{
  "slug": "2026-08-10",
  "date": "2026-08-10",
  "updated": "2026-08-11",
  "title": "A Windows flaw already being used, and a warning for firewall owners",
  "intro": "Patch week: August's Windows updates fix a flaw criminals are already using, and some office firewalls quietly need the same treatment.",
  "quietWeek": false,
  "items": [
    {
      "id": "windows-august-updates",
      "rank": 1,
      "published": "2026-08-11",
      "title": "Install August's Windows updates — one flaw is already being exploited",
      "summary": "This month's Microsoft updates fix a flaw in a core Windows networking component (CVE-2026-68820) that attackers are actively using to take control of computers. It affects everyday Windows PCs and servers alike. The fix shipped in the regular August update — the only businesses at risk are the ones that postpone it.",
      "whoItAffects": "Everyone — any business running Windows computers or servers.",
      "action": "Approve and install the August Windows updates on every machine this week; if a provider manages your updates, ask them to confirm they're applied.",
      "prevention": {
        "e8": "Patch operating systems",
        "ism": "System patching"
      },
      "sourceKind": "kev",
      "cves": [
        "CVE-2026-68820"
      ],
      "cwes": [
        "CWE-416"
      ],
      "links": [
        {
          "label": "CISA KEV: Windows WinSock flaw",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-68820"
        }
      ]
    },
    {
      "id": "cisco-asa-firewalls",
      "rank": 2,
      "published": "2026-08-11",
      "title": "Own a Cisco firewall? It needs this month's fix",
      "summary": "A flaw in Cisco Secure Firewall ASA and Firewall Threat Defense devices (CVE-2026-20349) is being actively exploited. These appliances sit at the edge of many small business networks — often installed years ago and rarely updated. A firewall that protects you only if someone maintains it is a common blind spot.",
      "whoItAffects": "Businesses with a Cisco ASA or Firepower firewall at their internet connection — if you're not sure what your firewall is, that's worth finding out anyway.",
      "action": "Ask whoever manages your network: \"Is our firewall a Cisco ASA or Firewall Threat Defense, and has this month's security fix been applied?\"",
      "prevention": {
        "e8": "Patch operating systems",
        "ism": "Network security"
      },
      "sourceKind": "kev",
      "cves": [
        "CVE-2026-20349"
      ],
      "cwes": [
        "CWE-244"
      ],
      "links": [
        {
          "label": "CISA KEV: Cisco ASA/FTD flaw",
          "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2026-20349"
        }
      ]
    }
  ]
}