Cybersecurity Intelligence Report — 25 August 2026

Microsoft has patched a critical remote code execution vulnerability (CVE-2026-69836) in Entra ID, initially reported to have been exploited in the wild. Entra ID is Microsoft’s cloud identity service, formerly Azure Active Directory, that verifies logins and controls access to Microsoft 365, Azure, and connected third-party apps. Tracked as CVE-2026-69836, with the maximum CVSS score of 10.0, the vulnerability was discovered by Microsoft Principal Security Engineer Robert Fitzpatrick a

News that suspected Iranian hackers caused the shutdown of a British power plant broke over the weekend, raising the question of whether UK’s power grid and, indeed, the country’s critical infrastructure can fend off destructive cyber attacks. According to sources of UK news outlet The Telegraph, the power plant was offline for four days in July 2026, around the same time when 30+ community water utilities in the US were hit in a coordinated cyberattack … <a href="https://ww

Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability - Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Due: 2026-08-27

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch an actively exploited vulnerability in Zimbra Collaboration Suite (ZCS) within three days. [...]

Red Hat and the Keycloak project have released patches to address a critical security flaw in the open-source identity and access management server that could allow an unauthenticated remote attacker to take over any user account by forcing a password reset. The vulnerability, assigned the CVE identifier CVE-2026-18963, is rated 9.1 on the CVSS scoring system by Red Hat, which acts as

Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used to forge SAML responses and log in as administrators. [...]

Victim: Frato | Group: dragonforce | Website: frato.com | Country: BR | Details: (release includes data for the entire group of companies across all countries of operation, financial documentation, shareholder information, personal data of employees and clients, and much more) FRATO is recognized for its commitment to quality and style, merging traditional craftsmanship with inn

Victim: Criba | Group: dragonforce | Website: criba.com.ar | Country: AR | Details: (release includes data on Argentina, Uruguay, and other countries, as well as financial documents and client documentation, including a vast amount of information not intended for public disclosure) CRIBA Empresa Constructora Argentina specializes in providing comprehensive solutions for every stage

Victim: Brookview Financial | Group: dragonforce | Website: www.brookviewfinancial.com | Country: CA | Details: (data of many thousands of customers, including credit reports, SSNs, addresses, etc.) Brookview Financial is a boutique private lender specializing in quick-close financing solutions for real estate projects. Established in 1992, the company has served as a trusted capital partner for thousands of

Victim: Wozair | Group: dragonforce | Website: wozair.com | Country: AE | Details: Wozair specializes in the design, manufacture, and installation of heavy-duty heating, ventilating, and air conditioning (HVAC) products for various sectors including Marine, Naval, Military, Nuclear, Oil and Gas, Powergen, and Renewables. Their product range includes air handling units, dampers, fi

Victim: Meridian Forest Services | Group: beast | Website: www.meridianforest.ca | Country: CA | Details: Meridian Forest Services Limited is a progressive natural resource consulting company that offers a range of services including forest engineering, silviculture, tenure management, strategic planning, geomatics, wildlife and danger tree assessment, and project management. The company caters to a div

Big security risks come in small packages. While enterprise security teams focus on policing the proliferation of employees using ChatGPT and Claude for quick drafting tasks, a more urgent threat is posed by a handful of AI super-adopters who are quietly hardcoding unvetted tools into critical business operations. According to new research published by Akamai, the top 5% of enterprise power

Victim: Consultores de Seguros | Group: qilin | Website: www.consegsa.com | Details: N/A

Victim: SHAHEEN LAW GROUP PLC - Richmond, Virginia, USA | Group: Deadlock | Website: slgjustice.com | Country: US | Details: Family law firm, established 1995 by Victor A. Shaheen (†2025 - the General Assembly of Virginia honored him with a resolution; google it, it is touching). Now run by his three sons. 48 employees across four offices: Richmond, Midlothian, Virginia Beach, Newport News. What do they do? They close 150

Victim: FBC | Group: Deadlock | Website: furnbed.co.za | Country: ZA | Details: Furniture Bargaining Council in South Africa. This is the tariff council for the furniture, mattress and upholstery industry.The platform serves employers and employees in the industry in regions such as Gauteng, North West, Mpumalanga, Limpopo and the Free State to handle legal and administrative p

Victim: lagegepesca.it | Group: safepay | Website: lagegepesca.it | Country: IT | Details: Based in Lallio, near Bergamo in Lombardy, the company traces its origins to 1957, when Santo Gavazzi established a small …

Victim: The Liberty Group | Group: Dark Project | Website: libertygrp.com | Country: US | Details: About The Liberty Group Companys offerings include local, long distance, and international moving, lab relocation services, and logistics solutions. They cater to a diverse range of clients, providing professional and comprehensive assistance to both residential and commercial customers. Investigato

Victim: Jones, Little & Co., CPAs, LLP | Group: Dark Project | Website: www.jonesandlittle.com | Country: US | Details: About Jones, Little & Co., CPAs, LLP Jones, Little & Co., CPAs, LLP is a professional accounting firm that offers a wide range of services including business accounting, tax preparation, and IRS problem resolution. They cater to small businesses, non-profit organizations, and specialized industries

Victim: Design-Aire Engineering, INC | Group: Dark Project | Website: www.daengineering.com | Country: US | Details: About Design-Aire Engineering, INC Design-Aire Engineering specializes in mechanical, electrical, plumbing, and energy engineering services. They focus on providing innovative and sustainable solutions for their clients. The company serves a diverse range of clients, including those in the public an

Victim: Furnished Quarters | Group: Dark Project | Website: www.furnishedquarters.com | Country: US | Details: About Furnished Quarters Headquartered in New York City, New York, Furnished Quarters, is to deliver exceptional residential experiences with passion, reliability and integrity always innovating and putting people first. They consider this in everything they do and every guest and client experience

Victim: FFKR Architects | Group: incransom | Country: US | Details: FFKR Architects is a leading architecture and interior design firm based in Utah, with additional offices in Arizona and Idaho. They offer a wide range of services including architecture, landscape architecture, interior design, and environmental graphic design. The firm is known for its design exce

Victim: Bihl | Group: akira | Country: DE | Details: Boustead International Heaters (BIH) is a leading global designer and supplier of thermal proce ss equipment, including direct fired heaters, waste heat recovery units (WHRUs), and heat recov ery steam generators (HRSGs). We will upload 392gb of corporate data soon. Huge amount of detailed personal

Victim: Davroc | Group: Booba Project | Website: www.davroc.co.uk | Country: GB | Details: Furniture and Home Furnishings Manufacturing Stolen data: 15 GB.