MEDIUMVulnerability
Global

CISA gives federal agencies two weeks to patch Microsoft bug exploited in DPRK campaign

·Source: The Record

Updated:

Executive Summary

Researchers disclosed the bug to Microsoft after examining a long-running campaign by North Korean hackers to exploit the job application process.

Analysis

Researchers disclosed the bug to Microsoft after examining a long-running campaign by North Korean hackers to exploit the job application process.
Source Attribution

Originally published by The Record on Aug 12, 2026.

Related Threats

MEDIUMVulnerabilityNEW

CA: Snoopers Beware; NL’s Privacy Commissioner Recommends Naming Individuals in Snooping-Related Breaches

VOCM reports: The province’s Privacy Commissioner is recommending that public bodies consider providing the name of anyone involved in snooping-related privacy breaches to affected individuals. The recommendation comes after an employee of NL Health Services had a peek at a person’s health record. NLHS was notified. The Privacy Commissioner says the health authority took the appropriate steps... S

DataBreaches.net
HIGHVulnerabilityNEW

NVD HIGH: CVE-2026-73325 — Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserializati...

Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.load_quantized_model_pt() unconditionally calls torch.load with weights_only=False, invoking Python's pickle machinery during deserialization. Attackers can embed malicious __reduce_

CVE-2026-73325
NIST NVD
MEDIUMVulnerability

Plug and Pwn attack uses fake USB devices for Windows SYSTEM access

Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM privileges. [...]

BleepingComputer