The most critical threat intelligence from the past 7 days, ranked by real-world
impact and severity. Curated by CyberHawk's automated hunt engine and scored by
Rudra Verma,
Senior Security Architect and Researcher, CyberHawk Consultancy.
Period: 30 Aug — 6 Sept 2026
· Updated every 15 minutes
In Part 1 of this guide, we examined two common incident scenarios: cross-account Amazon Simple Storage Service (Amazon S3) data deletion with ransomware implications, and cryptocurrency mining deploy…
Healthcare company McKesson acknowledged a data breach. ShinyHunters claims to have stolen hundred of millions of records
It’s a vulnerability that allows someone to recover the order of ballots cast, newly exploited with AI tools. Nearly four years since the original vulnerability was disclosed, I was still able t…
Mikrotik released a patch late last week for an already-exploited vulnerability. The vulnerability allows an SSH authentication bypass and is already being exploited. At this point, assume compromise.…
Introduction 
Social media ads for a free streaming service exposed roughly 570,000 people to StreamRat, a banking Trojan that can take control of infected phones.
On August 14th, 2026, we received a submission for an Unauthenticated Second-Order SQL Injection vulnerability in All-in-One WP Migration and Backup, a WordPress plugin with more than 5 million active…
On August 19th, 2026, we publicly disclosed a critical Unauthenticated Arbitrary File Upload vulnerability in Elementor Pro, a WordPress plugin with more than 6,000,000 active installations. This vuln…
On July 9th, 2026, we publicly disclosed a critical Unauthenticated Arbitrary File Upload vulnerability in Super Forms, a WordPress plugin with an estimated 13,000 active installations. This vulnerabi…
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerab…
Want more? The full feed has 100+ active intelligence items.
Reading is step one. The CyberHawk platform lets you act — scan IOCs from these stories, track live infostealer campaigns, query 3.6M+ threat indicators, and monitor your attack surface in real time. Free to join.
