News Archive
2287 stories · page 58 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse
Google's Chrome browser on Android devices significantly reduced unwanted notifications, blocking over 7 billion per day during the first quarter of 2026. The company stated that notification abuse has become a prevalent method for distributing scams, malware, phishing attempts, and fraudulent payment requests.
Kimwolf botnet rebuilt to survive takedowns, researchers say
The Kimwolf botnet, known for its distributed denial-of-service (DDoS) attacks, has reportedly been rebuilt with new features designed to evade detection and resist law enforcement takedowns. Researchers at Palo Alto Networks' Unit 42, who track the botnet as Kimwolf or Aisuru, detailed these changes in a report published this week. The updated version of the botnet has been active since…
Federal judge issues second order blocking Trump mail-in voting directive
A federal judge has issued a second injunction against the United States Postal Service (USPS), blocking the implementation of a presidential executive order concerning mail-in voting. The order, issued by Judge Indira Talwani, prevents the federal government from taking control over the distribution of mail-in ballots to voters in individual states.
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security updates for August 2026, addressing a total of 421 vulnerabilities across various products. Of these, 62 are classified as "critical" by Microsoft. The company confirmed that one of the vulnerabilities, CVE-2026-68820, an elevation of privilege flaw in the Windows Ancillary Function Driver for WinSock, has already been exploited in the wild. This…
DeadLock ransomware uses blockchain to resist infrastructure takedown
The DeadLock ransomware operation has adopted a decentralized infrastructure leveraging blockchain technology to enhance the resilience of its communication channels with victims and its data leak activities. The group, which emerged in mid-2025, employs a double-extortion model, stealing data before encrypting files to pressure victims into paying ransoms. By July of the current year,…
Microsoft Patch Tuesday, August 2026 Security Update Review
Microsoft's August 2026 Patch Tuesday release addresses 421 vulnerabilities, including 62 critical and 357 important-severity issues across a broad range of products and services. This month's updates include fixes for three zero-day vulnerabilities, one of which has been actively exploited in the wild, while the other two were publicly disclosed prior to the patch release.
Signal adds an extra layer of security to make sure you're actually chatting with the right person
Signal has introduced Automatic Key Verification (AKV), a new security feature designed to prevent man-in-the-middle attacks that could compromise encrypted chats. The feature, announced on Tuesday, August 11, 2026, aims to ensure users are communicating with the intended contact by verifying their public encryption keys.
Microsoft's Patch Tuesday Deluge Continues With August Updates
Microsoft's August Patch Tuesday updates have been released, with security experts advising that the primary focus for organizations should be on prioritizing the application of these patches rather than being overwhelmed by the sheer volume of Common Vulnerabilities and Exposures (CVEs) addressed. This guidance suggests that some vulnerabilities may pose a more immediate or severe risk than…
421 bugs in Microsoft's Patch Tuesday release, and the Norks have already attacked one
Microsoft's August Patch Tuesday release addresses 421 vulnerabilities across its product line, with one critical flaw, CVE-2026-68820, confirmed by Microsoft to have been exploited as a zero-day by North Korea's Lazarus Group. This use-after-free vulnerability resides in the Windows Ancillary Function Driver for WinSock.
Microsoft Plugs Nearly 400 Security Holes
Microsoft released updates on August 11, 2026, to address 398 security vulnerabilities in its Windows operating systems and associated software. This extensive patch includes fixes for one vulnerability that is actively being exploited in the wild and two others that were publicly disclosed prior to the release.
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA
Reports indicate that the Gunra ransomware-as-a-service (RaaS) operation is actively exploiting unpatched vulnerabilities in Fortinet firewalls and VPN appliances to gain initial access to target networks. The gang has reportedly been successful in compromising critical infrastructure organizations, leveraging these flaws to bypass multi-factor authentication (MFA) mechanisms. This activity…
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
Microsoft has reportedly issued its monthly security updates, addressing a substantial number of vulnerabilities, including a Windows kernel driver zero-day that is actively being exploited in the wild. This critical flaw is said to be present in a core Windows kernel driver responsible for managing network socket operations. The update package reportedly includes patches for 398 distinct…
NSA installs DHS lawyer as new general counsel
The National Security Agency has appointed Kerianne Tobitsch as its new general counsel, filling a key legal role that had been vacant for approximately a year. Tobitsch, who previously served as a senior lawyer at the Department of Homeland Security, began her appointment on June 15, 2026.
Cisco warns of ASA and FTD VPN flaw exploited to crash devices
Cisco has issued a warning regarding a high-severity denial-of-service vulnerability, identified as CVE-2026-20349, which is actively being exploited to remotely crash affected devices. The flaw, with a CVSS score of 8.6, impacts devices running Cisco Secure Firewall Adaptive Security Appliance (ASA) or Secure Firewall Threat Defense (FTD) software when specific remote access services are enabled.
August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day
Microsoft's August 2026 Patch Tuesday release addressed a significant number of vulnerabilities, with 421 Common Vulnerabilities and Exposures (CVEs) receiving fixes. Among these, one zero-day vulnerability was specifically highlighted as having been actively exploited in the wild. This exploited flaw is a local privilege escalation issue affecting the Windows operating system.
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
The Computer Emergency Response Team of Ukraine (CERT-UA) has reported a new social engineering campaign attributed to Russian nation-state threat actors. The campaign, tracked by CERT-UA as UAC-0145, a subgroup of Sandworm (also known as APT44), targets IT workers in Ukraine through fake job interviews. The objective is to trick victims into installing malicious software disguised as a VPN…
Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees
Delta Air Lines is investigating an incident aboard Flight 591 from Las Vegas to Atlanta where an unauthorized Wi-Fi network appeared, allegedly disrupting the aircraft's legitimate in-flight Wi-Fi service. The incident occurred on August 10, 2026, and involved passengers returning from the DEF CON 34 hacker conference. Delta confirmed that an unauthorized Wi-Fi network, not operated or…
Delta investigates in-flight Wi-Fi spoofing on post-DEF CON flight from Las Vegas
Delta Airlines is investigating an incident on a flight from Las Vegas to Atlanta where a passenger reportedly deployed a rogue Wi-Fi network, leading to the deactivation of the aircraft's Wi-Fi system and a subsequent federal investigation. The incident occurred on Delta flight 591, which departed Harry Reid International Airport on Monday, August 10, 2026, after the conclusion of the DEF CON…
Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)
Microsoft's August 2026 Patch Tuesday, released on Tuesday, August 11th, addressed a substantial volume of security vulnerabilities across its product line. The update package included fixes for a total of 418 vulnerabilities. Among these, 62 were categorized as critical, indicating their potential for severe impact without user interaction. The release also notably included patches for one…
Windows 11 KB5121003 & KB5120240 cumulative updates released
Microsoft has released the August 2026 Patch Tuesday cumulative updates, KB5121003 and KB5120240, for Windows 11 versions 25H2/24H2 and 23H2. These updates are mandatory and address 400 security vulnerabilities identified in prior months, in addition to introducing new features and bug fixes. Users can install the update via Windows Update in their system settings or by manually downloading it…
Adobe Urges Immediate Patching of Critical ColdFusion, Campaign Classic Flaws
Adobe has issued an urgent advisory, urging users to immediately patch critical security vulnerabilities identified in its ColdFusion and Campaign Classic products. The company has released security updates to address these flaws, which pose significant risks to affected systems.
ExfilSquad Targets New Victims, Shares Data via Torrents
The cybercrime group ExfilSquad, which emerged in mid-2026, has announced new victims, targeting 13 organizations across the U.S., the UK, and Sweden. This follows a previous attack in July against a major financial institution in Nigeria. The group's modus operandi involves stealing data and threatening to publish it on a dark web leak site if a ransom is not paid, rather than deploying…
Valve warns Steam hardware buyers: Expect fake delivery scams
Valve has issued a warning to European customers who recently purchased hardware through its Steam platform, advising them to be vigilant against potential delivery scams following a cyberattack on its shipping partner, CEVA Logistics. The incident, which occurred between July 29 and August 1, 2026, exposed personal information including names, home addresses, phone numbers, Steam email…
Cisco Warns of Seven ClamAV Flaws, Two With Public PoCs
Cisco has issued a warning regarding seven vulnerabilities discovered in ClamAV, an open-source antivirus engine, which affect its Secure Endpoint Connector products across Windows, macOS, and Linux platforms. Two of these flaws, identified as CVE-2026-20337 and CVE-2026-20338, have publicly available proof-of-concept (PoC) exploit code, raising concerns about potential denial-of-service (DoS)…