News Archive
2287 stories · page 31 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android
WhatsApp has reportedly enhanced its account security features by introducing support for multiple passkeys for a single user account. This update aims to provide a more robust, phishing-resistant sign-in method for users across both iOS and Android platforms. The move follows the initial introduction of passkey support for Android devices in October 2023, expanding its utility to a broader…
Citrix UniconOS dual boot turns Windows endpoints into their own recovery device
Citrix has introduced a new endpoint resilience feature, Citrix UniconOS dual boot, which enables Windows endpoints to serve as their own recovery devices. This capability, part of Citrix UniconOS Release 7 2607, is designed to restore user access to applications within minutes following disruptions such as ransomware attacks, failed updates, operating system corruption, or misconfigurations.
Fideo Lens reveals connections across identities, accounts and devices
Fideo Intelligence has introduced Fideo Lens, an investigative intelligence platform designed to help fraud and financial crime teams uncover hidden connections among identities, accounts, devices, and behaviors. The platform aims to transform fragmented identity data into interactive investigative intelligence within minutes, reducing the time analysts spend manually searching across multiple…
Identity Everywhere: Bringing Infrastructure Identity to Agentic IT
Cisco and Teleport have announced a strategic partnership focused on integrating their technologies, licensing agreements, and a significant investment from Cisco, which is now Teleport's largest strategic investor. The collaboration aims to introduce a new security paradigm called "Infrastructure Identity," designed to provide a cryptographic foundation for secure identity across all human…
WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update
WhatsApp has reportedly rolled out an update that enhances account security through the addition of multiple passkeys and stronger two-step verification (2SV) options. This development aims to provide users with more robust methods for securing their accounts against unauthorized access.
First Malware Built Specifically for Car Head Units Fuels Botnet
Security researchers at Kaspersky have reportedly identified the first known malware specifically designed to target car head units. This novel threat has been linked to thenet, a botnet that has already compromised millions of devices globally. The discovery marks a significant development in the landscape of embedded system security, extending the reach of sophisticated malware to an…
The County Prosecutors Who Became ICE Informants
Prosecutors in at least 17 Illinois counties have been found to have shared sensitive personal data of criminal defendants with federal immigration agents without obtaining criminal warrants, public disclosure, or legislative oversight. This collaboration, which occurred during the first 15 months of President Donald Trump's second term, involved state's attorneys' offices acting as informants…
Australia Warns of Active Exploitation of Critical TeamCity Server Flaw
The Australian Cyber Security Centre (ACSC) has issued a warning regarding the active exploitation of a critical vulnerability, CVE-2026-63077, affecting TeamCity On-Premises servers. This flaw allows unauthenticated attackers with HTTP(S) access to a TeamCity server to bypass authentication and execute arbitrary operating system commands. All versions of TeamCity On-Premises are impacted.
CISA slaps its tightest three-day patching deadline on perfect-10 Oracle flaw
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a three-day patching directive for a critical Oracle vulnerability, CVE-2026-21962, which has been actively exploited in the wild. This is CISA's most urgent deadline, requiring federal civilian executive branch (FCEB) agencies to apply patches by August 27.
Fake Minecraft Clients Deliver WeedHack Malware Despite Infrastructure Takedown
A widespread malware campaign targeting Minecraft players, dubbed "WeedHack," has continued to evolve and spread despite the takedown of its initial infrastructure in July. Cybersecurity researchers reported that over 6,300 attempts to access malicious sites associated with WeedHack were blocked in the past month, indicating ongoing activity.
Unpatched Zimbra servers are falling to CVE-2026-73570 attacks
At least 274 internet-facing Zimbra Collaboration Suite (ZCS) instances have been compromised through exploitation of CVE-2026-73570, a code injection vulnerability. The Shadowserver Foundation, a nonprofit security organization, reported the rising number of compromises after initially identifying 155 affected instances on August 20.
ReliaQuest Rejects Compromise Claims After ShinyHunters Incident
ReliaQuest, a threat intelligence firm, has publicly refuted claims by the ShinyHunters threat group that its systems were compromised or subjected to a ransomware attack. The company confirmed it was targeted by a social engineering scheme on August 22, which briefly exposed its identity dashboard, but maintains that no applications, systems, or customer data were accessed.
ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack
Cybersecurity firm ReliaQuest has confirmed that one of its employees was compromised in a social engineering attack, leading to the temporary exposure of a single identity within the company's systems. The admission followed claims by the extortion group ShinyHunters, which posted screenshots on its leak site suggesting a more significant breach.
Crooks push Mac malware through fake OpenAI Codex ads
Cybercriminals are leveraging sponsored search results to distribute macOS malware, impersonating legitimate AI coding assistants like OpenAI's Codex. The campaign, identified by researchers at Cato Networks, targets developers searching for these tools, directing them to deceptive download pages that prompt the execution of malicious commands.
TikTok phishing: How to spot fake login and verification pages
Users of the popular social media platform TikTok are being targeted by sophisticated phishing campaigns designed to steal login credentials and other personal information. These campaigns often leverage convincing fake login pages and deceptive messages to trick users into divulging their account details.
CISA Warns of Exploited Oracle WebLogic Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning regarding an actively exploited vulnerability in Oracle WebLogic Server. The flaw, identified as CVE-2026-21962, is reportedly being widely leveraged by various threat actors targeting WebLogic installations.
Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical security flaw affecting Oracle WebLogic Server and Oracle HTTP Server to its Known Exploited Vulnerabilities (KEV) catalog. The agency cited evidence of active exploitation for this maximum-severity vulnerability.
AI supply chain risk is showing up in developer workflows first
The majority of active supply chain incidents currently observed are targeting basic developer workflows and open-source package repositories, rather than more exotic attack surfaces like manipulated model weights or compromised Model Context Protocol (MCP) servers. While these emerging vectors are recognized as structural threats, they primarily exist in security research and conference…
TruffleHog AWS Analyze reduces remediation time on leaked AWS credentials
Truffle Security has introduced TruffleHog AWS Analyze, an expansion of its TruffleHog Enterprise platform designed to accelerate the remediation of leaked AWS credentials. This new feature enriches discovered AWS keys with detailed information on their permissions and access levels, enabling security teams to better assess risk and prioritize their response efforts.
HOL Guard: Open-source antivirus for AI agents
HOL has released HOL Guard, an open-source antivirus tool designed to operate between an AI assistant and the host computer. The tool, which installs locally and does not require an internet connection, aims to protect users from risky actions by AI agents by pausing potentially dangerous commands and seeking user approval. HOL Guard is compatible with several AI assistants, including Claude…
The cybercrime supply chain has five stages, each with a price
The modern cybercrime ecosystem operates as a sophisticated, multi-stage supply chain, a significant departure from the outdated image of a lone attacker. This intricate structure involves distinct specialized roles, each with its own pricing model, allowing for a division of labor that enhances efficiency and profitability for criminal enterprises.
New TCG guidance gives buyers a way to test PQC-ready TPM claims
The Trusted Computing Group (TCG) has released new guidance that establishes a baseline for what constitutes a "quantum-safe" Trusted Platform Module (TPM), enabling buyers to verify vendor claims of Post-Quantum Cryptography (PQC) readiness. This initiative aims to provide clarity for organizations seeking to implement PQC capabilities and avoid products that offer only partial security.
Cybersecurity jobs available right now: August 25, 2026
The cybersecurity job market continues to show a diverse range of opportunities across various specializations and geographies as of August 25, 2026. Roles are available from entry-level internships to senior counsel positions, spanning compliance, identity and access management (IAM), security architecture, and incident response.
CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days
A zero-day elevation-of-privilege vulnerability, tracked as CVE-2026-69414 and dubbed "ShieldBreak," has been discovered in the Microsoft Malware Protection Engine, which is integral to Microsoft Defender. This flaw allows a local attacker with low privileges to escalate to SYSTEM-level access on affected Windows systems.