google. Decoding 315,320 public-repository blocks exposed 367 PII artifacts and 182 credentials, plus hidden hazardous reasoning. Bind traces to user, session, and model; this is a preprint.\n\n\u2728 PIPES gives agent observations provenance\nAI agents can mistake attacker-controlled tool fields for authoritative state, making unsafe actions look justified. PIPES checks response units against semantic priors and provenance; on six splits it cut Gemma 4 31B attack success from 84.7% to 2.3% while benign utility rose from 90.6% to 92.5%. The preprint tests two agents and assumes trusted metadata.\n\n\u2728 ColluSkill hides one attack across three skills\nLLM planning turns plausible agent skills into one malicious workflow: ColluSkill splits intent across packages, then refines them against scanners. On 200 three-skill chains and six scanners, attack success reached 96.0%; ChainGuard reduced it to 22.5% while passing 99.5% of benign workflows. Scan capability and artifact flow across the installed set.\n\n#AppSec@bhhub\n\n\u2728 PySeType finds nine confirmed zero-days\nLLMs supply semantic types that static analysis cannot infer from syntax: PySeType asks models to check natural-language security meanings, then traverses Python control flow with pytype. Across 103 web projects it reports 87% precision, 88% accuracy, and 15 potential zero-days, nine developer-confirmed. Dynamic loading, callbacks, and cross-language flows remain blind spots.\n\n\u2728 SRE-Bench tests agents on unseen binaries\nAI security capability drops when source code becomes a protected binary: SRE-Bench contributes 19 private programs, 44 in-house anti-analysis primitives, 262 instances, and 1,572 deterministic tasks built over 5,000 expert hours. The best of five frontier models scored 61.4% per instance but fully solved only 31.5%. Binary reverse engineering needs contamination control, realistic scale, and protection-aware evals.\n\n#RedTeam@bhhub\n\n\u2728 ZOOMSDAY: an AI agent finds a zero-click RCE chain\nAn AI coding agent materially accelerated closed-source exploit research: A Security reports finding and exploiting Zoom\u2019s annotation parser in under 24 hours and fewer than 20 prompts. A crafted 745-byte packet reaches a 128-byte stack buffer via an unchecked count; Zoom corroborates CVE-2026-53413/414/415 and patched affected clients. The RCE demo is macOS and the AI-speed claim is first-party, but shared code makes patching urgent.\n\n\u2728 MazeRunner branches through black-box pentests\nThree LLM agents preserve clues, revise failed actions, and switch attack branches instead of following one linear pentest plan. On ten recent HTB targets under a 20M-token cap, MazeRunner completed 47.7% of subtasks versus 36.2% for PentestGPT-V2, reached user access on six targets, and root on two; both baselines reached user on two and root on none. Human approval is still needed for destructive live actions.\n\n#BlueTeam@bhhub\n\n\u2728 GraphRAG makes threat hunts survive IOC rotation\nKnowledge-graph retrieval pushes AI-generated hunt plans beyond disposable indicators toward behaviors and techniques. In an APT28 case, GraphRAG preserved 100% of detections after every IP, domain, and hash was rotated; naive RAG preserved 29%. Nine reports from four vendors showed the same direction, but prompt wording mattered nearly as much and the corpus is small. Evaluate detection durability, not rule count.", "creation_timestamp": "2026-08-17T08:00:03.938053Z"}, {"uuid": "5dc17398-99d6-4f81-96e5-c8a59b65a5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53414", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msvg32kqka2h", "content": "\u300cZoomsday\u300d\u8106\u5f31\u6027\u3001Zoom\u53c2\u52a0\u8005\u540c\u58eb\u306e\u653b\u6483\u3092\u8a31\u3059\u53ef\u80fd\u6027\n\n\u7814\u7a76\u8005\u3089\u306f\u3001\u4eba\u6c17\u306e\u30df\u30fc\u30c6\u30a3\u30f3\u30b0\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0Zoom\u306b3\u4ef6\u306e\u8106\u5f31\u6027\u3092\u767a\u898b\u3057\u307e\u3057\u305f\u3002\u60aa\u610f\u306e\u3042\u308b\u30b3\u30e9\u30dc\u30ec\u30fc\u30b7\u30e7\u30f3\u30c7\u30fc\u30bf\u3092\u4ecb\u3057\u3066\u3001\u30df\u30fc\u30c6\u30a3\u30f3\u30b0\u53c2\u52a0\u8005\u306e\u4e00\u4eba\u304c\u5225\u306e\u53c2\u52a0\u8005\u3092\u653b\u6483\u3067\u304d\u3066\u3057\u307e\u3046\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u3044\u3046\u3082\u306e\u3067\u3059\u3002 \u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306fCVE-2026-53413\u3001CVE-2026-53414\u3001CVE-2026-53415...", "creation_timestamp": "2026-08-12T15:11:56.330629Z"}, {"uuid": "b837f1e5-0458-40b9-85f1-f8aca9f29493", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53415", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3msvg32kqka2h", "content": "\u300cZoomsday\u300d\u8106\u5f31\u6027\u3001Zoom\u53c2\u52a0\u8005\u540c\u58eb\u306e\u653b\u6483\u3092\u8a31\u3059\u53ef\u80fd\u6027\n\n\u7814\u7a76\u8005\u3089\u306f\u3001\u4eba\u6c17\u306e\u30df\u30fc\u30c6\u30a3\u30f3\u30b0\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0Zoom\u306b3\u4ef6\u306e\u8106\u5f31\u6027\u3092\u767a\u898b\u3057\u307e\u3057\u305f\u3002\u60aa\u610f\u306e\u3042\u308b\u30b3\u30e9\u30dc\u30ec\u30fc\u30b7\u30e7\u30f3\u30c7\u30fc\u30bf\u3092\u4ecb\u3057\u3066\u3001\u30df\u30fc\u30c6\u30a3\u30f3\u30b0\u53c2\u52a0\u8005\u306e\u4e00\u4eba\u304c\u5225\u306e\u53c2\u52a0\u8005\u3092\u653b\u6483\u3067\u304d\u3066\u3057\u307e\u3046\u53ef\u80fd\u6027\u304c\u3042\u308b\u3068\u3044\u3046\u3082\u306e\u3067\u3059\u3002 \u3053\u308c\u3089\u306e\u8106\u5f31\u6027\u306fCVE-2026-53413\u3001CVE-2026-53414\u3001CVE-2026-53415...", "creation_timestamp": "2026-08-12T15:11:56.407301Z"}, {"uuid": "49a4bba6-6391-44f2-888b-4fbbb6d19620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/pphm_HackerNews/2094", "content": "\ud83d\udd34 Critical Zoom Workplace Flaw Lets Unauthenticated Attackers Take Over Accounts Remotely\n\nZoom has disclosed a critical vulnerability in its Windows desktop software that could allow unauthenticated attackers to take over user accounts remotely.\n\nThis issue, tracked as CVE-2026-53412 and addressed in bulletin ZSB-26014, arises from improper input validation in Zoom Workplace for Windows and the Zoom Workplace VDI Client for Windows.\n\nThe vulnerability has a CVSS score of 9.8 out of 10, indicating its severe risk due to its network-reachable nature, lack of authentication requirements, and potential for complete compromise of confidentiality, integrity, and availability.", "creation_timestamp": "2026-08-21T23:00:08.949415Z"}, {"uuid": "aa50eb15-27ee-4c05-b541-2248167d72af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mswamngs2k2w", "content": "Zoom\u306e\u6ce8\u91c8\u6a5f\u80fd\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u3001\u4f1a\u8b70\u53c2\u52a0\u8005\u540c\u58eb\u304c\u4e92\u3044\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3092\u4e57\u3063\u53d6\u308a\u53ef\u80fd\u306a\u72b6\u614b(CVE-2026-53413\u3001CVE-2026-53414\u3001CVE-2026-53415) \n rocket-boys.co.jp/security-mea... \n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "creation_timestamp": "2026-08-12T23:07:05.722894Z"}, {"uuid": "c88e00e1-fa4e-49cf-bb53-6c9cefdb8710", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53414", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mswamngs2k2w", "content": "Zoom\u306e\u6ce8\u91c8\u6a5f\u80fd\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u3001\u4f1a\u8b70\u53c2\u52a0\u8005\u540c\u58eb\u304c\u4e92\u3044\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3092\u4e57\u3063\u53d6\u308a\u53ef\u80fd\u306a\u72b6\u614b(CVE-2026-53413\u3001CVE-2026-53414\u3001CVE-2026-53415) \n rocket-boys.co.jp/security-mea... \n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "creation_timestamp": "2026-08-12T23:07:05.787973Z"}, {"uuid": "ed5ffc3c-de51-44d7-8db5-2c77f940c16a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53415", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mswamngs2k2w", "content": "Zoom\u306e\u6ce8\u91c8\u6a5f\u80fd\u306b\u8907\u6570\u306e\u8106\u5f31\u6027\u3001\u4f1a\u8b70\u53c2\u52a0\u8005\u540c\u58eb\u304c\u4e92\u3044\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3092\u4e57\u3063\u53d6\u308a\u53ef\u80fd\u306a\u72b6\u614b(CVE-2026-53413\u3001CVE-2026-53414\u3001CVE-2026-53415) \n rocket-boys.co.jp/security-mea... \n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "creation_timestamp": "2026-08-12T23:07:05.844731Z"}, {"uuid": "dd697dbf-241a-4f93-b56b-01659700dc85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "seen", "source": "Telegram/RUan3U3Ixa6Ril5j2wkYlj3mZcQ0vDhZx_wVxjae8ueeUnE", "content": "", "creation_timestamp": "2026-08-15T08:00:05.743360Z"}, {"uuid": "34a5b208-aa06-4cfa-99ce-26cab2682d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "seen", "source": "Telegram/unEmbzqVXcDJ2NUSLzJGWmZlx2cZxv-x1ppCpJ4_UfnK4G4", "content": "", "creation_timestamp": "2026-08-15T08:00:05.881934Z"}, {"uuid": "a3d84873-80c5-4398-985b-b35177ba1be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "exploited", "source": "https://t.me/bhhub/1211", "content": "Weekly 8 AI & Cyber signals to act on (Aug 10\u201317, 2026)\n\n#AISecurity@bhhub\n\n\u2728 Encrypted reasoning traces leak across LLM sessions\nClient-returned AI reasoning is a cross-user attack surface: researchers moved encrypted blocks into a weaker model from the same provider and recovered plaintext across Anthropic, OpenAI, and Google. Decoding 315,320 public-repository blocks exposed 367 PII artifacts and 182 credentials, plus hidden hazardous reasoning. Bind traces to user, session, and model; this is a preprint.\n\n\u2728 PIPES gives agent observations provenance\nAI agents can mistake attacker-controlled tool fields for authoritative state, making unsafe actions look justified. PIPES checks response units against semantic priors and provenance; on six splits it cut Gemma 4 31B attack success from 84.7% to 2.3% while benign utility rose from 90.6% to 92.5%. The preprint tests two agents and assumes trusted metadata.\n\n\u2728 ColluSkill hides one attack across three skills\nLLM planning turns plausible agent skills into one malicious workflow: ColluSkill splits intent across packages, then refines them against scanners. On 200 three-skill chains and six scanners, attack success reached 96.0%; ChainGuard reduced it to 22.5% while passing 99.5% of benign workflows. Scan capability and artifact flow across the installed set.\n\n#AppSec@bhhub\n\n\u2728 PySeType finds nine confirmed zero-days\nLLMs supply semantic types that static analysis cannot infer from syntax: PySeType asks models to check natural-language security meanings, then traverses Python control flow with pytype. Across 103 web projects it reports 87% precision, 88% accuracy, and 15 potential zero-days, nine developer-confirmed. Dynamic loading, callbacks, and cross-language flows remain blind spots.\n\n\u2728 SRE-Bench tests agents on unseen binaries\nAI security capability drops when source code becomes a protected binary: SRE-Bench contributes 19 private programs, 44 in-house anti-analysis primitives, 262 instances, and 1,572 deterministic tasks built over 5,000 expert hours. The best of five frontier models scored 61.4% per instance but fully solved only 31.5%. Binary reverse engineering needs contamination control, realistic scale, and protection-aware evals.\n\n#RedTeam@bhhub\n\n\u2728 ZOOMSDAY: an AI agent finds a zero-click RCE chain\nAn AI coding agent materially accelerated closed-source exploit research: A Security reports finding and exploiting Zoom\u2019s annotation parser in under 24 hours and fewer than 20 prompts. A crafted 745-byte packet reaches a 128-byte stack buffer via an unchecked count; Zoom corroborates CVE-2026-53413/414/415 and patched affected clients. The RCE demo is macOS and the AI-speed claim is first-party, but shared code makes patching urgent.\n\n\u2728 MazeRunner branches through black-box pentests\nThree LLM agents preserve clues, revise failed actions, and switch attack branches instead of following one linear pentest plan. On ten recent HTB targets under a 20M-token cap, MazeRunner completed 47.7% of subtasks versus 36.2% for PentestGPT-V2, reached user access on six targets, and root on two; both baselines reached user on two and root on none. Human approval is still needed for destructive live actions.\n\n#BlueTeam@bhhub\n\n\u2728 GraphRAG makes threat hunts survive IOC rotation\nKnowledge-graph retrieval pushes AI-generated hunt plans beyond disposable indicators toward behaviors and techniques. In an APT28 case, GraphRAG preserved 100% of detections after every IP, domain, and hash was rotated; naive RAG preserved 29%. Nine reports from four vendors showed the same direction, but prompt wording mattered nearly as much and the corpus is small. Evaluate detection durability, not rule count.", "creation_timestamp": "2026-08-18T00:00:29.221584Z"}, {"uuid": "72344074-02ff-4e57-aa48-900397b60244", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/pphm_HackerNews/2094", "content": "\ud83d\udd34 Critical Zoom Workplace Flaw Lets Unauthenticated Attackers Take Over Accounts Remotely\n\nZoom has disclosed a critical vulnerability in its Windows desktop software that could allow unauthenticated attackers to take over user accounts remotely.\n\nThis issue, tracked as CVE-2026-53412 and addressed in bulletin ZSB-26014, arises from improper input validation in Zoom Workplace for Windows and the Zoom Workplace VDI Client for Windows.\n\nThe vulnerability has a CVSS score of 9.8 out of 10, indicating its severe risk due to its network-reachable nature, lack of authentication requirements, and potential for complete compromise of confidentiality, integrity, and availability.", "creation_timestamp": "2026-08-22T00:00:12.439366Z"}, {"uuid": "177832e1-de9b-4a0c-9344-e88dd03fa466", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53413", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-zoom-clients-en-zoom-vdi-client-software", "content": "", "creation_timestamp": "2026-08-13T12:15:03.833258Z"}, {"uuid": "58b84b5a-f3a9-4d82-891c-3f3adccf8e6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53415", "type": "seen", "source": "https://www.ncsc.nl/alerts/kwetsbaarheden-in-zoom-clients-en-zoom-vdi-client-software", "content": "", "creation_timestamp": "2026-08-13T12:15:06.081367Z"}, {"uuid": "ca8f6c92-bcf5-471b-bf03-39430297846d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "seen", "source": "https://bsky.app/profile/whisprnews.bsky.social/post/3msy3k3e5te2l", "content": "\ud83d\udea8 'Zoomsday': A Security destapa dos fallos zero-click en Zoom (CVE-2026-53413 y CVE-2026-53415, severidad 8.3) que dan control del dispositivo sin un solo click. En riesgo: sesiones de intercambio y software de billetera. Parchea ya: 7.1.5 / 7.0.6.", "creation_timestamp": "2026-08-13T16:41:29.355438Z"}, {"uuid": "5de519c7-bac2-48e5-9ae5-ef602fbdfe6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53415", "type": "seen", "source": "https://bsky.app/profile/whisprnews.bsky.social/post/3msy3k3e5te2l", "content": "\ud83d\udea8 'Zoomsday': A Security destapa dos fallos zero-click en Zoom (CVE-2026-53413 y CVE-2026-53415, severidad 8.3) que dan control del dispositivo sin un solo click. En riesgo: sesiones de intercambio y software de billetera. Parchea ya: 7.1.5 / 7.0.6.", "creation_timestamp": "2026-08-13T16:41:29.406260Z"}, {"uuid": "585e3cce-0748-4bf1-80e9-172906a90202", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mste2cxxxs2i", "content": "Zoom patched four flaws, including CVE-2026-53413, a zero-click RCE in Zoom's annotator that could let an attacker take over another participant's machine. #Zoom #CVE-2026-53413 #RCE", "creation_timestamp": "2026-08-11T19:30:25.029221Z"}, {"uuid": "3498cdd6-77a8-40c1-99bd-02bf5b062f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3mstekmt5rz2z", "content": "Zoomsday: Zero-click RCE in Zoom, from any meeting participant to any other (CVE-2026-53413)", "creation_timestamp": "2026-08-11T19:39:32.050349Z"}, {"uuid": "d163f553-3ec5-4420-b707-b8b7174e8a4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "published-proof-of-concept", "source": "Telegram/unEmbzqVXcDJ2NUSLzJGWmZlx2cZxv-x1ppCpJ4_UfnK4G4", "content": "", "creation_timestamp": "2026-08-16T00:00:45.811124Z"}, {"uuid": "ade08202-3931-4f10-a8f3-a90e95b9b4b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "published-proof-of-concept", "source": "Telegram/RUan3U3Ixa6Ril5j2wkYlj3mZcQ0vDhZx_wVxjae8ueeUnE", "content": "", "creation_timestamp": "2026-08-16T00:00:45.455801Z"}, {"uuid": "17690776-599d-4ae7-939e-62934470cfc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/CyberDispatch/2291", "content": "CVE-2026-53412 affects the Desktop Client, VDI Client, and Meeting SDK.", "creation_timestamp": "2026-08-29T20:00:07.461535Z"}, {"uuid": "284cda46-7ba2-417e-b0c3-dfc65d0cbebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53410", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mqmjicwo2y2e", "content": "Zoom\u306b\u3001High\u306e\u8106\u5f31\u6027\u60c5\u5831 ZSB-26012 \u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u300cCVE-2026-53410 : Zoom Clients for Windows - Race Condition\u300d\nCVSSv3: 7\n\u2192\u3000https://www.zoom.com/en/trust/security-bulletin/ZSB-26012/", "creation_timestamp": "2026-07-14T15:28:41.343209Z"}, {"uuid": "147a4c7d-15a3-4e4a-9ce8-22bab59db90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53411", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mqmjienc7r2q", "content": "Zoom\u306b\u3001High\u306e\u8106\u5f31\u6027\u60c5\u5831 ZSB-26013 \u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u300cCVE-2026-53411 : Zoom Workplace VDI Plugin for Windows - Improper Input Validation\u300d\nCVSSv3: 7.8\n\u2192\u3000https://www.zoom.com/en/trust/security-bulletin/ZSB-26013/", "creation_timestamp": "2026-07-14T15:28:43.126389Z"}, {"uuid": "3c22bbab-2356-49f7-bd08-c3db3fd54e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/ripjyr.bsky.social/post/3mqmjig5kye22", "content": "Zoom\u306b\u3001Critical\u306e\u8106\u5f31\u6027\u60c5\u5831 ZSB-26014 \u304c\u516c\u958b\u3055\u308c\u307e\u3057\u305f\u3002\n\u300cCVE-2026-53412 : Zoom Workplace for Windows - Improper Input Validation\u300d\nCVSSv3: 9.8\n\u2192\u3000https://www.zoom.com/en/trust/security-bulletin/ZSB-26014/", "creation_timestamp": "2026-07-14T15:28:44.755987Z"}, {"uuid": "d5355c74-ca7c-4f1d-8c22-72808b0e2748", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53411", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-zoom-2", "content": "", "creation_timestamp": "2026-07-14T16:45:04.620310Z"}, {"uuid": "eab68b8e-ca79-4b06-a2bc-0c5b1eb9545a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-zoom-2", "content": "", "creation_timestamp": "2026-07-14T16:45:06.950926Z"}, {"uuid": "a6eae195-caac-40ca-9a34-d11a386e5f72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53410", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-zoom-2", "content": "", "creation_timestamp": "2026-07-14T16:45:10.390738Z"}, {"uuid": "a30f3359-afc4-4761-88c1-7fa4a2e9ccc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53413", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mstqerox4m22", "content": "Zoom has patched four security vulnerabilities, including the critical CVE-2026-53413, allowing remote code execution without user interaction. This flaw, related to the annotation feature, can be exploited to hijack devices during meetings.", "creation_timestamp": "2026-08-11T23:11:02.120595Z"}, {"uuid": "2be3f21c-147f-4671-9292-9c20ef075b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqotkxucxb2v", "content": "Zoom vulnerability CVE-2026-53412 (CVSS 9.8) allows unauthenticated account takeover over the network. Update Zoom Workplace for Windows to 7.0.0 now.\n\n#Zoom #CVE202653412 #AccountTakeover #Windows #CyberSecurity", "creation_timestamp": "2026-07-15T13:34:27.728971Z"}, {"uuid": "86230486-99b4-4938-b270-43244593d72a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mqpmidc4t42i", "content": "Zoom disclosed CVE-2026-53412, a critical 9.8 Windows flaw in Zoom Workplace, VDI Client, and Meeting SDK that could let an unauthenticated attacker take over accounts over the network. #Zoom #CVE202653412 #Windows", "creation_timestamp": "2026-07-15T21:00:22.786959Z"}, {"uuid": "adbabd76-92d7-4b9a-9109-a5f16584017f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/pixelsandpulse.bsky.social/post/3mqpqz74jx42g", "content": "A critical Zoom vulnerability (CVE-2026-53412) allows unauthenticated attackers on your local network to take over your account. This means full control over your identity. Don't wait, update your Zoom client immediately to protect\u2026\n\nhttps://www.tpp.blog/9eb4x9a\n\n#cybersecurity #zoom #cve202653412", "creation_timestamp": "2026-07-15T22:21:23.705873Z"}, {"uuid": "f23c7533-ea85-4906-9eaa-2be29efa3a4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53412", "type": "seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3mqqqtcxlqm2e", "content": "\ud83d\udcf0 Zoom Tambal Celah Kritis yang Berpotensi Sebabkan Pengambilalihan Akun di Windows\n\n\ud83d\udc49 Baca artikel lengkap di sini: https://ahmandonk.com/2026/07/16/zoom-cve-2026-53412-account-takeover/\n\n#accountTakeover #cve-2026-53412 #cyberSecurity #vulnerability #windows #zoom #zoomWorkplace", "creation_timestamp": "2026-07-16T07:50:45.654439Z"}, {"uuid": "8a938794-8461-4f18-b87f-75da0d9cac4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/hapsis.bsky.social/post/3mqqsqomt2c2v", "content": "Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug\n\nsecurityaffairs.com/195454/secur...\n\n#Kyberturvallisuus #ThreatIntel #Haavoittuvuus", "creation_timestamp": "2026-07-16T08:25:06.170885Z"}, {"uuid": "a288e0c7-f01f-42a3-bae5-380984aa6807", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mqqt34d2fp2e", "content": "Zoom released Windows security updates for a critical CVE-2026-53412 flaw that can enable unauthenticated account takeover, plus fixes for three high-severity privilege escalation issues.\n", "creation_timestamp": "2026-07-16T08:30:55.899053Z"}, {"uuid": "ed5d0956-4795-4c13-b5c4-0dc24c0122e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/bitnewsbot.bsky.social/post/3mqqtcyrec22m", "content": "Zoom released a critical security update for a flaw (CVE-2026-53412, CVSS 9.8) that could allow unauthenticated account takeover via network [\u2026]", "creation_timestamp": "2026-07-16T08:35:19.769641Z"}, {"uuid": "0348b0f0-3d02-4b7f-a984-5fd3bf30176c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/thehackernews/9516", "content": "\ud83d\udea8 Zoom has patched a 9.8-rated Windows flaw that could let an unauthenticated attacker take over accounts via network access.\n\nCVE-2026-53412 affects the Desktop Client, VDI Client, and Meeting SDK.\n\nAffected versions and update details: https://thehackernews.com/2026/07/zoom-patches-critical-windows-flaw-that.html", "creation_timestamp": "2026-07-16T09:00:03.745748Z"}, {"uuid": "1c4b19b8-9d64-483b-b122-7c5b2cd05677", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3mqquvpxned2d", "content": "Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug", "creation_timestamp": "2026-07-16T09:03:41.862342Z"}, {"uuid": "e5ccbece-d492-4a48-a649-89a9b1a2016e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mqqv6r6lm52r", "content": "\ud83e\udd16 CVE-2026-53412 (CVSS 9.8): Critical unauthenticated account takeover in Zoom Workplace for Windows via improper input validation. Affects Desktop Client, VDI Client & Meeting SDK. Patch now.\nhttps://thehackernews.com/2026/07/zoom-patches-critical-windows-flaw-that.html", "creation_timestamp": "2026-07-16T09:08:45.047666Z"}, {"uuid": "73174763-8862-48b5-ab70-96a46cbe8968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/nono2357.bsky.social/post/3mqqvjvlzec2v", "content": "Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug", "creation_timestamp": "2026-07-16T09:14:58.715225Z"}, {"uuid": "77e302fd-6f99-423b-ad8c-a7af00f7ca57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://thehackernews.com/2026/07/zoom-patches-critical-windows-flaw-that.html", "content": "Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover.\n\nThe vulnerability, tracked as CVE-2026-53412 (CVSS score: 9.8), affects Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows.\n\n\"Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for", "creation_timestamp": "2026-07-16T10:00:59.822855Z"}, {"uuid": "9c0a0954-cae8-41a4-b146-165a4fb2bd78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/ctinow/253422", "content": "Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug\nhttps://ift.tt/ctWRZkB", "creation_timestamp": "2026-07-16T11:00:04.177180Z"}, {"uuid": "1af7ce8e-ce59-4a43-abf9-6973c51e02fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/iberianm.bsky.social/post/3mqr6rnbdhg2f", "content": "Zoom patched CVE-2026-53412 affecting Zoom Workplace for Windows; the flaw could enable account takeover. Update Zoom clients promptly and verify the patch level. #Cybersecurity #Vulnerability #Microsoft\n\nSource: https://thehackernews.com/2026/07/zoom-patches-critical-windows-flaw-that.html", "creation_timestamp": "2026-07-16T12:00:22.087226Z"}, {"uuid": "674d1721-bce0-4212-b6ee-4640d3bd4aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53412", "type": "seen", "source": "https://bsky.app/profile/blindthoughts.bsky.social/post/3mqr7nzry5z2y", "content": "Zoom Patches Critical CVSS 9.8 Windows Flaw Enabling Account Takeover \u2014 Update Now\n\nhttps://blindthoughts.com/zoom-critical-windows-flaw-cve-2026-53412-account-takeover\n\n#zoom #cve #windowssecurity #accounttakeover #patchnow", "creation_timestamp": "2026-07-16T12:16:14.632118Z"}, {"uuid": "dfc5c778-5cc9-42db-83c8-9898f2509c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/vritrasecnews.bsky.social/post/3mqrcnrlapm2m", "content": "Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover. The vulnerability, tracked as CVE-2026-53412 (...\n\n\ud83d\udd17 https://thehackernews.com/2026/07/zoom-patches-critical-windows-flaw-that.html", "creation_timestamp": "2026-07-16T13:09:47.319700Z"}, {"uuid": "6b94cb4c-2045-403c-8cd5-300b73f1159d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53410", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mqrgsfyrza2d", "content": "Zoom\u304c\u30cf\u30c3\u30ab\u30fc\u306b\u3088\u308b\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u3092\u53ef\u80fd\u306b\u3059\u308b\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nZoom\u306f\u3001\u8907\u6570\u306eWindows\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304a\u3088\u3073SDK\u306b\u304a\u3044\u3066\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u3092\u53ef\u80fd\u306b\u3059\u308b\u3001\u91cd\u5927\u306a\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u307e\u3057\u305f\u305d\u306e\u4ed6\u306b\u3082\u3001CVE-2026-53410(TOCTOU\u30ec\u30fc\u30b9\u30b3\u30f3\u30c7\u30a3\u30b7\u30e7\u30f3)\u3001CVE-2026-53409(\u6a29\u9650\u7ba1\u7406\u306e\u4e0d\u5099)\u3001CVE-2026-53411(\u5165\u529b\u691c...", "creation_timestamp": "2026-07-16T14:23:57.805223Z"}, {"uuid": "d9434636-486a-408f-947c-1d74e2dc049b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53411", "type": "seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3mqrgsfyrza2d", "content": "Zoom\u304c\u30cf\u30c3\u30ab\u30fc\u306b\u3088\u308b\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u3092\u53ef\u80fd\u306b\u3059\u308b\u91cd\u5927\u306a\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8106\u5f31\u6027\u3092\u4fee\u6b63\n\nZoom\u306f\u3001\u8907\u6570\u306eWindows\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u304a\u3088\u3073SDK\u306b\u304a\u3044\u3066\u30ea\u30e2\u30fc\u30c8\u304b\u3089\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u3092\u53ef\u80fd\u306b\u3059\u308b\u3001\u91cd\u5927\u306a\u4e0d\u9069\u5207\u306a\u5165\u529b\u691c\u8a3c\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63\u3057\u307e\u3057\u305f\u305d\u306e\u4ed6\u306b\u3082\u3001CVE-2026-53410(TOCTOU\u30ec\u30fc\u30b9\u30b3\u30f3\u30c7\u30a3\u30b7\u30e7\u30f3)\u3001CVE-2026-53409(\u6a29\u9650\u7ba1\u7406\u306e\u4e0d\u5099)\u3001CVE-2026-53411(\u5165\u529b\u691c...", "creation_timestamp": "2026-07-16T14:23:57.893359Z"}, {"uuid": "a041ecb3-7b0a-46d9-93ce-aaf553d6e9d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3mqrmcpjeyx2z", "content": "Zoom fixes CVE-2026-53412, a 9.8-rated Windows flaw that could enable account takeover via network access, plus three privilege escalation bugs.", "creation_timestamp": "2026-07-16T16:02:33.685591Z"}, {"uuid": "78771438-7b1b-4a14-acca-7cf28d7f2293", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mqrrp5pbww2a", "content": "Zoom has released security updates addressing a critical vulnerability (CVE-2026-53412, CVSS 9.8) in Zoom Workplace for Windows, allowing potential account takeover via network access. Additionally, three high-severity flaws were patched: CVE-2026-53411 (CVSS 7.8) and CVE-2026-53409 (CVSS 7.", "creation_timestamp": "2026-07-16T17:39:00.442715Z"}, {"uuid": "c767bacf-6281-4a3e-a3de-0b6904fab55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53411", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mqrrp5pbww2a", "content": "Zoom has released security updates addressing a critical vulnerability (CVE-2026-53412, CVSS 9.8) in Zoom Workplace for Windows, allowing potential account takeover via network access. Additionally, three high-severity flaws were patched: CVE-2026-53411 (CVSS 7.8) and CVE-2026-53409 (CVSS 7.", "creation_timestamp": "2026-07-16T17:39:00.479649Z"}, {"uuid": "3fd9abe6-dc9c-4ca8-a537-df2363f90fdb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-16T19:00:32.216100Z"}, {"uuid": "4fddf8ef-861c-4d27-b8d1-714680d20da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mqsbjdgzbc2c", "content": "CVE-2026-53412 - zoom workplace for windows\nThe Zoom Workplace VDI Plugin for Windows has a security weakness that could allow an unauthorized user to access and take control of a user's account through\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#zoomcommunications #CVE #infosec", "creation_timestamp": "2026-07-16T22:22:04.112923Z"}, {"uuid": "eef3e013-b435-4979-a5cf-46aa0cdd5443", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mqsdfxfpbl2c", "content": "CVE-2026-53412 - Zoom Workplace VDI Plugin for Windows - Improper Input Validation\nCVE ID : CVE-2026-53412\n \n Published : July 16, 2026, 10:17 p.m. | 17\u00a0minutes ago\n \n Description : Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and ...", "creation_timestamp": "2026-07-16T22:55:58.205183Z"}, {"uuid": "96b58153-1817-45eb-86ee-a62d107408db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/true_secator/8417", "content": "\u041f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0442\u0440\u0435\u043d\u0434\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u0443\u0433\u0440\u043e\u0437\u044b:\n\n1. Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u041f\u041e \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043b\u0438\u0446\u043e\u043c \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\nCVE-2026-53412 (CVSS 9,8) \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0, Windows VDI Client \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0432\u0435\u0440\u0441\u0438\u0439 \u0434\u043e 7.0.0.\n\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439, \u0430 \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u043b \u0435\u0433\u043e \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n2. Splunk \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432. \u0418\u0437 \u043f\u044f\u0442\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u0439 \u0442\u043e\u043b\u044c\u043a\u043e \u0442\u0440\u0438 \u043a\u0430\u0441\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u0432 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0434\u0432\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u043e\u0448\u0438\u0431\u043e\u043a \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432.\n\n\u041a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c, \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u043d\u044b\u043c \u0434\u043b\u044f Splunk, \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f CVE-2026-20296 (\u043e\u0431\u0445\u043e\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043a\u043e\u043c\u0430\u043d\u0434 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438), CVE-2026-20297 (\u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438) \u0438 CVE-2026-20298 (\u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0441\u0440\u0435\u0434\u043d\u0435\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438).\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u0438 \u0434\u0430\u043d\u043d\u044b\u043c, \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u043c\u0438 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u043d\u044b\u0435 \u0445\u044d\u0448\u0438 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n3. F5 \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0432\u043d\u0435\u043f\u043e\u043b\u043e\u0441\u043d\u043e\u043c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u043c \u0432\u043e\u0441\u0435\u043c\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 NGINX \u0438 BIG-IP.\n\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c - CVE-2026-42533 (CVSS 9.2), \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 NGINX Plus \u0438 NGINX Open Source, \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u043a\u0443\u0447\u0438 \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 NGINX.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. F5 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442 \u043e \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445.\n\n4. \u0412 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0418\u0411-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Trend Micro, ESET, Tenable \u0438 Tanium \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \n\nTenable\u00a0\u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0430\u043c \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438 \u0432 Tenable Agent. CVE-2026-15265 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430.\n\nESET\u00a0\u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435 Inspect Connector \u0434\u043b\u044f Windows, \u0430 Tanium\u00a0- \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 DoS, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0432\u0448\u0435\u0439 Tanium Server.\n\nTrend Micro\u00a0\u043e\u0431\u0440\u0430\u0434\u043e\u0432\u0430\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Cleaner One Pro \u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u044b Trend Micro, \u0438\u043c\u0435\u044e\u0449\u0438\u0435 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438.\n\n5. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Bitdefender \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0442\u0440\u0438 \u043c\u0435\u0442\u043e\u0434\u0430 \u0430\u0442\u0430\u043a, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0443 \u0441\u0441\u044b\u043b\u043e\u043a Windows \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 EDR.\n\n6. Positive Technologies \u0432\u044b\u043a\u0430\u0442\u0438\u043b\u0430 \u0441\u0432\u043e\u0439 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0439 \u00ab\u0412 \u0442\u0440\u0435\u043d\u0434\u0435 VM\u00bb, \u043e\u0442\u043c\u0435\u0442\u0438\u0432 \u0432 \u043d\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Microsoft Exchange Server (CVE-2026-42897, CVSS 8,1)\n\n7. \u041d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u0435 Shark \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u044b\u043b\u0435\u0441\u043e\u0441\u044b \u0432 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445 \u0432\u0441\u0435\u0433\u043e \u0440\u0435\u0433\u0438\u043e\u043d\u0430.\n\n8. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a \u0432 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 Node (npm) \u0431\u044b\u043b\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043f\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 AsyncAPI (\u0441\u0443\u043c\u043c\u0430\u0440\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 2,25 \u043c\u043b\u043d.), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0442\u0440\u043e\u044f\u043d \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438.", "creation_timestamp": "2026-07-17T00:00:49.114652Z"}, {"uuid": "3116c394-0d77-4068-8016-5f013177727d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/ctinow/253422", "content": "Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug\nhttps://ift.tt/ctWRZkB", "creation_timestamp": "2026-07-17T00:00:55.524362Z"}, {"uuid": "96ab4deb-b9c3-4e50-b25e-dc188865873f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/thehackernews/9516", "content": "\ud83d\udea8 Zoom has patched a 9.8-rated Windows flaw that could let an unauthenticated attacker take over accounts via network access.\n\nCVE-2026-53412 affects the Desktop Client, VDI Client, and Meeting SDK.\n\nAffected versions and update details: https://thehackernews.com/2026/07/zoom-patches-critical-windows-flaw-that.html", "creation_timestamp": "2026-07-17T00:00:55.562488Z"}, {"uuid": "6e74264c-4e7b-465f-9f66-04de0c221806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mqsjmsdvyk2a", "content": "Zoom Patches Critical Windows Flaw That Could Enable Account Takeover\n\nZoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover.\n\nThe vulnerability, tracked as CVE-2026-53412 (CVSS score: 9.8), affe\u2026\n#hackernews #news", "creation_timestamp": "2026-07-17T00:47:10.448758Z"}, {"uuid": "85acbdfc-8926-4706-aa08-8345d7b7f342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://thehackernews.com/2026/07/zoom-patches-critical-windows-flaw-that.html", "content": "Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows that could facilitate account takeover.\n\nThe vulnerability, tracked as CVE-2026-53412 (CVSS score: 9.8), affects Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows.\n\n\"Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for", "creation_timestamp": "2026-07-17T01:00:39.382545Z"}, {"uuid": "9478fc88-2848-47e7-8256-c5febc561709", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mqskrmwl522a", "content": "Zoom Fixes CVE-2026-53412, a Critical Account Takeover Bug\n\nZoom warns of a critical Windows flaw, tracked as CVE-2026-53412, that could let attackers take over accounts without authentication. Zoom has fixed a critical Windows vulnerability, tracked as CVE-2026-53412 (CVSS score \u2026\n#hackernews #news", "creation_timestamp": "2026-07-17T01:07:46.133255Z"}, {"uuid": "2656e76e-a31e-4332-bd89-b8a13fda898f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3mqszvqa4j32b", "content": "Zoom\u304c\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u306e\u91cd\u5927\u306a\u30d0\u30b0\u3067\u3042\u308bCVE-2026-53412\u3092\u4fee\u6b63 \n\nZoom Fixes CVE-2026-53412, a Critical Account Takeover Bug  #SecurityAffairs (Jul 16)\n\nsecurityaffairs.com/195454/secur...", "creation_timestamp": "2026-07-17T05:38:29.807713Z"}, {"uuid": "4b5b45b7-48f3-447b-94fc-6cb8142eedff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3mqt46ypmfk2g", "content": "Zoom Workplace for Windows - Improper Input Validation (CVE-2026-53412) #patchmanagement", "creation_timestamp": "2026-07-17T06:19:28.336834Z"}, {"uuid": "bb888fec-fd47-422d-8f95-e01993c354e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mqtbvlpdwl2f", "content": "A Zoom critical vulnerability (CVE-2026-53412, CVSS 9.8) lets attackers hijack accounts on Windows with no user interaction. Update your client now.\n\n#Zoom #CVE202653412 #Vulnerability #CyberSecurity #Windows #AccountTakeover", "creation_timestamp": "2026-07-17T08:01:35.480560Z"}, {"uuid": "f0dede32-41f8-4038-8952-5603221c337a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53410", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mqtfca3z4n2e", "content": "CVE-2026-53410 - TOCTOU race condition in Zoom Clients for Windows. Privilege escalation for authenticated local users. CVSS 7. Update immediately. #CVE #Zoom #infosec\n\nhttps://www.valtersit.com/cve/CVE-2026-53410/", "creation_timestamp": "2026-07-17T09:02:20.972824Z"}, {"uuid": "578e25df-8e73-49fb-afcb-b94fd3a32577", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53410", "type": "seen", "source": "https://mastodon.social/users/hugovalters/statuses/116934505623055968", "content": "CVE-2026-53410 - TOCTOU race condition in Zoom Clients for Windows. Privilege escalation for authenticated local users. CVSS 7. Update immediately. #CVE #Zoom #infosec\nhttps://www.valtersit.com/cve/CVE-2026-53410/", "creation_timestamp": "2026-07-17T09:02:36.369416Z"}, {"uuid": "2b5ba3e0-fad2-40c5-ab8a-e2d734497211", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "Telegram/Rir-gKoOwLGkkD-H6RCYO78diPYis1dFm0oaJon9KA7MktB-", "content": "", "creation_timestamp": "2026-07-17T12:00:05.541070Z"}, {"uuid": "328d508d-d0fd-4492-bc99-0279507448bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/xakep_ru/19704", "content": "\u0412 Zoom \u0434\u043b\u044f Windows \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Zoom \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Windows-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 SDK, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53412. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b 9,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\nhttps://xakep.ru/2026/07/17/zoom-patch/", "creation_timestamp": "2026-07-17T16:00:03.495222Z"}, {"uuid": "1eba322e-108d-4770-b41f-47a173f33da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-53412", "type": "seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3mqush3pldl2h", "content": "\ud83d\udce2 Zoom : vuln\u00e9rabilit\u00e9 critique CVE-2026-53412 permettant la prise de contr\u00f4le de comptes\n\ud83d\udcdd ## \ud83d\udd0d Contexte\n\nSource : BleepingComputer \u2014 publi\u00e9 l\u2026\nhttps://cyberveille.ch/posts/2026-07-18-zoom-vulnerabilite-critique-cve-2026-53412-permettant-la-prise-de-controle-de-comptes/ #CVE_2026_53409 #Cyberveille", "creation_timestamp": "2026-07-17T22:30:22.045098Z"}, {"uuid": "f56cb6f8-3ba8-4813-b3f0-b7997e0a0a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/xakep_ru/19704", "content": "\u0412 Zoom \u0434\u043b\u044f Windows \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Zoom \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f Windows-\u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0438 SDK, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2026-53412. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c \u0436\u0435\u0440\u0442\u0432\u044b \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b 9,8 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS.\n\nhttps://xakep.ru/2026/07/17/zoom-patch/", "creation_timestamp": "2026-07-18T00:00:26.945002Z"}, {"uuid": "6ff70244-3fd6-45f8-b746-321c1643f33f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "Telegram/Rir-gKoOwLGkkD-H6RCYO78diPYis1dFm0oaJon9KA7MktB-", "content": "", "creation_timestamp": "2026-07-18T00:00:31.926211Z"}, {"uuid": "b94feded-29ed-4367-9610-bf637d8f92b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "Telegram/poBBiQ_qu70N7sRnjeOI93HcQHbuAwpSrsTs7eoaV1xvsQ", "content": "", "creation_timestamp": "2026-07-18T13:00:03.821131Z"}, {"uuid": "f85fe81b-6475-4de7-9323-f381037083e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "Telegram/poBBiQ_qu70N7sRnjeOI93HcQHbuAwpSrsTs7eoaV1xvsQ", "content": "", "creation_timestamp": "2026-07-19T00:00:28.195339Z"}, {"uuid": "d1c3b84f-7457-483e-a487-51c4b2385361", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/deafnews-auto.bsky.social/post/3mr27gqdfof2w", "content": "Zoom Patches CVE-2026-53412: Critical Remote Account Takeover on Windows, CVSS 9.8", "creation_timestamp": "2026-07-20T02:06:07.835436Z"}, {"uuid": "32940a9e-555f-46f1-b427-34c35f1e2caf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/pphm_HackerNews/2094", "content": "\ud83d\udd34 Critical Zoom Workplace Flaw Lets Unauthenticated Attackers Take Over Accounts Remotely\n\nZoom has disclosed a critical vulnerability in its Windows desktop software that could allow unauthenticated attackers to take over user accounts remotely.\n\nThis issue, tracked as CVE-2026-53412 and addressed in bulletin ZSB-26014, arises from improper input validation in Zoom Workplace for Windows and the Zoom Workplace VDI Client for Windows.\n\nThe vulnerability has a CVSS score of 9.8 out of 10, indicating its severe risk due to its network-reachable nature, lack of authentication requirements, and potential for complete compromise of confidentiality, integrity, and availability.", "creation_timestamp": "2026-08-23T00:00:43.892337Z"}, {"uuid": "7aaafb58-3cbd-4d72-9279-596627a77639", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3mr4iwab3ec2v", "content": "Zoom\u3001\u7121\u8a8d\u8a3c\u3067\u30a2\u30ab\u30a6\u30f3\u30c8\u4e57\u3063\u53d6\u308a\u304c\u53ef\u80fd\u306a\u6700\u9ad8\u6df1\u523b\u5ea6\u306e\u8106\u5f31\u6027\u3092\u4fee\u6b63-CVSS 9.8(CVE-2026-53412)\nrocket-boys.co.jp/security-mea...\n\n#\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5bfe\u7b56Lab #security #securitynews #\u8106\u5f31\u6027", "creation_timestamp": "2026-07-21T00:01:14.124730Z"}, {"uuid": "c27af75b-093c-473e-8e89-31446af71550", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/EchelonEyes/4765", "content": "\u041c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Zoom \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0438\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u00a0\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\u00a0\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53412 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS9,8 \u0438\u0437 10.\n\u00a0\n\u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Zoom\u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.0, Windows VDI Client \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.0.\n\u00a0\nZoom Workplace, \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a Zoom, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u043c\u0438 \u043b\u044e\u0434\u0435\u0439 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0433\u0440\u0443\u043f\u043f\u043e\u0432\u044b\u0445 \u0447\u0430\u0442\u043e\u0432 \u0438 \u043e\u0431\u043c\u0435\u043d\u0430 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438.\n\u00a0\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435, \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u0432 \u0435\u0451 \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\u00a0\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\u00a0\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/6c0c07\n\u00a0\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-26T02:00:23.962442Z"}, {"uuid": "ee7edba0-70c2-40e0-a225-301916ae38c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53412", "type": "seen", "source": "https://t.me/EchelonEyes/4765", "content": "\u041c\u0438\u043b\u043b\u0438\u043e\u043d\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Zoom \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0438\u0437-\u0437\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438\n\u00a0\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Zoom \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u0435\u0442 \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0432\u043e\u0435\u043c \u043d\u0430\u0441\u0442\u043e\u043b\u044c\u043d\u043e\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0435 \u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0442\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0437\u0430\u043f\u0438\u0441\u0435\u0439.\n\u00a0\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2026-53412 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS9,8 \u0438\u0437 10.\n\u00a0\n\u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Zoom\u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 Zoom Workplace \u0434\u043b\u044f Windows \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.0, Windows VDI Client \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0439 7.0.10, 6.6.15 \u0438 6.5.18, \u0430 \u0442\u0430\u043a\u0436\u0435 Meeting SDK \u0434\u043b\u044f Windows \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 7.0.0.\n\u00a0\nZoom Workplace, \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0439 \u043a\u0430\u043a Zoom, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430\u043c\u0438 \u043b\u044e\u0434\u0435\u0439 \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0434\u043b\u044f \u0432\u0438\u0434\u0435\u043e\u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0439, \u0433\u0440\u0443\u043f\u043f\u043e\u0432\u044b\u0445 \u0447\u0430\u0442\u043e\u0432 \u0438 \u043e\u0431\u043c\u0435\u043d\u0430 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438.\n\u00a0\n\u041f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b \u043d\u0438\u043a\u0430\u043a\u0438\u0445 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435, \u043b\u0438\u0448\u044c \u043e\u043f\u0438\u0441\u0430\u0432 \u0435\u0451 \u043a\u0430\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\u00a0\n\u0412\u0435\u043d\u0434\u043e\u0440 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f.\n\u00a0\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://eyes.etecs.ru/r/6c0c07\n\u00a0\n#\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c", "creation_timestamp": "2026-07-27T00:00:19.246410Z"}]}