Daily · 2026-08-09
🔴 Puerto Rico voting systems found critically insecure, 🚨 Suisun City emergency after 911 outage, ⚠️ LoadMaster joins CISA KEV, 🎯 Head Mare trojanizes TrueConf installers, 🎯 BdThemes feed poisoning creates rogue admins
Election infrastructure heads into the midterms with a dozen-plus critical vulnerabilities and no remediation planned, while malware took down Suisun City's 911 dispatch; CISA added Progress LoadMaster to its KEV after 792 exploit attempts, and Head Mare's trojanized TrueConf installers plus a BdThemes supply-chain poisoning extend the week's supply-chain threat picture.
Suisun City's 911 outage is the day's defining story. The California city declared a state of emergency after malware took down 911 routing, police and fire dispatch, and other critical systems. The entire network was shut down to contain the threat, emergency calls are being routed through the county dispatch center, and the FBI is investigating. The event is a reminder that ransomware and destructive intrusions land on public safety operations, not just corporate IT. Suisun City Declares Emergency as Cyberattack Downs 911 Dispatch
Progress Kemp LoadMaster joined the CISA KEV catalog under active exploitation of CVE-2026-8037, an unauthenticated command injection with telemetry logging 792 attempts from 65 unique IPs over 41 days. Federal agencies face an August 10 remediation deadline; treat every internet-facing LoadMaster as a priority patch. Progress Kemp LoadMaster Joins CISA KEV
CERT Polska's follow-up on December's Poland energy attacks surfaced a previously unobserved vector: an attacker-operated private APN into the OT network, enabled by a misconfiguration that let any device on the APN reach the plant. Head Mare trojanized TrueConf installers to push PhantomCore backdoors, so anyone who pulled a client from a compromised server, including partner employees, is exposed.
Watchlist: LoadMaster patching before the deadline, private-APN client isolation for OT deployments, and installer verification against vendor checksums.