Cybersecurity briefing, 2026-08-16

Adobe has widened fixes across ColdFusion, Commerce, and Campaign Classic, with seven CVEs that include authorization bypass, SQL injection, and command-injection style flaws.

• Evooo1Bot turns edge CVEs into proxy nodes
• Adobe Commerce account flaw drew attacks after disclosure
• AmnesiaStealer adds live browser session control

Recent editions

• Saturday, August 15, 2026: GeoTools regression reopens GeoServer SQL injection · 15 stories
• Friday, August 14, 2026: SharePoint JWT flaw is being exploited · 17 stories
• Thursday, August 13, 2026: CISA’s KEV update spans four live exploits · 18 stories
• Wednesday, August 12, 2026: Gunra shifts ransomware to perimeter break-ins · 18 stories
• Tuesday, August 11, 2026: VulnCheck chains SharePoint bypass into RCE · 18 stories
• Monday, August 10, 2026: Head Mare turns TrueConf updates into malware delivery · 17 stories
• Sunday, August 9, 2026: Metabase exploitation exposes connected databases · 3 stories