News Archive
2287 stories · page 62 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause
OpenAI has reportedly paused certain internal activities related to its forthcoming artificial intelligence model, Astra, following an internal evaluation that revealed substantial advancements in the model's agentic coding and cybersecurity capabilities. This pause is a direct response to the observed performance, prompting the company to implement enhanced security controls for its…
Chainloop: Open-source evidence store and policy engine for the software supply chain
Chainloop is an open-source evidence store and policy engine designed to secure the software supply chain by providing a verifiable record of build artifacts and processes. The system aims to address the challenge of tracking and verifying diverse build outputs, such as software bills of materials (SBOMs), static analysis reports, and container images, which often land in disparate locations…
Product showcase: Enpass Password Manager breaks away from the proprietary cloud model
Enpass Password Manager offers a comprehensive solution for storing sensitive information such as passwords, passkeys, payment cards, and secure notes in encrypted vaults. A key distinguishing feature of Enpass is its departure from proprietary cloud storage models, allowing users to select their preferred cloud service or store data locally.
Critical Flaws Discovered in Belgian eID Software Used by 2 Million People
Critical vulnerabilities have been reported in the Belgian eID software, a system utilized by an estimated two million individuals. These flaws reportedly impact applications across a significant portion of Belgium's financial sector, specifically affecting software used by eight of the ten largest banks, as well as over 60 government agencies. The widespread adoption of this software suggests…
How to report an AI Act violation in the EU
The European Union's AI Act, a landmark legal framework for artificial intelligence systems, entered its enforcement phase on August 2, 2026. This legislation aims to establish common rules for AI systems used or sold within the EU, balancing innovation with the protection of fundamental rights and safety. The European Commission's AI Office, in conjunction with national authorities, is now…
U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data
IEH Corporation, a U.S. defense and aerospace manufacturer, has confirmed it experienced a cybersecurity incident stemming from a phishing attack that compromised an employee's Microsoft 365 mailbox. The breach, discovered on August 4, 2026, potentially exposed sensitive information, including export-controlled military data.
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 109
A critical zero-day vulnerability in Metabase, an open-source business intelligence platform, has been actively exploited in the wild, potentially granting attackers administrative access and exposing sensitive data. The flaw, which was publicly disclosed on August 8, 2026, allows for unauthorized access to the platform's backend.
Security Affairs newsletter Round 589 by Pierluigi Paganini – INTERNATIONAL EDITION
Palo Alto Networks is currently undergoing a cybersecurity review in China, a development that coincides with escalating technological tensions between the two nations. The specifics of the review, including its scope and duration, have not been publicly detailed by either Palo Alto Networks or Chinese authorities.
Ransomware gangs skip the CEO, head straight for the 40-something IT manager
A recent analysis by Zscaler's ThreatLabz research team indicates a significant shift in ransomware attack strategies, moving away from indiscriminate targeting to highly personalized extortion campaigns. Rather than aiming for top executives, attackers are increasingly focusing on mid-level managers and other key personnel who possess "business privilege" rather than purely technical…
Webmail CSS Attacks Expose a New Risk for AI-Powered Email Tools
A security researcher has demonstrated a series of webmail client vulnerabilities that leverage Cascading Style Sheets (CSS) to steal credentials, hijack sessions, and manipulate AI tools integrated with user inboxes. The research, conducted by Gareth Heyes of PortSwigger, details attack chains against major webmail services including Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL…
Week in review: Cisco fixes IMC bug, Patch Tuesday forecast, Black Hat USA 2026
Attackers have exploited a critical authentication bypass vulnerability, identified as CVE-2026-18577, in N-able N-central, a remote monitoring and management solution. This flaw allows unauthorized access to managed endpoints.
Hackers breach TrueConf to trojanize client installers with backdoors
Hackers are exploiting vulnerabilities in TrueConf video conferencing servers to distribute malicious client installers containing backdoors, according to research from Kaspersky. The attacks, attributed to a group named Head Mare, leverage two specific flaws, internally tracked as KLCERT-26-057 and KLCERT-26-058, to achieve arbitrary code execution and privilege escalation, ultimately leading…
China Launches Cybersecurity Review of Palo Alto Networks Products
China's Cyberspace Administration (CAC) has initiated a cybersecurity review of Palo Alto Networks products sold within the country, citing national security concerns. The announcement from the CAC, published in formal Chinese, referenced the National Security Law and the Cybersecurity Law of the People's Republic of China, as well as the Cybersecurity Review Measures, as the legal basis for…
Devs to Anthropic, OpenAI, Cursor, and friends: Make security and privacy the default
A recent study analyzing developer discussions on Reddit indicates that creators of AI-powered coding tools, such as Claude Code, Cursor, GitHub Copilot, and OpenAI Codex, have not adequately prioritized security and privacy in their designs. This oversight often leaves developers responsible for implementing their own protective measures.
Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data
Attackers have exploited a zero-day vulnerability in Metabase, an open-source business intelligence and data analytics platform, to gain administrative access and steal sensitive data. The flaw, which carries a maximum CVSS score of 10.0, allowed unauthenticated attackers to inject arbitrary SQL into the Metabase application database.
Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data
A critical one-click vulnerability has been reported in Atlassian’s Rovo AI, which could have exposed enterprise data. The flaw, dubbed "RovoBlast" by researchers at Varonis, reportedly allowed for the exfiltration of sensitive information from linked Atlassian Confluence and Jira instances, as well as Microsoft SharePoint. The nature of a "one-click" vulnerability suggests a low barrier to…
CISA Adds Progress LoadMaster Command Injection Flaw to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Progress LoadMaster products, identified as CVE-2026-8037, to its Known Exploited Vulnerabilities (KEV) catalog. This addition mandates that federal agencies address the flaw by August 10, 2026.
Flock’s Plans for Rideshare Dashcams and Coaching Police, Revealed
Flock Safety, a company known for its network of fixed license plate recognition cameras, reportedly proposed a plan to integrate its data collection with 350,000 dashcams used by rideshare and delivery drivers. This proposal, detailed in a sales presentation from August 2025 to the Georgia Attorney General’s Office, outlined a partnership with dashcam manufacturer Nexar. While Flock's…
Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All
Two security researchers, working independently, have discovered that numerous organizations are inadvertently sending sensitive corporate and personal information to "no-reply" or "deleted user" email addresses. The researchers acquired several such domains and configured them to receive all incoming mail, revealing a widespread issue of system misconfigurations leading to data leakage.
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Reports indicate that Atlassian's Rovo assistant has been found to contain vulnerabilities that could be exploited to exfiltrate sensitive data from Jira and Confluence instances. Two separate security firms have identified distinct mechanisms by which an attacker might trick Rovo into disclosing information. These findings highlight potential security risks associated with AI-powered…
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
New research has uncovered a sophisticated class of CSS-based attacks capable of circumventing webmail security mechanisms, allowing adversaries to exfiltrate sensitive data such as user passwords and session tokens. The reported techniques demonstrate a method for bypassing existing defenses in widely used email services, including those offered by Microsoft Outlook, Google Gmail, and Yahoo…
Unlimited Technology Systems Data Breach Exposes Data of 3.8 Million Healthcare Patients
Unlimited Technology Systems, a healthcare technology provider based in Montgomery, Ohio, has disclosed a data breach affecting over 3.8 million individuals. The company confirmed that unauthorized actors accessed one of its commercial data centers between October 5 and October 10, 2025, potentially compromising personal, medical, and insurance information.
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Metabase has issued a critical alert regarding a zero-day vulnerability in its business intelligence software that is actively being exploited in the wild. The flaw reportedly allows unauthenticated attackers to achieve administrator access, facilitating credential theft and data exfiltration. Metabase Cloud instances have been patched, and self-hosted users are urged to update their…
N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist
N-able has issued Hotfix 2 for its N-central platform in response to an actively exploited zero-day vulnerability. The company confirmed that attackers leveraged this flaw to achieve administrative access on managed systems and establish persistence. This activity prompted the release of the hotfix, alongside additional guidance for affected customers.