News Archive
2287 stories · page 57 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Akira ransomware scum blocked victim's security tools – and broke their own encryptor
An Akira ransomware affiliate inadvertently sabotaged their own encryption efforts by rebooting a victim's machine into Safe Mode with Networking, a tactic intended to disable security software. The limited system resources available in Safe Mode, particularly constrained virtual memory, caused the Akira encryptor to fail, preventing it from locking the victim's files.
Stealthy ‘City-Forum’ Attacks Target Salesforce and ServiceNow With Custom Toolset
A new campaign, dubbed "City-Forum" by researchers, has been observed targeting Salesforce and ServiceNow platforms. The attacks reportedly leverage unauthenticated guest access to discreetly enumerate and exfiltrate exposed data. This novel campaign utilizes a custom toolset, indicating a tailored approach to compromise these enterprise cloud services.
WhatsApp Unveils New Scam Alert Feature
WhatsApp has reportedly introduced a new feature designed to alert users to potential scams. This development aims to enhance user security by providing proactive warnings against fraudulent activities commonly observed on the platform. The announcement comes as messaging applications continue to grapple with the challenge of protecting users from evolving social engineering tactics.
Walmart Leaders Transform Security Operations Without Going Bananas
Walmart's security leadership has reportedly achieved a significant transformation in its security operations, emphasizing a strategy built on trust and innovation. This shift has enabled the retail giant to scale its defenses effectively, with key factors identified as strong communication, transparency, and fostering a collaborative team spirit. The reported success suggests a focus on…
Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery
Microsoft released fixes for 419 security vulnerabilities in its latest Patch Tuesday update, marking one of the largest monthly counts on record. This follows a trend of escalating vulnerability disclosures, with 137 patches in May, 206 in June, and 622 in July, surpassing the company's annual record of approximately 1,250 vulnerabilities. The company has indicated that AI-powered…
NIST Seeks Public Input on AI-Ready NVD Modernization
The U.S. National Institute of Standards and Technology (NIST) has initiated a public consultation to modernize its National Vulnerability Database (NVD), aiming to integrate artificial intelligence (AI) and automation workflows. This effort, announced in a Request for Information (RFI) published in the Federal Register on August 12, seeks to adapt the NVD to a cybersecurity landscape…
Hackers leverage new Microsoft SharePoint exploit in attacks
A proof-of-concept (PoC) exploit for a critical authentication bypass vulnerability in Microsoft SharePoint, identified as CVE-2026-55040, is reportedly being actively used in attacks. Cybersecurity firm Rapid7 published a detailed technical write-up and the PoC exploit code on Tuesday, August 11, 2026.
CISA gives federal agencies two weeks to patch Microsoft bug exploited in DPRK campaign
The Cybersecurity and Infrastructure Security Agency (CISA) has mandated that federal agencies patch a critical Microsoft Windows vulnerability, CVE-2026-68820, by August 25. This directive follows confirmation from both CISA and Microsoft that the flaw is actively being exploited in real-world attacks, notably by North Korean state-sponsored hackers.
This Coin-Sized Device Can Hack a Boeing 737
Security researchers from the University of California San Diego and Oberlin College have developed a coin-sized, Wi-Fi-enabled device capable of physically compromising a Boeing 737's systems in under a minute. The device, which costs less than $100, can be plugged into an externally accessible port on the aircraft, allowing an attacker to redirect its autopilot or subtly alter critical…
Help shape the future of resilient private 5G
The National Cyber Security Centre (NCSC) is seeking collaborations with technology partners and industry leaders to enhance the resilience and security of private 5G networks. This initiative is part of the NCSC's broader research efforts aimed at developing advice, guidance, and future products to safeguard critical UK information and capabilities.
Lazarus hackers pair fake job offers with Windows zero-day exploit
The North Korea-linked Lazarus Group has been observed employing a Windows zero-day exploit in a new phase of its "Operation Dream Job" campaign, primarily targeting the defense sector. The campaign leverages fake job offers and trojanized PDF software to compromise systems, ultimately deploying a kernel-mode rootkit and a new backdoor.
API Flaw Exposes AI Reasoning and Secrets
A significant vulnerability has been identified in the API reasoning services provided by major AI developers OpenAI, Anthropic, and Google. Researchers reportedly discovered a flaw that permitted the extraction of sensitive information, including API keys and passwords, from session logs. The core of the issue revolved around encrypted reasoning objects that could be replayed across disparate…
Ceva Logistics Operations Disrupted by Cyberattack
Ceva Logistics has reportedly experienced a cyberattack that has disrupted its European contract logistics operations. The incident has specifically impacted eight of Ceva's warehouses, leading to shipment delays for an unspecified number of customers.
Signal adds new security feature to thwart man-in-the-middle attacks
Signal has rolled out a new security feature called Automatic Key Verification, designed to enhance the integrity of encrypted conversations and protect against man-in-the-middle attacks. The feature, announced on August 12, 2026, is part of a broader "key transparency" system.
New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges
A security researcher known as Nightmare Eclipse has released a new zero-day exploit, dubbed "ShieldBreak," affecting Microsoft Defender. The exploit, disclosed on August 12, 2026, after Microsoft's August Patch Tuesday updates, is described as a bypass for a previously identified privilege escalation flaw in Defender, CVE-2026-50656, known as "RoguePlanet."
‘The Worst I’ve Ever Seen’: Cargo Thefts Have Turned Violent in Pursuit of AI Hardware
Criminal organizations are reportedly employing increasingly brazen and violent tactics to steal high-value AI hardware and data center equipment, according to industry experts and law enforcement sources. Two recent incidents in California involved the deliberate immobilization of security escort vehicles accompanying shipments of technology from Silicon Valley to Southern California,…
Chrome’s anti-abuse protections block 7 billion unwanted Android notifications daily
Google Chrome's integrated anti-abuse systems are currently blocking an average of 7 billion unwanted Android push notifications daily, according to figures released by Google for the first quarter of this year. These protections are a multi-layered effort combining Chrome Security, Firebase Cloud Messaging (FCM), and Safe Browsing to detect and prevent malicious or deceptive content…
Weekly Update 516: Live From Vietnam
This week's report from Vietnam highlighted a technical curiosity concerning Brinks Home's frequently asked questions (FAQ) section. The report noted that the company appeared to have authored its own FAQ, yet seemingly failed to adhere to or properly implement the information contained within it. This observation was made amidst minor technical difficulties during the report's transmission,…
Ivanti EPM Update Patches Remotely Exploitable Flaws
Ivanti has released an update for its Endpoint Manager (EPM) software to address several remotely exploitable vulnerabilities. These flaws, if successfully exploited, could lead to the leakage of credentials used for external SQL connections or cause an agent service to crash. The update is critical for maintaining the integrity and availability of systems managed by EPM.
Post-quantum migration gets harder when every user holds a key
The transition to post-quantum cryptography presents significant challenges, particularly in systems where individual users manage their own cryptographic keys, such as blockchains. Experts note that the increased key and signature sizes required by new algorithms can break assumptions in older protocols and systems, while the decentralized nature of user-held keys complicates large-scale…
PentestGPT: Open-source automated penetration testing agentic framework
A new open-source penetration testing agent, PentestGPT, has been released, designed to automate the process of identifying vulnerabilities in target systems. The framework, developed by Gelei Deng and a team of colleagues, was initially presented at USENIX Security 2024.
Cisco Patches Firewall Zero-Day Exploited for DoS Attacks
Cisco has released patches for a zero-day vulnerability in its Secure Firewall ASA and FTD devices, which has reportedly been exploited in the wild to launch denial-of-service (DoS) attacks. The flaw, identified as CVE-2026-20349, allows for remote exploitation without requiring authentication, posing a significant risk to affected systems.
Ready-made $500 kit puts a crypto scam within anyone’s reach
A cybercrime forum vendor is offering a comprehensive scam kit for $500, enabling individuals with minimal technical skills to execute sophisticated cryptocurrency fraud. The kit, discovered by Malwarebytes researchers on May 16, provides a complete "scam-in-a-box" solution, integrating social engineering, phishing, and financial fraud into a single, ready-to-use package.
AI deployments are stretching enterprise security to its limits
Enterprise security leaders anticipate a significant expansion of their organizations' attack surfaces, with an average increase of 14% expected over the next year due to the proliferation of AI deployments. A recent survey, NetFoundry's 2026 State of Secure AI Access, indicates that nearly all organizations lack adequate visibility into these AI deployments, and a substantial 90% express…