CRITICALZero Day
Global

Microsoft patches LegacyHive Windows zero-day vulnerability

·Source: BleepingComputer

Updated:

Executive Summary

Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday. [...]

Analysis

Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday. [...]
Source Attribution

Originally published by BleepingComputer on Aug 13, 2026.

Related Threats

CRITICALApt

CISA Malcolm

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-230-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition or execute arbitrary code.</strong></p> <p>The following versions of CISA Malcolm are affected:</p> <ul> <li>Malcolm <26.0

CVE-2026-55676CVE-2026-63133
CISA Advisories
HIGHApt

New Malware turns Microsoft cloud into its control center

Security researchers are warning of a newly uncovered Python malware framework that routes much of its command-and-control (C2) activity through Microsoft services that defenders already expect to see. The Ontinue Cyber Defense Center discovered the implant while investigating an active campaign in July and has since tracked it as TWINLOOT. It was seen using SharePoint Online as a file-based dead

CSO Online
CRITICALZero Day

AI can find zero-days but still can’t reliably write secure code

In recent months, LLMs have gone from flooding open-source projects and bug bounty programs with questionable security reports that wasted developers’ time, to routinely finding zero-day flaws that humans and traditional security audit tools had missed for years — a rapid evolution in cyber capabilities that scares even their own creators . But despite these advances in vulnerability discovery and

CSO Online