Microsoft Plugs Nearly 400 Security Holes
2026-08-13T13:23:22Z•980aca40656085d5a872a236dfaa671a53de102910c31d12c2de55dcea2d8596
account-takeoveractively-exploited-vulnerabilitiesadvertising-fraudandroid-botnetaws-govcloudcloud-data-breachcredential-exposurecybercrimeextortionfbi-disruptiongithub-leakiot-securitymicrosoft-patch-tuesdaypopa-botnetresidential-proxiesscattered-spidersmart-tvsnowflakevulnerability-managementzero-dayzero-day-market
What happened
KrebsOnSecurity reporting highlights major Microsoft vulnerability disclosure and patch activity, including actively exploited and publicly known flaws; criminal prosecutions involving Snowflake data theft and extortion and the Scattered Spider group; malicious use of generic streaming devices and smart-TV apps as residential proxies; the Popa Android botnet and related FBI seizure of NetNut infrastructure; a CISA credential leak involving AWS GovCloud keys; and concerns around an offensive cybersecurity startup acquiring zero-days. The collection reflects significant risks from unpatched and
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 980aca40656085d5a872a236dfaa671a53de102910c31d12c2de55dcea2d8596
- Enrichment time
- 2026-08-13T13:23:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.