IT security 2026-08-30

Level Watchful — 45/100 — 2026-08-30

Watchful day: 2 stories ranked, 1 of the top 2 reported as actively exploited, 0 flaws newly added to CISA’s exploited-vulnerabilities catalogue. Top story: Microsoft details TerminalFix, a ClickFix variant using fake Cloudflare CAPTCHAs to deliver a reverse-tunnel backdoor (62/100).

1. Microsoft details TerminalFix, a ClickFix variant using fake Cloudflare CAPTCHAs to deliver a reverse-tunnel backdoor — 62/100
2. Critical vulnerabilities in several WordPress plugins and themes — 18/100 (CVE-2026-76581)