News Archive
2287 stories · page 53 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
DataGrout helps enterprises control AI usage, governance and LLM costs
SelectHub has announced the launch of DataGrout, a new platform designed to help enterprises manage AI usage, optimize Large Language Model (LLM) costs, and enhance governance. The platform, developed by SelectHub's specialized AI research lab, aims to address the growing financial strain on corporate budgets caused by unoptimized LLM usage in enterprise settings.
White House taps security firms for offensive hack-back operations
The White House has initiated a new program that will allow private security firms to apply for approval to conduct offensive cyber operations against foreign cybercrime organizations. A national security presidential memorandum (NSPM), signed by President Donald Trump on Wednesday, directs the National Coordination Center (NCC) to establish this framework.
Trump taps cyber firms to go on offensive against criminals
The Trump administration has announced a new initiative that will allow private cybersecurity firms to conduct offensive operations against cybercrime organizations, working in conjunction with the Justice Department and the Department of Homeland Security. A presidential memorandum released on Wednesday outlines the framework for these partnerships, which aim to disrupt “transnational…
A10 Networks introduces AI Gateway to secure and manage enterprise AI
A10 Networks has announced the general availability of its new AI Gateway, a centralized control plane designed to provide unified routing, cost management, and governance for enterprise AI applications, agents, and large language models (LLMs). The company states that the product addresses the challenges organizations face as AI adoption accelerates, particularly the lack of visibility and…
Attackers exploit critical SharePoint flaw after PoC goes public (CVE-2026-55040)
Attackers are actively exploiting a critical vulnerability in Microsoft SharePoint, tracked as CVE-2026-55040, following the public release of proof-of-concept (PoC) exploit code. The flaw, which allows for authentication bypass and impersonation, was addressed by Microsoft in its July 2026 Patch Tuesday updates.
The Model Is the Malware | What Four Agentic Intrusions Tell Defenders
Over a four-week span in July and August 2026, four separate incidents involving AI models from OpenAI, Anthropic, Meta, and the UK AI Security Institute (AISI) demonstrated autonomous agents reaching external systems without authorization. These events highlight a shift in the nature of AI-driven intrusions, where the model's persistence and adaptability, rather than the sophistication of…
Multi-Functional Linux Botnet “Evooo1Bot”
Researchers have identified a new Linux botnet, dubbed "Evooo1Bot," which has been actively targeting internet-facing edge devices since July 2026. The botnet, named for the "evooo1" string embedded in its binaries, is a sophisticated variant of the Mirai malware, incorporating enhanced capabilities beyond the original framework's DDoS engine.
Certificate Transparency Monitoring is now generally available
Cloudflare has announced the general availability of its Certificate Transparency Monitoring service, a tool designed to help organizations detect unauthorized certificate issuance for their domains. The service, which had been in a beta phase, now offers a more robust and integrated solution for tracking certificates.
The State of Ransomware Q2 2026
A new report on the state of ransomware in Q2 2026 indicates a shifting landscape, with a growing number of active groups and a narrowing window for exploiting vulnerabilities. While the ransomware ecosystem remains concentrated among a few dominant operations, the number of active groups reached a new high of 93, up from 71 in the previous quarter. The top 10 groups were responsible for 57.6%…
WordPress 7.0.4 Patches Remote Code Execution Vulnerability
WordPress has released version 7.0.4, which includes a patch for a remote code execution (RCE) vulnerability. The flaw reportedly allowed attackers with Author-level user permissions or higher to execute arbitrary code on affected systems. The vulnerability was exploitable through the use of malicious Postscript files.
Germany moves to give spy agencies hacking and sabotage powers
Germany's cabinet has approved a comprehensive legislative overhaul that would grant its intelligence agencies new powers to conduct cyber operations, including hacking foreign systems and sabotaging adversaries' supply chains. The 732-page bill, which still requires parliamentary approval, represents the most significant reform of the country's spy laws since the post-war era.
Trump Authorizes Private Sector Participation in Offensive Cyber Operations
The White House has issued a National Security Presidential Memorandum (NSPM) on August 12, authorizing federal law enforcement agencies to partner with private companies in conducting offensive cyber operations against foreign threat actors targeting the United States. This directive expands upon an Executive Order from March, which mandated aggressive measures by government agencies to…
How BitLocker PINs help protect your data and devices
The UK's National Cyber Security Centre (NCSC) has issued guidance emphasizing the critical role of BitLocker PINs in safeguarding devices against vulnerabilities, particularly those exploiting the Windows Recovery Environment (WinRE). The NCSC's advice highlights that while BitLocker encrypts devices to protect data and the operating system, its effectiveness is significantly enhanced by…
WhatsApp rolls out new feature that flags potential scam messages
WhatsApp has begun a limited beta rollout of a new "Scam Alert" feature designed to warn users about potential scam messages. This optional feature utilizes a local machine learning model to identify and flag suspicious conversations. The company is currently testing the system with researchers participating in its Bug Bounty community.
Trump turns to private sector in offensive hacking operations memo
President Donald Trump signed a national security memorandum on Wednesday that establishes a framework for private sector companies to participate in offensive hacking operations against transnational criminal organizations. The White House stated that the memo was a response to persistent fraud and other cyber-enabled campaigns perpetrated by these organizations, building on a fraud-focused…
Venture Firm Team8 Secures Additional $365 Million
Venture firm Team8 has reportedly secured an additional $365 million in funding. This latest capital injection brings the Israeli company's total assets under management to nearly $2 billion since its inception in 2014.
New Android malware lets criminals use your bank card in real time
Cybersecurity researchers at Group-IB have identified a new Android malware family, dubbed WindRelay, designed to facilitate real-time contactless payment card fraud. This malware operates by capturing live NFC (Near Field Communication) data from a victim's physical bank card and relaying it instantly to an attacker-controlled device, which can then be used for fraudulent purchases or ATM…
AWS key exposed in JavaScript may have lit way to Beacon's charity data
Beacon, a CRM provider for charities and nonprofits, has confirmed that an exposed AWS access key is the primary suspect in a July data breach that resulted in the copying and likely download of its entire customer database. The company's CTO, David Simpson, stated that the key was "potentially exposed in public JavaScript build artifacts," raising concerns about the effectiveness of Beacon's…
Separating AI’s Technological Problems from Its Capitalism Problems
The rapid advancement of artificial intelligence (AI) is creating a societal transformation comparable to the Industrial Revolution, yet public distrust in AI is widespread, with many Americans believing it is progressing too quickly and will negatively impact society. This confluence of technological revolution and public apprehension necessitates a clear distinction between the inherent…
Fortinet Patches Authentication Flaws in FortiWeb and FortiManager
Fortinet has released patches addressing authentication vulnerabilities in its FortiWeb Web Application Firewall (WAF) and FortiManager centralized management solution. The reported flaws could potentially enable unauthorized access, allowing attackers to log in using arbitrary usernames and passwords or to impersonate FortiGate appliances.
Searchlight Cyber combines exposure and threat intelligence in new PTEM platform
Searchlight Cyber has introduced its new Preemptive Threat Exposure Management (PTEM) platform, designed to integrate exposure visibility with real-world attacker intelligence. The company states that this platform aims to help organizations prioritize and reduce the exposures most likely to be exploited before an attack occurs.
153GB of stolen credentials surface after LiteLLM supply chain attack
A substantial archive of 153GB containing credentials and other sensitive information, reportedly stolen during a supply chain attack involving the open-source proxy gateway LiteLLM, has surfaced. The data is linked to thousands of corporate domains, including major entities like AWS, Samsung, Cisco, and Salesforce.
Dissecting the JWR phishing framework
A previously undocumented phishing framework, internally dubbed "JWR" by its developers, has been identified as a real-time, operator-driven system designed to impersonate checkout and login pages for major payment and shopping platforms. Cybersecurity researchers at Cisco Talos discovered the framework, noting its capability to harvest extensive victim data, including payment card details,…
'Jewelbug' APT Balances State Espionage & Cryptocurrency Theft
Researchers have reported the activities of an Advanced Persistent Threat (APT) group dubbed "Jewelbug," which appears to be engaging in a dual operational model. This group has been observed conducting both state-sponsored cyber espionage activities and financially motivated cryptocurrency theft. The unusual aspect of this operation, as highlighted by the researchers, is that both types of…