News Archive
2287 stories · page 50 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI
Recent cybersecurity incidents affecting Vercel and Composio have revealed an evolving attack pattern targeting Google Workspace environments, where the initial compromise bypasses traditional email-based phishing and instead leverages stolen OAuth tokens. This shift represents a significant departure from the long-held assumption that email is the primary entry point for workspace attacks.
What Boards Need to Know About Tech Risk
A recent report highlights a persistent challenge within corporate governance: the underestimation of technology risk by boards of directors, often until a critical incident or crisis forces the issue. This observation suggests a significant gap in how strategic oversight bodies perceive and integrate cybersecurity, data privacy, and operational technology vulnerabilities into their broader…
Max severity SAP Commerce Cloud flaw now targeted in attacks
A critical remote code execution vulnerability in SAP Commerce Cloud, identified as CVE-2026-58231, is reportedly being exploited in active attacks just three days after a patch was released. The flaw, which carries a maximum severity rating, affects the core Data Hub Adapter extension of the e-commerce platform, formerly known as SAP Hybris.
France investigates tax authority breach after hacker claims 600,000 victims
The Directorate General of Public Finances (DGFiP), France's tax authority, has confirmed that its information systems were breached, leading to the extraction of data belonging to individuals and businesses. The French Economy Ministry stated that an attacker gained unauthorized access to DGFiP systems in late June by stealing or misusing an identity. This intrusion allowed the attacker to…
How Cloudflare detects MCP traffic and helps secure it
Cloudflare has confirmed that it is actively detecting and mitigating traffic associated with the Model Context Protocol (MCP), a new protocol identified as being used in large-scale distributed denial-of-service (DDoS) attacks. The company's security systems are designed to identify and neutralize these attacks, which leverage a novel method of amplification.
Autonomous AI attacks pose 'clear and present danger' to critical infrastructure
Autonomous AI agents have been used in recent attacks against government and energy sector targets, indicating a shift from theoretical to practical application of AI in cyber warfare, particularly against critical infrastructure. This development has raised concerns among national security officials and cybersecurity experts, who view AI-powered attacks as a significant and immediate threat.
Secure all your internal vibe-coded applications — in one click
Cloudflare has confirmed that it was affected by a critical vulnerability, CVE-2023-50387, dubbed "KeyTrap," which could allow an attacker to exhaust CPU resources on a DNS resolver, effectively creating a denial-of-service condition. The vulnerability, which affects DNSSEC, was publicly disclosed by researchers at the University of Stuttgart and the German National Research Center for Applied…
New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies
A new Linux botnet, dubbed "Evooo1Bot," has been identified as actively exploiting vulnerabilities in internet-facing edge devices since July 2026. The botnet, named after a hardcoded string found in its binaries, is a sophisticated variant based on the publicly leaked source code of the Mirai botnet.
Apple now uses iPhone alerts for targets of mercenary spyware
Apple has enhanced its system for notifying individuals targeted by mercenary spyware, now displaying warnings directly on an iPhone's Lock Screen and within its Settings application. This new on-device alert aims to make high-risk notifications more prominent, supplementing existing alerts delivered via email and through a user's Apple Account page.
Cyera's Oasis Security Buy is All About AI Agent Control
Cyera has reportedly acquired Oasis Security in a deal valued at $1 billion, with the strategic intent to integrate artificial intelligence (AI) agent control into its existing data security framework. The acquisition is understood to be driven by a vision to unify data security and identity management within a singular control plane, specifically tailored for AI agents. This move signals a…
WhatsApp is testing a new warning for scam messages
WhatsApp is currently testing a new "Scam Alert" feature designed to help users identify potential scam messages from unknown contacts. This optional beta feature employs an on-device machine-learning model to analyze incoming messages for patterns indicative of fraudulent activity.
In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities
Recent reports have highlighted a series of cybersecurity incidents and industry developments, including a reported method for hacking a Boeing 737, vulnerabilities identified in refrigeration systems, and a data breach at a federal agency attributed to a North Korean IT worker. These stories, alongside news of layoffs at Rapid7 and a DEF CON attendee being linked to a Delta flight disruption,…
Shell investigates 'potential incident' after Clop data theft claims
Shell, the multinational energy conglomerate, has announced an investigation into a potential security incident following claims by the Clop ransomware group that it stole 89GB of data from the company. Shell confirmed it is working with its security teams and relevant experts to investigate the matter.
Trivy, Not LiteLLM Behind the 2,500 Org Compromise
A recent report indicates that the compromise of approximately 2,500 organizations was primarily attributable to vulnerabilities or misconfigurations related to the security scanner Trivy, rather than the malicious LiteLLM packages initially suspected. This finding shifts the focus of the incident, suggesting a different primary vector for the widespread exposure.
Who’s Tracking You? Use This New Service to Find Out
A new, free online service called DecryptAds aims to demystify the complex world of online advertising and data tracking by making it easier to identify the entities collecting user data and serving ads on websites and mobile applications. Launched recently, decryptads.com scrapes and correlates publicly available ad technology (adtech) data, presenting it in an accessible format for privacy…
Android Malware Steals Payment Card Data via NFC
A new Android malware, dubbed WindRelay, has been identified as capable of intercepting live payment card data via Near Field Communication (NFC) and transmitting it to attackers in real time. Discovered by Group-IB researchers, WindRelay operates in conjunction with the SpyNote remote access trojan (RAT), which grants attackers control over a victim's device.
If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them
OpenAI and Anthropic, two prominent artificial intelligence development companies, are facing market headwinds that could challenge their long-term financial viability, leading some observers to suggest their potential nationalization if they fail as private enterprises. Both companies were founded by AI developers who expressed concerns about the unchecked development of AI by large…
Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal
Google Cloud has reportedly outlined its comprehensive roadmap for achieving full post-quantum cryptography (PQC) readiness, targeting a complete transition by 2029. This initiative includes specific milestones planned for 2027 and 2028, indicating a phased approach to integrating quantum-resistant cryptographic algorithms across its cloud infrastructure. The move reflects a proactive stance…
OpenAI’s GPT-5.6 Sol runs up to 14× faster with Ultrafast mode
OpenAI has introduced Ultrafast mode for its GPT-5.6 Sol model, which the company states can process requests up to 14 times faster than its standard offering. This new mode is currently in a limited preview phase, accessible to a select group of customers via the OpenAI API.
RingCentral data breach exposed info of 1.6 million accounts
RingCentral, a provider of cloud-based communication and collaboration platforms, has confirmed a data breach affecting a portion of its customer accounts. The company disclosed on July 28 that its systems were compromised through a "sophisticated social engineering campaign." While RingCentral has not publicly attributed the attack to a specific group, the ShinyHunters extortion gang claimed…
Novel macOS Infostealer AmnesiaStealer Spread via ClickFix
A new macOS infostealer, dubbed AmnesiaStealer, is being distributed through social engineering attacks that trick users into executing malicious commands, according to research published by Jamf on August 13. The Rust-based malware employs a multi-stage infection process to harvest credentials, browser data, and live user sessions.
Crypto wallet maker Trezor confirms 13,000 customers' details exposed in logistics breach
Trezor, a manufacturer of hardware cryptocurrency wallets, has confirmed that a data breach at one of its logistics partners, ShipMonk, exposed the personal details of over 13,000 customers. The exposed information includes names, email addresses, phone numbers, and shipping addresses.
1.6 Million Likely Impacted by RingCentral Data Breach
RingCentral, a prominent provider of cloud-based communications and contact center solutions, has reportedly experienced a data breach that may have impacted approximately 1.6 million individuals. The incident came to light after hackers allegedly published stolen information online. The compromised data is said to include personal details such as names, physical addresses, email addresses,…
Over 1,000 Charities Hit by Beacon CRM Data Breach
A recent report indicates that over 1,000 charitable organizations have been impacted by a data breach affecting Beacon CRM. The incident's root cause has been attributed to a compromised AWS access key, which was reportedly exposed within publicly available JavaScript build artifacts.