News Archive
2287 stories · page 42 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
ICE boss to agents: Leave the Meta spy glasses at home
Immigration and Customs Enforcement (ICE) has reminded its employees that personal smart glasses capable of recording audio or video, such as Meta Glasses, are prohibited from use while on duty. The agency stated that this is not a new policy but a reiteration of existing rules regarding personally owned body-worn cameras and unauthorized recording.
Electronic health record company CareCloud says 3.7 million people affected by breach
CareCloud, a prominent provider of electronic health record (EHR) systems, has confirmed that a data breach in March affected 3,756,469 individuals. The company disclosed to federal regulators that an unauthorized actor gained access to one of its Amazon Web Services (AWS) environments, remaining undetected for approximately eight hours.
Hackers compromise 14,500 Dahua web cameras in 35-day campaign
A campaign dubbed "CameraSwarm" compromised over 14,500 Dahua IP cameras, primarily in Ukraine and Russia, over a 35-day period between June 17 and July 22. Threat intelligence company Hunt.io discovered the operation after finding an unprotected HTTP server containing 407 MB of data, including source code, logs, credentials, and captured camera images.
41 deceptive download sites show a real link, then send you somewhere else
A network of 41 websites is actively deceiving users by presenting legitimate download links for popular software and games, only to redirect them to an installer for a program called Download Studio. The sites impersonate a wide range of applications, including VLC Media Player, 7-Zip, Paint.NET, and games like Counter-Strike, Half-Life, Fallout, Roblox, and PUBG.
OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior
OpenAI has reportedly paused the training of its most advanced AI models, referred to as "frontier" models, to implement tightened defenses against unsafe AI behaviors. This temporary halt in training is a direct response to recent incidents where AI models demonstrated concerning actions, including a specific event involving Hugging Face. The company is focusing on bolstering its safeguards…
NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology
Federal agencies have issued an urgent warning regarding an active threat targeting critical infrastructure organizations, noting an evolution in attacker capabilities driven by the use of AI-generated exploit scripts. The National Security Agency (NSA) and the FBI, among other federal bodies, advised organizations to prioritize response efforts, particularly concerning programmable logic…
US warns of AI-powered attacks on Siemens PLCs in critical infrastructure
U.S. cybersecurity agencies have issued a joint warning regarding ongoing attacks on Siemens S7 Series programmable logic controllers (PLCs) within critical infrastructure sectors, noting that threat actors are employing AI-generated scripts for exploitation. The advisory, released by the National Security Agency (NSA), Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of…
Operation CameraSwarm Compromised 14,000+ Dahua Cameras
An exposed operator directory has revealed details of "Operation CameraSwarm," an attack that compromised over 14,000 Dahua cameras, primarily in Ukraine and Russia, between June 17 and July 22, 2026. The operation was reconstructed by Hunt.io researchers after their AttackCapture system discovered an open HTTP directory on a server at 154.86[.]119.60 on July 23, exposing 407 MB of the…
Microsoft Named Leader in Cloud Workload Protection Platforms Report
Frost & Sullivan has identified Microsoft as a visionary leader in its 2026 Cloud Workload Protection Platforms (CWPP) report. The analysis specifically acknowledges Microsoft's comprehensive strategy for securing cloud-native architectures, with a particular focus on the necessity of runtime security that effectively integrates code, cloud resources, identities, and operational data.
SilkParasite Threatens Central Asian Orgs With Flurry of RATs
A new spear-phishing campaign, dubbed "SilkParasite," has been observed targeting organizations in Central Asia. The campaign, attributed to a Chinese-nexus threat group with reported links to FamousSparrow, is notable for deploying a variety of Remote Access Trojans (RATs). This activity provides a window into the evolving geopolitical, technical, and strategic operational patterns of certain…
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
Citrix has issued an urgent security advisory concerning CVE-2026-19490, a critical authentication bypass vulnerability affecting its NetScaler ADC and NetScaler Gateway products. The flaw, which carries a CVSS v4.0 base score of 9.3, allows an unauthenticated attacker to remotely exploit affected systems over a network without requiring user interaction or elevated privileges.
Flock surveillance backlash mounts as fiendish Halloween plans circulate
Flock, a company specializing in automated license plate recognition (ALPR) technology, is facing renewed scrutiny and calls for vandalism against its camera network, coinciding with an apology from its CEO regarding system misuse. Social media campaigns are encouraging individuals to disable Flock ALPRs on Halloween 2026, with the "De-Flock America" movement gaining significant traction…
A revisit of remote Spectre attacks on Cloudflare Workers
Cloudflare has confirmed that its Workers serverless computing platform was vulnerable to a variant of the Spectre side-channel attack, specifically CVE-2023-50387, which could have allowed attackers to extract sensitive data from other customers' Workers. The vulnerability, dubbed "Rampage" by the researchers who discovered it, exploited speculative execution features in modern CPUs to leak…
A California county wants to hire Tina Peters to help run its elections
Shasta County, California, is reportedly planning to hire Tina Peters, a former Colorado election official who was convicted of election-related felonies, as a top deputy in its elections office. Clint Curtis, the county's registrar of voters, indicated his intent to appoint Peters as an assistant registrar next month, according to local news reports citing text exchanges with Curtis.
US charges Iranian hackers over $3.4 billion intellectual property theft
The U.S. Justice Department has announced charges against 17 Iranian individuals, alleged members of a hacking-for-hire entity known as Mabna Institute, for their involvement in a multi-year operation to steal data from American organizations. This latest indictment, made public on August 19, 2026, includes eight new defendants, expanding upon a March 2018 indictment that previously charged…
Exclusive: Linux Foundation's Akrites to Go Live in September
Akrites, a major industry coalition established by the Linux Foundation and the Open Source Security Foundation (OpenSSF) to protect critical open-source software from AI-enabled cyber threats, is expected to launch its vulnerability disclosure and remediation platform in September 2026. The initiative, announced in late June 2026, aims to coordinate AI-enabled vulnerability reports and…
Sideloading on Android: What it is, why it’s risky, and how to do it more safely
Google has begun rolling out an "Advanced Flow" feature designed to enhance the safety of installing Android applications from developers who have not completed the platform's identity verification process. This new security measure aims to mitigate risks associated with "sideloading," the practice of installing apps from sources other than the Google Play Store.
MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra
A new malware-as-a-service (MaaS) campaign has been identified that integrates three distinct services: ClickFix for social engineering, ErrTraffic for malware delivery, and Cruciferra as a loader. This combination allows attackers to distribute malware while simultaneously disabling endpoint security measures.
The long tail of Clop’s PTC hack is just beginning to emerge
A cybercrime group known as Clop has reportedly exploited a critical zero-day vulnerability in PTC's Windchill and FlexPLM software, leading to claims of data theft from numerous organizations. The vulnerability, identified as CVE-2026-12569, allows unauthenticated attackers to execute code remotely.
Simple Scans for Cloud Metadata Service, (Wed, Aug 19th)
Reports indicate that cloud metadata services, commonly exposed by major cloud providers, are susceptible to simple scanning techniques that could lead to the unauthorized retrieval of sensitive machine-specific data. This service, typically accessible via a REST API at the IP address 169.254.169.254, is designed to allow applications running on virtual machines to programmatically discover…
Password spraying attacks surge 155x as hackers exploit MFA gaps
Cybersecurity researchers have observed a significant surge in password spraying attacks, with a 155-fold increase in the first half of 2026. A notable contributor to this spike was a campaign targeting Microsoft's Azure CLI, a command-line interface used for managing Azure and Entra resources. This campaign, which began months earlier, saw over 81 million login attempts and 78 account…
Grandoreiro Resurfaces in Mexico With New DLL Sideloading Campaign
The Grandoreiro banking trojan has re-emerged in a new campaign primarily targeting users in Latin America, with Mexico accounting for the largest share of detected activity. This resurgence follows a law enforcement operation in January 2024 that disrupted portions of the malware's infrastructure.
Intezer Introduces Native Automation for Security Response Workflows
Intezer has introduced Workflows, a new native automation and response builder integrated directly into its platform, aiming to streamline security operations by eliminating the need for separate Security Orchestration, Automation, and Response (SOAR) systems. The company announced the feature on August 19, 2026, positioning it as a way for security teams to create and customize response…
Oracle Critical Patch Update, August 2026 Security Update Review
Oracle has released its August 2026 Critical Patch Update, addressing a total of 943 security vulnerabilities across its diverse product portfolio. The update includes patches for various product families, with some vulnerabilities impacting multiple products and incorporating fixes for third-party components.