Lazarus Windows zero-day, Adobe CVSS 10.0 patches, 737 malicious Chrome VPN extensions

**Executive summary:** A multi-source briefing reports active exploitation of a Windows zero-day by the Lazarus Group against defense and aerospace organizations across France, Germany, Brazil, and India, highlights Microsoft’s large August Patch Tuesday (398 CVEs) including actively exploited flaws, documents 737 malicious Chrome VPN extensions intercepting user traffic, notes Adobe patches for CVSS 10.0 flaws, and describes the ongoing City-Forum data-theft campaign abusing guest access to Salesforce and ServiceNow.