SecurityWeek Briefing

"Stealthy 'City-Forum' attacks target Salesforce and ServiceNow with custom toolset."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 12 August 2026, 2351 UTC.

Content and Source:  "SecurityWeek Briefing" via email subscription from https://feedly.com. 

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.  You can find earlier posts in the "Archive" section of this blog.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

100K followers50 articles per week

#security#tech

116

Today

Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset

Exfiltration (Enterprise TA0010)

•

by Kevin Townsend / 4h

•

CityForum exfiltrates Salesforce ServiceNow

Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms. The post appeared first on SecurityWeek .

SharePoint Vulnerability Exploited Shortly After PoC Release

2 TTPs

•

by Eduard Kovacs / 9h

The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild. The post appeared first on SecurityWeek .

Mindgard Raises $30 Million to Protect AI Systems

by Ionut Arghire / 10h

The cybersecurity startup will use the fresh investment to scale its product, engineering, sales, and marketing teams. The post appeared first on SecurityWeek .

WhatsApp Unveils New Scam Alert Feature

by Eduard Kovacs / 10h

Signal has also made a security announcement: an automatic key verification feature to complement its safety number system. The post appeared first on SecurityWeek .

Ceva Logistics Operations Disrupted by Cyberattack

2 TTPs

•

by Ionut Arghire / 12h

•

Bolcom Bijenkorf customer data breach

Affecting European contract logistics operations at eight Ceva warehouses, the incident caused shipment delays for multiple customers. The post appeared first on SecurityWeek .

Chipmaker Patch Tuesday: Intel, AMD Fix Over 80 Vulnerabilities Combined

5 TTPs

•

by Eduard Kovacs / 12h

•

PatchTuesday

Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution. The post appeared first on SecurityWeek .

Yesterday

Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack

9 TTPs

•

by Ionut Arghire / 13h

•

LiteLLM supply chain breach

LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users. The post appeared first on SecurityWeek .

Fresh Windows Zero-Day Exploited in North Korean Cyberattacks

15 TTPs

•

by Ionut Arghire / 15h

The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor. The post appeared first on SecurityWeek .

Ivanti EPM Update Patches Remotely Exploitable Flaws

Adversary-in-the-Middle (Enterprise T1557)

•

by Ionut Arghire / 15h

The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service. The post appeared first on SecurityWeek .

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact

5 TTPs

•

by Eduard Kovacs / 15h

•

PatchTuesday

CISA has also published several advisories describing vulnerabilities in ICS and other OT products. The post appeared first on SecurityWeek .

SonicWall Patches Critical Vulnerabilities in Discontinued GMS Platform

3 TTPs

•

by Ionut Arghire / 16h

The security defects could allow unauthenticated attackers to execute arbitrary code remotely and read sensitive data. The post appeared first on SecurityWeek .

Cisco Patches Firewall Zero-Day Exploited for DoS Attacks

2 TTPs

•

by Eduard Kovacs / 18h

•

CVE-2026-20349

CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices. The post appeared first on SecurityWeek .

August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day

4 TTPs

•

by Ionut Arghire / 1d

•

PatchTuesday

A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges. The post appeared first on SecurityWeek .

Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws

2 TTPs

•

by Ionut Arghire / 1d

The security defects could be exploited for arbitrary code execution and denial-of-service. The post appeared first on SecurityWeek .

Zoom Patches Zero-Click Code Execution Vulnerability

2 TTPs

•

by Ionut Arghire / 1d

•

CVE-2026-53413 & 3 others

Impacting Zoom annotation, the bug could be exploited by a meeting participant to execute code on another participant’s machine. The post appeared first on SecurityWeek .

The AI Governance Gap Is a Leadership Problem: Waiting Won’t Close It

by Steve Durbin / 1d

Organizations are rushing to implement AI without fully grasping where its legal protections begin and end. The post appeared first on SecurityWeek .

SAP Patches Critical Code Injection, Memory Corruption Vulnerabilities

Privilege Escalation (Enterprise TA0004)

•

by Ionut Arghire / 1d

SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs. The post appeared first on SecurityWeek .

US Water Systems Get Cyber Boost From New Senate Bill and ‘Water Watch Center’

US water systems attacked

•

by Eduard Kovacs / 1d

The Water Watch Center launched at DEF CON aims to help under-resourced utilities protect their systems against hackers. The post appeared first on SecurityWeek .

Corma Raises $60 Million for Defensive Cybersecurity AI Model

Corma raises 60 million seed

•

by SecurityWeek News / 1d

Corma emerged from stealth with seed funding from Sequoia Capital, Khosla Ventures, and Coatue. The post appeared first on SecurityWeek .

Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities

by Eduard Kovacs / 1d

The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data. The post appeared first on SecurityWeek .

Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to Redemption

by Kevin Townsend / 1d