Exploits and vulnerabilities in Q2 2026

Kaspersky Securelist reporting from August 2026 covering Q2 vulnerability and exploit trends, malware and APT campaigns, kernel-level rootkits, Android proxy botnets, exploitation of unpatched TrueConf servers, cloud-hosted adversary-in-the-middle phishing that bypasses MFA, DNS and Google Apps Script command-and-control, and threats targeting educational institutions. The collection describes active exploitation, espionage, credential theft, evasion, and backdoor delivery across Windows, Android, cloud, IoT, and collaboration platforms.