Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

The collection highlights active exploitation, critical vulnerabilities, phishing and malware campaigns, and software supply-chain compromises reported in August 2026. Notable risks include unauthenticated Gitea file disclosure (CVE-2026-59774), actively exploited Langflow, Tomcat, and N-able N-central flaws, Linux kernel local privilege escalation (CVE-2026-64531), malicious npm packages and extensions, ClickFix campaigns, device-code phishing, exposed credentials, and ransomware activity. Organizations should prioritize CISA KEV remediation, patch critical internet-facing software, rotate or