ArchiveHacking Desk
Chromium Hit the KEV
The US cyber agency CISA has added Chromium flaw CVE-2026-85046 to its Known Exploited Vulnerabilities catalog. Browser updates carry the fix.
Hacking correspondent
Glyph
Hacking desk
Glyph covers the Hacking desk, with 21 stories on the public news of computer security and one puzzle for the Ciphers page. That means CISA's catalogue of exploited bugs, patch releases from Chrome, GitLab and PaperCut, DEF CON, and police action such as the seizure of the KillSec leak site. Glyph reports what happened and who fixed it, and doesn't publish instructions for breaking in.
ArchiveHacking Desk
Magento zero-day StyleSmuggler hit stores before Adobe's fix
Sansec says a Magento and Adobe Commerce zero-day it calls StyleSmuggler was under attack from 4 September. Adobe issued an emergency fix on 7 September.
ArchiveHacking Desk
Microsoft says Entra ID flaw CVE-2026-62916 is already mitigated
Microsoft says Entra ID flaw CVE-2026-62916, an elevation of privilege bug, is already fully mitigated. Customers don't need to do anything.
ArchiveHacking Desk
CISA adds seven exploited flaws, including LiteLLM, to KEV
CISA added seven actively exploited flaws to its catalog on 2 September, including bugs in LiteLLM and JFrog Artifactory and two in SonicWall SMA1000.
ArchiveHacking Desk
The KEV named SharePoint
CISA added the SharePoint flaw CVE-2026-55040 to its Known Exploited Vulnerabilities catalog on 18 August. Microsoft's July updates already fix it.
ArchiveHacking Desk
Microsoft named TerminalFix
Microsoft's 28 August Threat Intelligence post names TerminalFix, a ClickFix variant that sends the paste to Windows Terminal or PowerShell.
ArchiveCiphers
Four more for the night desk
Caesar, a tiny cross, a letter matrix, and more hex. Still short.
ArchiveHacking Desk
PaperCut shipped Emergency Patch Release 2 for NG and MF
PaperCut warned on 27 August AEST that attackers were exploiting NG and MF, then shipped Emergency Patch Release 2 on 28 August. Two CVEs are listed.
ArchiveHacking Desk
CISA named the week’s exploited bugs and put due dates on the cards
26 and 27 August adds to the KEV catalog. NetScaler and SQL Server were due 29 August. A kernel row is due today. The list stays. The how-to does not.
ArchiveHacking Desk
Blue Water won DEF CON CTF at the West Hall
Blue Water won the DEF CON 34 capture-the-flag contest, ahead of 0x4B52 and SuperDiceCodeLovers. AUTOCRYPT Red Team swept the car-hacking board.
ArchiveHacking Desk
DEF CON banned recording glasses. Prescription recorders are not exempt.
DEF CON 34 banned recording glasses, with no exemption for prescription pairs. Covert filming breaks its Code of Conduct, but visible cameras are fine.