23 CVEs published in the last four months and 12 stories. Exploited flaws first.

President Trump has reportedly named National Intelligence Director Jay Clayton to lead a newly established federal task force focused on artificial intelligence. This development follows a recent gathering at the White House where the President met with leading executives from various AI companies.

Several organizations have recently confirmed data breaches and system compromises, while cybersecurity researchers have identified critical vulnerabilities in widely used software and observed new tactics involving artificial intelligence in cyberattacks.

Tufin has announced the release of Tufin Orchestration Suite (TOS) 5.3, an update designed to enhance security operations and maintain consistent control across complex, multi-vendor hybrid environments. The new version expands Tufin's Unified Control Plane with additional integrations, AI-powered intelligence, and automation capabilities.

The U.S. Justice Department has announced charges against 17 Iranian individuals, alleged members of a hacking-for-hire entity known as Mabna Institute, for their involvement in a multi-year operation to steal data from American organizations. This latest indictment, made public on August 19, 2026, includes eight new defendants, expanding upon a March 2018 indictment that previously charged…

Several organizations across various sectors have recently reported cyberattacks and data breaches, while security researchers have detailed new vulnerabilities and emerging threat trends, including the use of AI in cyberespionage.

Searchlight Cyber has introduced its new Preemptive Threat Exposure Management (PTEM) platform, designed to integrate exposure visibility with real-world attacker intelligence. The company states that this platform aims to help organizations prioritize and reduce the exposures most likely to be exploited before an attack occurs.

Researchers from MIT have unveiled a new speculative execution attack, dubbed TONTOU (Time-of-Neutralization to Time-of-Use), that circumvents existing defenses against Spectre v2. The attack, developed by Daniël Trujillo and Mengjia Yan of MIT's Computer Science and Artificial Intelligence Laboratory (CSAIL), exploits a brief window between when branch predictor states are neutralized and…

Researchers at MIT CSAIL have reportedly discovered a novel interrupt injection attack, dubbed "INTERRUPT INJECTION," capable of bypassing existing Spectre v2 defenses on both Intel and AMD CPUs. The technique allows an unprivileged Linux program to exploit a timing window, effectively re-poisoning a processor's branch predictor after the system's mitigations have already executed.

Uppsala Security, a blockchain intelligence company, has reportedly become the first entity of its kind to join the Cyber Threat Alliance (CTA). This development was announced on August 5th, 2026, from Singapore.

The House Intelligence Committee has advanced its fiscal 2027 authorization legislation, which includes provisions for a cyberthreat intelligence sharing pilot program for state and local governments, enhanced election security measures, and increased utilization of artificial intelligence within the intelligence community. The bill was approved on Monday.

Ernst & Young, a global accounting and professional services firm, has disclosed a data breach stemming from a compromised third-party IT support platform. The incident potentially exposed sensitive information, including client documents, tax details, and employee data, which had been submitted in support tickets.

Reports indicate a recent surge in internet-wide scanning activity targeting the Hikvision Intelligent Security API. This observed scanning behavior, detected by honeypot networks, suggests attackers are actively probing for vulnerable Hikvision devices exposed to the internet. The activity was specifically noted on Sunday, July 19th.