News Archive
2287 stories · page 52 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Total eclipse of the Internet: traffic impacts in Iceland, Spain, and Portugal
A significant internet outage impacted users in Iceland, Spain, and Portugal on November 27, 2023, attributed to a Border Gateway Protocol (BGP) routing leak. The incident, which began around 10:20 UTC and was largely resolved by 11:15 UTC, caused widespread connectivity issues, particularly affecting the Icelandic government network and various internet service providers (ISPs) in the Iberian…
Hackers breach govt webmail while running parallel crypto fraud
A hacking group known as Jewelbug, also tracked as Earth Alux and REF7707, has been observed conducting parallel operations involving both state-sponsored espionage and large-scale cryptocurrency fraud. Researchers at Symantec identified the group's activities, which include targeting government and military entities in the Middle East, Southeast Asia, and South Asia, while simultaneously…
Curiouser and Curiouser
Cisco Talos has identified a new, previously undocumented real-time phishing framework named "JWR," which appears to be a variant of "The Outsider" phishing-as-a-service platform. This framework employs an open WebSocket connection, allowing attackers to monitor victim keystrokes live and dynamically guide them through fraudulent checkout and login processes.
Critical Adobe Commerce Flaw Exploited After Disclosure
Attackers have begun exploiting a critical vulnerability in Adobe Commerce, Adobe Commerce B2B, and Magento Open Source that could allow unauthenticated account takeovers and access to sensitive customer data. The flaw, identified as CVE-2026-71362, carries a CVSS score of 9.1 and was publicly disclosed by Adobe in its APSB26-92 security bulletin.
Microsoft patches LegacyHive Windows zero-day vulnerability
Microsoft has issued security patches to address a Windows zero-day vulnerability, identified as "LegacyHive," which was publicly disclosed following the July 2026 Patch Tuesday. The vulnerability, now tracked as CVE-2026-62832, was patched as part of Microsoft's August Patch Tuesday updates.
AI 'watermark removers' flood the web. Almost none can prove they work.
A new market for tools claiming to remove AI-generated watermarks has emerged following Anthropic's recent announcement that its Claude models now embed invisible watermarks in all generated text. These tools include a GitHub project with over 4,500 stars, several recently registered web services, and an established AI detection evasion service. However, the efficacy of these tools in…
U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, mandating federal agencies to address these flaws due to active exploitation. The vulnerabilities affect Metabase, Microsoft Windows, and Cisco Secure Firewall products.
U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, mandating federal agencies to address them promptly. The newly cataloged flaws include a critical SQL injection vulnerability in Metabase, a use-after-free flaw in Microsoft Windows' Ancillary Function Driver for WinSock, and a heap…
Why API Discovery Is Critical for Modern AppSec Programs
Modern application security programs face a critical challenge in maintaining an accurate and comprehensive inventory of their APIs, a gap that attackers are increasingly exploiting. This "API discovery gap" arises because traditional, manual methods of tracking APIs cannot keep pace with the rapid development and deployment of new services, leading to a significant portion of an…
AI’s ‘middle class’ has gotten dramatically better at hacking
Recent research indicates a significant improvement in the hacking capabilities of mid-tier artificial intelligence models, prompting concerns among cybersecurity experts. While advanced "frontier" models like Mythos and OpenAI's GPT 5.6 often capture headlines for their sophisticated abilities, a growing class of more affordable proprietary and open-source models are demonstrating increased…
Flock tightens privacy controls amid scandals over officer abuse
Flock Safety, a prominent provider of license plate reader technology, has announced new policy changes aimed at curbing misuse of its systems by law enforcement. The updates come amidst increasing scrutiny and reports of officers exploiting the technology for personal reasons.
Critical VMware vCenter RCE flaw exploited for reverse SSH access
A critical remote code execution (RCE) vulnerability in VMware vCenter Syslog Server, identified as CVE-2026-59310, is actively being exploited to establish persistent remote access through a reverse SSH tool. Broadcom, the vendor, confirmed the flaw on July 29 and released emergency patches, describing it as a directory traversal vulnerability that allows unauthenticated attackers with…
New Mirai variant adds stealth capabilities to notorious botnet code
A new variant of the Mirai botnet, dubbed Evooo1Bot, has been actively exploiting vulnerabilities in internet-facing hardware for at least a month, according to researchers. This Linux-based malware targets routers and other devices from manufacturers including Alcatel, D-Link, Mitsubishi Electric, Netgear, Tenda, and Telesquare. Unpatched security flaws in these devices are being leveraged by…
Exposed AWS Access Key Linked to Data Breach Affecting 1500+ UK Charities
A cyberattack on Beacon, a customer relationship management (CRM) provider, has resulted in the exposure of personal information belonging to supporters of approximately 1500 UK charities. The incident, which Beacon confirmed on August 12, was attributed to a compromised AWS access key.
Trezor discloses data breach affecting nearly 14,000 customers
Trezor, a manufacturer of hardware cryptocurrency wallets, has disclosed a data breach impacting nearly 14,000 customers. The incident stemmed from unauthorized access to the systems of ShipMonk, Trezor's shipping and logistics partner.
Trump wants to grant private cyber firms a license to hack back
The United States government has announced a new policy allowing private cybersecurity firms to conduct offensive cyber operations against transnational criminal organizations. President Donald Trump signed a memo on Wednesday, August 12, 2026, outlining the strategy, which permits contractors to engage in cyber surveillance and technical disruptions of foreign criminal networks. This…
The backup Microsoft never promised you
Organizations relying on Microsoft's cloud services, including Microsoft 365, Azure, and Entra ID, often operate under a significant misconception regarding data protection and recovery in the event of a cyberattack. While Microsoft ensures the availability and operational continuity of its services, it does not provide comprehensive data backup and recovery solutions that protect against…
Google Cloud Targets 2027 for First Major Post-Quantum Security Milestone
Google Cloud has outlined a phased roadmap for its transition to post-quantum cryptography, setting a target of late 2027 for the completion of its first major security milestone. This initial phase focuses on mitigating "store-now-decrypt-later" (SNDL) risks, where data collected today could be decrypted by a future quantum computer. The comprehensive plan, published on August 12, organizes…
Cybersecurity M&A Roundup: 21 Deals Announced in July 2026
A recent report indicates that July 2026 saw a significant volume of merger and acquisition activity within the cybersecurity sector, with a total of 21 deals announced. This activity highlights a dynamic period in the industry, reflecting ongoing consolidation and strategic realignments among key players.
White House authorizes private US companies to hack foreign criminal networks
The White House has authorized private U.S. companies to conduct offensive cyber operations against foreign criminal networks, under the direct control and oversight of the U.S. government. President Trump signed a National Security Presidential Memorandum on August 12, allowing vetted private entities to engage in such activities.
Black Hat USA 2026: Will vulnerability discovery eventually decline in the AI era?
The cybersecurity community is grappling with an unprecedented surge in software vulnerability discoveries, largely driven by advancements in artificial intelligence. This rapid increase has prompted the U.S. government to establish Gold Eagle, a new clearinghouse designed to coordinate research, mitigation, and fixes for vulnerabilities. The scale of the problem is evident in recent Microsoft…
Adobe Commerce Bug Targeted Immediately After Disclosure
Exploitation attempts targeting a recently disclosed vulnerability in Adobe Commerce, identified as CVE-2026-71362, were observed almost immediately following the release of patches by Adobe. This rapid move from disclosure to active targeting highlights a recurring challenge in software security, where threat actors quickly weaponize newly public vulnerability information.
Who Vets AI’s Code? The Scale Challenge Facing Open Source Ingestion
The rapid adoption of AI coding assistants by developers is introducing new supply chain vulnerabilities, particularly through a mechanism dubbed "slopsquatting" or AI package hallucination exploitation. This issue arises when large language models (LLMs) suggest non-existent or malicious software package names, which can then be registered by attackers and subsequently fetched into…
vCenter Flaw Exploited Just Five Days After Disclosure
A critical vulnerability in VMware vCenter, identified as CVE-2026-59310, was actively exploited by attackers within five days of its public disclosure by Broadcom. The flaw, a directory traversal vulnerability in the vCenter Syslog server, carries a CVSS score of 9.8, indicating its severe nature. Broadcom confirmed that an unauthenticated attacker with network access to vCenter could…