9.2 Million Israeli Records Sold as a New Breach Are 20 Years Old
2026-08-10T14:51:38Z•f19abc6cfcad68f243e8b230a387492a9ca30b957d8a3c0302fc86c420211bbd
CVE-2026-8037AI securityCISA KEVCSS injectionIsrael population registryMetabaseMicrosoft 365OS command injectionProgress LoadMasteractive exploitationcredential theftcybersecurity benchmarkingdata breachdata leakdefense and aerospaceexport-controlled dataknown exploited vulnerabilitiesphishingremote code executionsession hijackingzero-day
What happened
Security Affairs RSS items report a range of cybersecurity developments, including an allegedly exposed Israeli population registry, phishing-related exposure of potentially export-controlled defense data, webmail CSS attacks affecting credentials and AI email tools, a Metabase zero-day exploited in the wild, and a Progress LoadMaster command-injection vulnerability added to CISA’s Known Exploited Vulnerabilities catalog. The most immediately actionable items are the actively exploited Metabase flaw and CVE-2026-8037, rated CVSS 9.6 and involving remote OS command injection and code execution.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- f19abc6cfcad68f243e8b230a387492a9ca30b957d8a3c0302fc86c420211bbd
- Enrichment time
- 2026-08-10T14:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.