News Archive
2287 stories · page 51 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
A sophisticated backdoor known as CoolClient, attributed to the HoneyMyte APT group (also referred to as Mustang Panda), has undergone a significant evolution, now incorporating a signed kernel-mode driver to enhance its stealth capabilities. This updated variant has been observed in cyber-espionage campaigns targeting organizations across Asia, specifically in Pakistan, Mongolia, and Myanmar,…
Scottish prosecutors cast eye over leaky supplier after staff data exposed
Scotland's public prosecution service, the Crown Office and Procurator Fiscal Service (COPFS), has alerted approximately 300 staff members that their employment-related data may have been compromised in a cyberattack targeting one of its third-party suppliers. The incident, which COPFS disclosed on Thursday, August 13, 2026, involved an online data maturity assessment completed by the…
AmnesiaStealer Gives Attackers Live Control of Victims’ macOS Browsers
Jamf Threat Labs researchers have uncovered AmnesiaStealer, a new Rust-based macOS infostealer that provides attackers with live, hidden control over a victim's web browser. The multi-stage malware, first observed on August 14, 2026, spreads through convincing fake GitHub download pages that employ the "ClickFix" technique.
Data analyst sent to prison for stealing data, extorting employer
A former data analyst contractor for Brightly Software, Cameron Curry, has been sentenced to two years in prison for an extortion scheme targeting his former employer. Curry, 27, also known by the alias "Loot," was found guilty in March of orchestrating the scheme, which involved stealing sensitive corporate and payroll data and then demanding a $2.5 million cryptocurrency ransom.
AWS Certificate Manager sets 2027 end date for email-validated certificate renewals
AWS Certificate Manager (ACM) is set to discontinue support for email-validated public certificates throughout 2027, in anticipation of a broader industry shift mandated by the Certification Authority/Browser (CA/B) Forum. The CA/B Forum, which establishes standards for publicly trusted certificates followed by browsers and certificate authorities, has set a deadline of March 15, 2028, after…
Chess.com Data Leak Exposes 7.3 Million Users Via Scraping
A 15.5 GB file containing records for over 7.3 million Chess.com users has appeared on data leak forums, offered freely without any ransom demands. Technical analysis confirms the data is authentic and recent, but evidence suggests it was obtained through large-scale scraping rather than a direct breach of Chess.com's servers.
14,000 Trezor Customers Impacted by Data Breach at ShipMonk
A recent report indicates that approximately 14,000 customers of Trezor, a hardware wallet manufacturer, have had their shipping information compromised in a data breach affecting ShipMonk, a third-party logistics provider. The stolen data reportedly includes names, physical addresses, email addresses, and phone numbers belonging to these customers.
Ukrainian police raid 94 fraudulent call centers, seize $2 million
Ukrainian law enforcement agencies have dismantled 94 fraudulent call centers across the country in a large-scale operation that involved over 400 searches and resulted in the seizure of approximately $2 million in various currencies and assets. The raids targeted operations engaged in a range of scams, including impersonating bank employees, offering fake investment opportunities, and…
Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations
A threat group known as Jewelbug, previously associated with Chinese state-sponsored cyber espionage, has been linked to hack-for-hire operations and financially motivated cryptocurrency fraud campaigns. Researchers from Broadcom’s Threat Hunter Team, including experts from Symantec and Carbon Black, published a report on August 13 detailing how Jewelbug uses shared infrastructure for both…
US Authorizes Private Cyber Firms to Hack Transnational Criminal Networks
The U.S. government has formally authorized private cybersecurity firms to conduct offensive cyber operations against transnational criminal networks, acting under government direction and oversight. President Trump signed a national security memorandum on August 13, establishing a program to leverage the private sector's capabilities in combating cybercrime.
Hackers Exploiting Unpatched GeoServer Zero-Day
Reports indicate that a critical zero-day vulnerability in GeoServer is currently being actively exploited by threat actors. The flaw, identified as a SQL injection vulnerability, has the potential to allow attackers to achieve remote code execution (RCE) on systems running vulnerable versions of the software.
AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions
A new macOS infostealer, dubbed AmnesiaStealer, has been identified with capabilities to exfiltrate sensitive user data and manipulate browser sessions. The malware, reportedly written in Rust, targets a range of credentials and browser-specific information from compromised systems.
The hardest part of agentic AI may be rebuilding the business
Organizations are facing significant challenges in preparing their operating models and workforces for the widespread adoption of AI agents, according to recent research from Deloitte. While there is a strong expectation that AI agents will transform work by boosting productivity and enabling employees to focus on higher-value tasks, many businesses lack the necessary processes and workflows…
Weak IAM affects up to 98% of cloud environments
A new report from Intruder, the 2026 Cloud Security Index, indicates that misconfigurations continue to be a primary threat to cloud environments, with a single error potentially leading to public network access, unrotated keys, or exposed services. The report highlights that weak identity and access management (IAM) controls and inadequate logging and alerting are the most pervasive security…
17 draft Cyber Resilience Act standards are open for comment
Seventeen draft standards intended to support the European Union's Cyber Resilience Act (CRA) are currently open for public comment. These drafts aim to provide the technical specifics necessary for manufacturers to demonstrate compliance with the CRA, which mandates cybersecurity requirements for products with digital elements sold within the European Economic Area.
New infosec products of the week: August 14, 2026
Several cybersecurity vendors have announced new product releases this week, focusing on artificial intelligence governance, threat exposure management, and enhanced AI platform capabilities.
New Zealand says China tried using space investments to spy on local affairs
New Zealand’s Security Intelligence Service (NZSIS) has accused Chinese entities of attempting to establish space infrastructure within the country for military intelligence gathering. This allegation was detailed in the NZSIS’s annual threat environment assessment, released by Director-General of Security Andrew Hampton.
ISC Stormcast For Friday, August 14th, 2026 (Fri, Aug 14th)
The SANS Internet Storm Center (ISC) has published its Stormcast for Friday, August 14th, 2026. The Stormcast series provides daily summaries of current security threats and vulnerabilities, drawing on data from the ISC's global sensor network.
Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks
Apple has issued a new round of "Threat Notification" alerts to users, indicating detection of highly targeted mercenary spyware attacks against their iPhones. These alerts, sent on August 13, are part of an ongoing initiative by Apple, which has been dispatching similar notifications multiple times a year since 2021.
OpenAI ditches Recall-style screenshot surveillance for friendly keylogging
OpenAI has introduced a new feature called Computer History for its ChatGPT desktop application on macOS, available to ChatGPT Pro, Business, and Enterprise subscribers. This opt-in system records user interactions across various applications and websites, compiling them into "memories" organized on a timeline. The company states that this feature is designed to enhance ChatGPT responses,…
A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.
A recently signed presidential memorandum aims to enlist private sector companies in federal law enforcement hacking operations against transnational criminal organizations, a move that has sparked debate among cybersecurity experts regarding its legal, practical, and ethical implications. The directive, which sets a 60-day timeframe for establishing the program, represents a significant shift…
Tech contractor for Brightly Software sentenced to 2 years in prison for insider attack
A former contractor for Brightly Software, Cameron Nicholas Curry, has been sentenced to two years in prison for an insider attack that involved data theft and extortion. Curry, also known as "Loot," was found guilty of six counts of extortion in March and received his sentence in August. Following his prison term, he will serve one year of supervised release.
Ukraine shuts down 94 fraudulent call centers, seize millions in cash
Ukrainian authorities have dismantled 94 fraudulent call centers across the country, seizing significant assets and apprehending suspects in an operation that involved the National Police, Ukraine's Security Service, the Prosecutor General's Office, and German police. The crackdown, which occurred this week, involved 411 searches and targeted various schemes designed to defraud individuals…
Akira hackers disable EDR with Safe Mode, steal data but fail to encrypt
An Akira ransomware affiliate recently exploited a SonicWall VPN device lacking multi-factor authentication (MFA) to gain initial access to a target system, subsequently disabling endpoint detection and response (EDR) solutions by booting the machine into Safe Mode with Networking. This incident, which occurred on August 4, marks the first time this specific tactic has been observed in an…