News Archive
2287 stories · page 36 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets
A new phishing toolkit, dubbed iAuthFlow V2, has been identified by security researchers. This toolkit reportedly leverages passkeys to maintain persistent access to compromised accounts, even in scenarios where the legitimate user has reset their password and revoked active sessions. The core innovation reported is the toolkit's ability to register an attacker-controlled passkey, which then…
Zombie Card: An expired Visa credit card can be used for purchases
Researchers have identified a vulnerability, dubbed "Zombie Card," that could allow expired Visa contactless credit cards to be used for in-store purchases by manipulating the expiration date presented to payment terminals. The flaw was discovered by University of Massachusetts Amherst researchers Raja Hasnain Anwar, Gerard DeCunha, and Muhammad Taqi Raza.
Is Online Privacy Possible? How Digital Identities Can Help
The internet's prevailing business model, often described as surveillance capitalism, relies on collecting extensive personal data from users. This system aggregates information from various online activities, including app usage, account creation, website visits, and form submissions, to build detailed profiles that are then monetized. Data brokers play a significant role in this process,…
Calling on Cyber Pros to Help Defend City Hall
A recent report highlights a call for cybersecurity professionals to volunteer their expertise in defending city hall and other local government agencies. The initiative aims to address the resource disparities faced by these entities, particularly those operating with smaller budgets, which often struggle to maintain robust cybersecurity postures.
Calling on Cyber Pros to Help Defend City Hall
A recent report highlights a growing need for cybersecurity professionals to volunteer their expertise to assist local government agencies, particularly those operating with limited financial resources. The call to action emphasizes that many municipal entities struggle to maintain robust cyber defenses due to budgetary constraints, making them vulnerable targets for various threats.
Pro-Ukraine Hackers Claim Attack on Russian Network Monitoring Firm
Russian software developer Microolap has confirmed a cyberattack on some of its systems, though it disputes the extent of the breach claimed by a pro-Ukraine hacking group. The company, which specializes in network traffic interception and analysis software, stated on Thursday that it detected an attempted intrusion into several non-critical systems. However, Microolap denied that attackers…
Microsoft rolls out Classic Outlook theme for New Outlook users
Microsoft has begun rolling out a "Classic Outlook" theme for users of Outlook on the web and the New Outlook for Windows, aiming to provide a more familiar experience for those transitioning from older versions. This targeted release commenced in mid-August and is projected to be fully deployed by the end of September. Global general availability is anticipated between late September and late…
OpenAI Adds Controls That Should've Been There Already
OpenAI has reportedly introduced new security controls for its AI models, a move that follows a recent incident involving Hugging Face. The report suggests that these additions address security gaps that perhaps should have been a foundational component of the platform, particularly given the advanced nature of the "frontier models" now in wider use.
Hardware Makers Implement Post-Quantum Cryptography as Security Threats Near
Hardware manufacturers are reportedly beginning to integrate post-quantum cryptography (PQC) into their products, a move driven by the anticipation of future security threats from quantum computers. This proactive shift aims to fortify current encryption methods against the advanced computational power that quantum machines are expected to wield, which could potentially break many of the…
North Korean Hackers Tied to Rust Supply Chain Attack
A recent software supply chain attack targeting the Rust programming ecosystem has been linked to state-sponsored North Korean threat actors. The campaign compromised several widely used open-source libraries hosted on crates.io, the official Rust package registry, by embedding a backdoor designed to infiltrate developer workstations and continuous integration (CI) environments.
Six Maximum-Severity Flaws Found in Cisco Products
Cisco has released a series of security patches addressing nine vulnerabilities across its Crosswork platforms and Secure Workload software, with six of these flaws receiving the maximum CVSS score of 10.0. The vulnerabilities were discovered during an internal security review conducted by Cisco's engineering team, which included the use of advanced AI models. As of the announcement on August…
Critical Isolated-vm Vulnerability Leads to RCE on Host
A critical vulnerability has been reported in the `isolated-vm` library, a Node.js module designed for running untrusted code in a sandboxed environment. The flaw, described as a type confusion bug, could allow an attacker to achieve remote code execution (RCE) on the host system by escaping the V8 sandbox and hijacking the control flow of the host process.
CISA orders feds to patch actively exploited TrueConf Server flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has directed federal agencies to immediately patch two critical vulnerabilities in the TrueConf Server self-hosted communications platform, which are reportedly being actively exploited in the wild. The directive, issued on Thursday, August 21, 2026, requires all U.S. Federal Civilian Executive Branch (FCEB) agencies to secure…
Critical Microsoft Entra ID vulnerability exploited in the wild (CVE-2026-69836)
Microsoft has issued a patch for a critical remote code execution vulnerability, identified as CVE-2026-69836, within its Entra ID cloud identity service. The company confirmed that the vulnerability has been actively exploited in the wild. Entra ID, previously known as Azure Active Directory, is a core Microsoft service responsible for authenticating user logins and managing access to…
New Agent Tesla Malware Variant Boosts Evasion Capabilities
A new variant of the Agent Tesla infostealer, designated version 4, has been identified by KnowBe4 researchers, incorporating enhanced evasion techniques and credential harvesting capabilities. This updated malware was observed in a sophisticated business email compromise (BEC) campaign specifically targeting finance departments.
Medical records, SSNs, and bank details exposed in CareCloud data breach
CareCloud, a healthcare technology provider, has confirmed a data breach that exposed the personal and medical information of over 3.75 million individuals. The incident, which occurred in March, involved an unauthorized third party accessing one of the company's Amazon Web Services (AWS) environments.
Attackers impersonate popular AI brands to spread malware
Cybersecurity researchers have identified a widespread campaign where attackers impersonate popular artificial intelligence brands such as Perplexity, Claude, ChatGPT, and Copilot to distribute various forms of malware, including information stealers, backdoors, and malicious browser extensions. The findings are based on an analysis of 38 confirmed incidents over a 12-month period, from July…
Wazuh Integrates AI to Improve Security Operations Center Workflows
Wazuh has announced the integration of Artificial Intelligence (AI) into its platform, a move designed to enhance Security Operations Center (SOC) workflows. This development reflects a broader industry trend where AI is increasingly adopted for its capabilities in automation and data analysis, now being applied to cybersecurity to support more rapid decision-making and the identification of…
Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics
Google's Threat Intelligence Group (GTIG) has identified three distinct Russia-linked cyber espionage clusters, designated UNC6293, UNC7005, and UNC5976, which are targeting researchers, academics, government officials, think-tank analysts, and defense sector personnel in Europe and the United States. These groups employ persistent and adaptive phishing campaigns, leveraging sophisticated…
Microsoft warns of max severity Entra ID flaw exploited in attacks
Microsoft has confirmed it has patched a critical vulnerability in its Entra ID identity and access management (IAM) platform, previously known as Azure Active Directory. The flaw, tracked as CVE-2026-69836, has a maximum severity rating and has been exploited in active attacks.
Hackers abuse FTP server banners to deliver new Windows malware
Threat actors are employing a novel technique to deliver two previously undocumented remote access trojans (RATs), E4del and PINHOLE, by embedding malicious commands within FTP server banners. This unusual method was first observed in July 2026 by MalwareHunterTeam and subsequently investigated by researchers at SOCRadar, who confirmed its continued use into August 2026.
SickKids data breach exposes employee and job applicant info
The Hospital for Sick Children (SickKids) has disclosed a cybersecurity incident that exposed the personal information of some current and former employees, as well as job applicants. The Toronto-based pediatric hospital confirmed that the breach originated from a vulnerability in a third-party software application used by SickKids and other organizations.
Cisco Patches Nine Flaws in Crosswork and Secure Workload Software
Cisco has issued security updates to address a total of nine vulnerabilities impacting its Crosswork platforms and Secure Workload Software. Among these, five distinct flaws have been assigned a critical Common Vulnerability Scoring System (CVSS) score of 10.0, indicating the highest level of severity. The company’s advisory notes that the vulnerabilities affect specific components within the…
GitLab Critical GraphQL Flaw Actively Exploited
GitLab has confirmed that a critical vulnerability in its GraphQL API, identified as CVE-2026-19478, is being actively exploited in the wild. The flaw, which carries a CVSS score of 9.4, allows unauthenticated attackers to remotely modify or delete public projects and associated user data on self-managed GitLab instances.