{ "generated_at": "2026-08-22T02:51:53+00:00", "count": 30, "articles": [ { "id": 816, "title": "Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain", "url": "https://unit42.paloaltonetworks.com/sdlc-supply-chain/", "author": "Yaron Avital", "summary": "Attackers are targeting CI/CD pipelines and developer tools instead of application code, requiring total SDLC visibility and strict security controls The post Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain appeared first on Unit 42.", "published_at": "2026-08-21 23:00:21", "discovered_at": "2026-08-21 23:05:01", "updated_at": null, "priority_score": 0, "source": "Palo Alto Networks Unit 42", "source_group": "Vendor Research", "categories": [], "cves": [] }, { "id": 814, "title": "CVE-2026-77811 - Stored Cross-Site Scripting via Integration Template Asset in OpenSearch Dashboards", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-088-aws/", "author": "aws@amazon.com", "summary": "Bulletin ID: 2026-088-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 13:00 PM PDT Description: Amazon OpenSearch Service is a managed service that makes it easy to deploy, operate, and scale OpenSearch clusters. We identified CVE-2026-77811, a stored cross-site scripting issue in the dashboards-observability plugin in OpenSearch Dashboards. Improper input validation in the integrations static file endpoint allows a remote authenticated actor with write permissions to OpenSearch Dashboards saved objects to upload a custom integration containing arbitrary JavaScript. When another user accesses the static file endpoint directly, the script executes in their browser session and can perform actions on their behalf, including making API calls to OpenSearch with their privileges. Affected products & versions: OpenSearch Dashboards dashboards-observability plugin (open-source, self-managed): - Affected: versions before 3.4 and versions before 2.19.6 - Fixed: versions 3.4 and 2.19.6 Amazon OpenSearch Service (AWS Managed): - Affected: versions before 3.3 - Fixed: fixed in all affected versions (via service software update) Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.", "published_at": "2026-08-21 20:12:14", "discovered_at": "2026-08-21 20:20:01", "updated_at": null, "priority_score": 5, "source": "AWS Security Bulletins", "source_group": "Vendor Research", "categories": [ "Cloud Security", "Vulnerabilities" ], "cves": [ "CVE-2026-77811" ] }, { "id": 813, "title": "Lawmakers call for investigation into impact of CISA staffing cuts", "url": "https://therecord.media/lawmakers-call-for-investigation-into-impact-of-cisa-cuts", "author": null, "summary": "Lawmakers say little is known about how recent cuts have impacted CISA and how the knowledge that was lost has been replaced.", "published_at": "2026-08-21 19:56:00", "discovered_at": "2026-08-21 20:10:02", "updated_at": null, "priority_score": 0, "source": "The Record", "source_group": "Security Journalism", "categories": [ "DFIR" ], "cves": [] }, { "id": 812, "title": "CVE-2026-77810 - Issue with Athena Federated Query Neptune Connector", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-087-aws/", "author": "aws@amazon.com", "summary": "Bulletin ID: 2026-087-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 12:30 PM PDT Description: Amazon Athena is a serverless, interactive query service that lets you analyze data directly in Amazon S3 using standard SQL. Athena Query Federation is a feature that allows you to connect to data sources outside of Amazon S3 like DynamoDB, Azure Synapse, and custom connectors using standard SQL syntax. These connectors are open source and deployed to the Athena service on a regular basis. We identified CVE-2026-77810, in the Neptune connector where a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. Impacted versions: =v2024.15.1 Please refer to the article below for the most up-to-date and complete information related to this AWS Security Bulletin.", "published_at": "2026-08-21 19:42:12", "discovered_at": "2026-08-21 20:00:02", "updated_at": null, "priority_score": 5, "source": "AWS Security Bulletins", "source_group": "Vendor Research", "categories": [ "Cloud Security", "Vulnerabilities" ], "cves": [ "CVE-2026-77810" ] }, { "id": 815, "title": "14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2", "url": "https://thehackernews.com/2026/08/14-trojanized-npm-packages-drop-redc2.html", "author": "info@thehackernews.com (The Hacker News)", "summary": "Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working calendar and streak utilities but are engineered to stealthily deliver an artificial intelligence (AI)-powered Linux implant dubbed RedC2 4.0. \"When the module loads, it locates the bundled binary, marks it executable, and launches it as a detached background process,\" TrendAI, Trend Micro's", "published_at": "2026-08-21 18:53:00", "discovered_at": "2026-08-21 20:30:02", "updated_at": null, "priority_score": 0, "source": "The Hacker News", "source_group": "Security Journalism", "categories": [ "AI Security", "Linux", "Malware", "Security Research" ], "cves": [] }, { "id": 811, "title": "Your Shredded Visa Card May Still Work at the Checkout", "url": "https://securityaffairs.com/197663/hacking/your-shredded-visa-card-may-still-work-at-the-checkout.html", "author": "Pierluigi Paganini", "summary": "UMass Amherst researchers showed expired Visa contactless cards can make real purchases by exploiting an unsigned expiry field in Visa’s EMV kernel. Researchers at the University of Massachusetts Amherst demonstrated at USENIX Security 2026 in Baltimore that expired Visa contactless credit cards can complete real purchases, including transactions at live retail and grocery merchants, by […]", "published_at": "2026-08-21 18:03:59", "discovered_at": "2026-08-21 18:45:03", "updated_at": null, "priority_score": 0, "source": "Security Affairs", "source_group": "Other", "categories": [ "Linux" ], "cves": [] }, { "id": 809, "title": "New SynkLoader malware pushed in Microsoft Teams phishing campaign", "url": "https://www.bleepingcomputer.com/news/security/new-synkloader-malware-pushed-in-microsoft-teams-phishing-campaign/", "author": "Bill Toulas", "summary": "A previously unknown malware family dubbed SynkLoader is being distributed in Microsoft Teams phishing campaigns to steal credentials via a fake lock screen. [...]", "published_at": "2026-08-21 18:01:30", "discovered_at": "2026-08-21 18:05:02", "updated_at": null, "priority_score": 0, "source": "BleepingComputer", "source_group": "Security Journalism", "categories": [ "Malware", "Microsoft", "Phishing" ], "cves": [] }, { "id": 810, "title": "Issue with FreeRTOS-Kernel - CVE-2026-77234, CVE-2026-77235, CVE-2026-77236, CVE-2026-77237", "url": "https://aws.amazon.com/security/security-bulletins/rss/2026-086-aws/", "author": "aws@amazon.com", "summary": "Bulletin ID: 2026-086-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 08/21/2026 10:30 AM PDT Description: FreeRTOS-Kernel is a real-time operating system kernel for microcontrollers and small microprocessors. AWS identified four issues with FreeRTOS-Kernel, affecting multiple versions. - CVE-2026-77234: This issue affects configurations that use the FreeRTOS MPU together with software timers; applications that do not use the FreeRTOS MPU are not affected. - CVE-2026-77235: This issue affects ARM TrustZone (ARMv8-M) configurations; applications that do not use ARM TrustZone secure contexts are not affected. - CVE-2026-77236: This issue affects ARM TrustZone (ARMv8-M) configurations; applications that do not use ARM TrustZone secure contexts are not affected. - CVE-2026-77237: This issue affects builds with queue sets enabled; applications built without queue sets are not affected. Impacted versions: - CVE-2026-77234: >=7.0.0 AND =10.2.0 AND =10.2.0 AND =7.4.0 AND", "published_at": "2026-08-21 17:59:03", "discovered_at": "2026-08-21 18:10:01", "updated_at": null, "priority_score": 5, "source": "AWS Security Bulletins", "source_group": "Vendor Research", "categories": [ "Cloud Security", "Linux", "Vulnerabilities" ], "cves": [ "CVE-2026-77234", "CVE-2026-77235", "CVE-2026-77236", "CVE-2026-77237" ] }, { "id": 808, "title": "OWASP Flags Top AI Skill Risks in New Security Blueprint", "url": "https://www.darkreading.com/application-security/owasp-flags-top-ai-skill-risks-security-blueprint", "author": "Robert Lemos", "summary": "The Open Worldwide Application Security Project has a brand-new top 10 security list tailored for the modern era, and it debuts a Universal Skill Format to add consistency and security to the AI add-ons.", "published_at": "2026-08-21 17:36:53", "discovered_at": "2026-08-21 17:45:05", "updated_at": null, "priority_score": 0, "source": "Dark Reading", "source_group": "Security Journalism", "categories": [], "cves": [] }, { "id": 707, "title": "Cisco Crosswork Security Hardening Release: August 2026", "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-crosswork-UzDTU9Vh?vs_f=Cisco%20Security%20Advisory%26vs_cat%3DSecurity%20Intelligence%26vs_type%3DRSS%26vs_p%3DCisco%20Crosswork%20Security%20Hardening%20Release%3A%20August%202026%26vs_k%3D1", "author": null, "summary": "As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching and to streamline the disclosure process, Cisco has grouped these issues by their underlying vulnerability class — Common Weakness Enumeration (CWE) — and assigned a single Common Vulnerabilities and Exposures Identifier (CVE ID) to each CWE grouping. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hardening-crosswork-UzDTU9Vh Security Impact Rating: Critical CVE: CVE-2026-20030,CVE-2026-20357,CVE-2026-20358,CVE-2026-20359", "published_at": "2026-08-21 16:54:40", "discovered_at": "2026-08-19 16:10:01", "updated_at": "2026-08-21 17:15:03", "priority_score": 30, "source": "Cisco Security Advisories", "source_group": "Vendor Research", "categories": [ "Vulnerabilities" ], "cves": [ "CVE-2026-20030", "CVE-2026-20357", "CVE-2026-20358", "CVE-2026-20359" ] }, { "id": 805, "title": "U.S. Bank says breach claims related to fourth-party incident", "url": "https://therecord.media/us-bank-says-breach-claims-related-to-fourth-party-incident", "author": null, "summary": "The bank said there is no evidence that its own systems, networks or data repositories were compromised.", "published_at": "2026-08-21 16:16:00", "discovered_at": "2026-08-21 16:30:05", "updated_at": null, "priority_score": 0, "source": "The Record", "source_group": "Security Journalism", "categories": [], "cves": [] }, { "id": 804, "title": "Hundreds of leaked AWS keys give full control over corporate accounts", "url": "https://www.bleepingcomputer.com/news/security/hundreds-of-leaked-aws-keys-give-full-control-over-corporate-accounts/", "author": "Bill Toulas", "summary": "More than 9,300 Amazon Web Services (AWS) access keys publicly exposed between August 2022 and August 2026 are still active and valid. [...]", "published_at": "2026-08-21 15:55:15", "discovered_at": "2026-08-21 16:05:02", "updated_at": null, "priority_score": 0, "source": "BleepingComputer", "source_group": "Security Journalism", "categories": [ "Cloud Security" ], "cves": [] }, { "id": 806, "title": "Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot", "url": "https://thehackernews.com/2026/08/microsoft-defenders-own-driver-can-be.html", "author": "info@thehackernews.com (The Hacker News)", "summary": "Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary kernel-level file and registry operations on Windows systems ranging from Windows 7 through Windows 11 25H2, with no software flaw exploited and no driver imported from outside the machine. The driver, BTR.sys (Boot Time Removal Tool), is a", "published_at": "2026-08-21 15:52:10", "discovered_at": "2026-08-21 16:40:04", "updated_at": null, "priority_score": 0, "source": "The Hacker News", "source_group": "Security Journalism", "categories": [ "Linux", "Microsoft" ], "cves": [] }, { "id": 807, "title": "Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet", "url": "https://thehackernews.com/2026/08/android-car-malware-spreads-through.html", "author": "info@thehackernews.com (The Hacker News)", "summary": "Cybersecurity researchers have flagged a new malware family that's specifically designed to infect Android-based vehicle head unit firmware developed by DoFun. Kaspersky, which discovered the threat in June 2026, said the end goal of the malware is to serve a multi-stage downloader to enable ad fraud and creation of a proxy botnet. \"The malware spread through the built-in updaters of", "published_at": "2026-08-21 15:41:44", "discovered_at": "2026-08-21 16:40:04", "updated_at": null, "priority_score": 0, "source": "The Hacker News", "source_group": "Security Journalism", "categories": [ "Cybercrime", "Malware", "Mobile Security", "Security Research" ], "cves": [] }, { "id": 803, "title": "Canada’s Hospital for Sick Children attacked by cybercriminals again as employee data stolen", "url": "https://therecord.media/canada-hospital-for-sick-children-attacked-again-employee-data", "author": null, "summary": "The Hospital for Sick Children — which was hit in a ransomware incident in 2022 that disabled some of its systems — released a statement on Thursday warning of a data theft incident they believe is tied to a third-party software application.", "published_at": "2026-08-21 15:00:00", "discovered_at": "2026-08-21 15:05:03", "updated_at": null, "priority_score": 15, "source": "The Record", "source_group": "Security Journalism", "categories": [ "Ransomware" ], "cves": [] }, { "id": 802, "title": "Microsoft blames Windows gaming issues on RGB lighting devices", "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-blames-windows-gaming-issues-on-rgb-lighting-devices/", "author": "Sergiu Gatlan", "summary": "Microsoft says ongoing issues causing games to crash or fail to launch after installing the August 2026 Windows updates may be caused by peripherals with RGB lighting. [...]", "published_at": "2026-08-21 14:54:49", "discovered_at": "2026-08-21 15:05:02", "updated_at": null, "priority_score": 0, "source": "BleepingComputer", "source_group": "Security Journalism", "categories": [ "Microsoft" ], "cves": [] }, { "id": 801, "title": "Is Online Privacy Possible? How Digital Identities Can Help", "url": "https://www.bleepingcomputer.com/news/security/is-online-privacy-possible-how-digital-identities-can-help/", "author": "Sponsored by ANONYOME LABS", "summary": "Using the same email, phone number, payment method, and other identifiers makes it easier for data brokers and attackers to profile your activity. Anonyome Labs explains how separate digital personas can reduce correlation and limit the impact of breaches, spam, and identity theft. [...]", "published_at": "2026-08-21 14:00:10", "discovered_at": "2026-08-21 14:10:01", "updated_at": null, "priority_score": 0, "source": "BleepingComputer", "source_group": "Security Journalism", "categories": [], "cves": [] }, { "id": 799, "title": "Calling on Cyber Pros to Help Defend City Hall", "url": "https://www.darkreading.com/cyber-risk/cyber-pros-help-city-hall", "author": "Darshan Tiwari", "summary": "Government agencies with smaller budgets need support — and here's how you can help.", "published_at": "2026-08-21 14:00:00", "discovered_at": "2026-08-21 14:05:03", "updated_at": null, "priority_score": 0, "source": "Dark Reading", "source_group": "Security Journalism", "categories": [], "cves": [] }, { "id": 772, "title": "Calling on Cyber Pros to Help Defend City Hall", "url": "https://www.darkreading.com/cyber-risk/calling-on-cyber-pros-to-help-city-hall", "author": "Darshan Tiwari", "summary": "Government agencies with smaller budgets need support — and here's how you can help.", "published_at": "2026-08-21 14:00:00", "discovered_at": "2026-08-20 19:05:06", "updated_at": null, "priority_score": 0, "source": "Dark Reading", "source_group": "Security Journalism", "categories": [], "cves": [] }, { "id": 800, "title": "Russian network monitoring firm confirms cyberattack claimed by pro-Ukraine hackers", "url": "https://therecord.media/russian-network-monitoring-firm-confirms-cyberattack-claimed-by-pro-ukraine-group", "author": null, "summary": "The statement came a day after a hacking group calling itself Black Spark claimed it had spent more than a month inside Microolap’s network and gained access to its internal systems, including EtherSensor, the company's network traffic analysis platform.", "published_at": "2026-08-21 13:55:00", "discovered_at": "2026-08-21 14:05:04", "updated_at": null, "priority_score": 0, "source": "The Record", "source_group": "Security Journalism", "categories": [], "cves": [] }, { "id": 798, "title": "Microsoft rolls out Classic Outlook theme for New Outlook users", "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-rolls-out-classic-outlook-theme-for-new-outlook-users/", "author": "Sergiu Gatlan", "summary": "Microsoft has started rolling out a Classic Outlook theme for users of Outlook on the web and the New Outlook for Windows. [...]", "published_at": "2026-08-21 13:39:35", "discovered_at": "2026-08-21 13:40:04", "updated_at": null, "priority_score": 0, "source": "BleepingComputer", "source_group": "Security Journalism", "categories": [ "Microsoft" ], "cves": [] }, { "id": 797, "title": "OpenAI Adds Controls That Should've Been There Already", "url": "https://www.darkreading.com/application-security/openai-adds-controls-already", "author": "Alexander Culafi", "summary": "The new AI security controls follow the Hugging Face incident last month, though many of these additions perhaps should have been in place prior to the frontier models escaping.", "published_at": "2026-08-21 13:30:00", "discovered_at": "2026-08-21 13:35:03", "updated_at": null, "priority_score": 0, "source": "Dark Reading", "source_group": "Security Journalism", "categories": [ "AI Security" ], "cves": [] }, { "id": 796, "title": "Six Maximum-Severity Flaws Found in Cisco Products", "url": "https://securityaffairs.com/197640/security/six-maximum-severity-flaws-found-in-cisco-products.html", "author": "Pierluigi Paganini", "summary": "Cisco patched nine critical flaws, including six rated CVSS 10.0, found during internal testing. None are known to be exploited. Cisco released another batch of security fixes for its Crosswork platforms and Secure Workload software, part of what it’s calling an ongoing internal security review, and the CVSS scores in this round are unusually severe. […]", "published_at": "2026-08-21 12:30:16", "discovered_at": "2026-08-21 12:40:04", "updated_at": null, "priority_score": 10, "source": "Security Affairs", "source_group": "Other", "categories": [ "Cloud Security", "Vulnerabilities" ], "cves": [] }, { "id": 794, "title": "CISA orders feds to patch actively exploited TrueConf Server flaws", "url": "https://www.bleepingcomputer.com/news/security/cisa-orders-feds-to-patch-actively-exploited-trueconf-server-flaws/", "author": "Sergiu Gatlan", "summary": "The U.S. Cybersecurity and Infrastructure Security Agency (CISA) ordered U.S. federal agencies to prioritize patching two actively exploited vulnerabilities in the TrueConf Server self-hosted communications platform. [...]", "published_at": "2026-08-21 12:25:33", "discovered_at": "2026-08-21 12:35:01", "updated_at": null, "priority_score": 25, "source": "BleepingComputer", "source_group": "Security Journalism", "categories": [ "Cloud Security" ], "cves": [] }, { "id": 795, "title": "Wazuh and AI For Enhanced SOC Workflows", "url": "https://thehackernews.com/2026/08/wazuh-and-ai-for-enhanced-soc-workflows.html", "author": "info@thehackernews.com (The Hacker News)", "summary": "Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations increasingly rely on AI to automate repetitive tasks, uncover patterns hidden within large datasets, and support faster decision-making. Cybersecurity has experienced a similar transformation. While attackers employ AI to automate", "published_at": "2026-08-21 11:21:39", "discovered_at": "2026-08-21 12:35:01", "updated_at": null, "priority_score": 0, "source": "The Hacker News", "source_group": "Security Journalism", "categories": [ "AI Security" ], "cves": [] }, { "id": 793, "title": "Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics", "url": "https://securityaffairs.com/197630/apt/fake-conferences-oauth-and-whatsapp-inside-russias-new-espionage-tactics.html", "author": "Pierluigi Paganini", "summary": "Google tracks three Russia-linked espionage clusters using phishing and legitimate authentication tools to target researchers, diplomats and defense staff. Google’s Threat Intelligence Group tracked three separate suspected Russia-linked cyber espionage clusters. All three focus on the same thing: abusing authentication features that are supposed to protect accounts to access them instead. Threat actors target researchers, […]", "published_at": "2026-08-21 11:11:11", "discovered_at": "2026-08-21 11:40:05", "updated_at": null, "priority_score": 0, "source": "Security Affairs", "source_group": "Other", "categories": [ "APT / Nation-State", "Phishing", "Threat Actors", "Threat Intelligence" ], "cves": [] }, { "id": 790, "title": "Microsoft warns of max severity Entra ID flaw exploited in attacks", "url": "https://www.bleepingcomputer.com/news/microsoft/microsoft-warns-of-max-severity-entra-id-flaw-exploited-in-attacks/", "author": "Sergiu Gatlan", "summary": "Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management (IAM) platform that has been exploited in attacks. [...]", "published_at": "2026-08-21 11:04:10", "discovered_at": "2026-08-21 11:10:04", "updated_at": null, "priority_score": 20, "source": "BleepingComputer", "source_group": "Security Journalism", "categories": [ "Microsoft", "Vulnerabilities" ], "cves": [] }, { "id": 791, "title": "Hackers abuse FTP server banners to deliver new Windows malware", "url": "https://www.bleepingcomputer.com/news/security/hackers-abuse-ftp-server-banners-to-deliver-new-windows-malware/", "author": "Bill Toulas", "summary": "Threat actors are abusing FTP banners to hide commands that deliver two previously undocumented remote access trojans named E4del and PINHOLE. [...]", "published_at": "2026-08-21 11:00:00", "discovered_at": "2026-08-21 11:10:04", "updated_at": null, "priority_score": 0, "source": "BleepingComputer", "source_group": "Security Journalism", "categories": [ "Malware", "Microsoft", "Threat Actors" ], "cves": [] }, { "id": 788, "title": "SickKids data breach exposes employee and job applicant info", "url": "https://www.bleepingcomputer.com/news/security/sickkids-data-breach-exposes-employee-and-job-applicant-info/", "author": "Ax Sharma", "summary": "Toronto's Hospital for Sick Children (SickKids) says a cybersecurity incident exposed the personal information of some current and former employees and job applicants, stemming from a flaw in third-party software. Clinical systems and patient records were not affected. (264) [...]", "published_at": "2026-08-21 10:10:42", "discovered_at": "2026-08-21 10:25:01", "updated_at": null, "priority_score": 0, "source": "BleepingComputer", "source_group": "Security Journalism", "categories": [ "Data Breaches" ], "cves": [] }, { "id": 792, "title": "Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0", "url": "https://thehackernews.com/2026/08/cisco-patches-nine-crosswork-and-secure.html", "author": "info@thehackernews.com (The Hacker News)", "summary": "Cisco has published another round of security updates for Crosswork platforms and Secure Workload Software as part of a continued comprehensive internal security review. Four of the security vulnerabilities affect Crosswork Data Gateway, Crosswork Network Controller, and Crosswork Planning, regardless of the device configuration. A brief description of each of the flaws is below -", "published_at": "2026-08-21 10:03:11", "discovered_at": "2026-08-21 11:25:02", "updated_at": null, "priority_score": 5, "source": "The Hacker News", "source_group": "Security Journalism", "categories": [ "Cloud Security", "Vulnerabilities" ], "cves": [] } ] }