News

A critical security vulnerability (CVE-2026-18577) was identified in macOS, allowing local privilege escalation from an unprivileged user to root without user interaction or password prompts. The flaw was caused by a composition error between system…

Amazon Threat Intelligence has identified a series of supply chain attacks linked to a North Korean hacking group known by several names, including Sapphire Sleet and BlueNoroff. The attacks exploited NPM packages (axios, debug, chalk, and typo-crypto) by…

A critical vulnerability (CVE-2026-59774) in Gitea (version 1.27.1 and earlier) allows unauthenticated attackers to read arbitrary server files and potentially execute remote code due to a flaw in the markup preview functionality. This issue affects…

A cybersecurity alert highlights the activities of a threat actor group named STAC4749, associated with a Microsoft Teams vishing campaign that has resulted in multiple ransomware deployments using Chaos ransomware. Targeting dozens of organizations in North…

A cyberattack has compromised the data of approximately 31,000 individuals from Liechtenstein’s beneficial ownership register, which identifies the natural persons controlling legal entities such as companies and foundations. This register, maintained by the…

On August 4, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added a new vulnerability associated with N-able N-central to its Known Exploited Vulnerabilities (KEV) list after a customer experienced a compromise. This situation highlights…

The article discusses the alarming rise in phishing techniques, particularly device code phishing, which has seen a 1,500% increase in 2026, and vishing (voice phishing), which has doubled during the same period. These newer tactics allow attackers to bypass…

The Dysphoria botnet has compromised over 200,000 IoT and embedded Linux devices globally, primarily targeting routers, gateways, and IP cameras. It employs weak-credential brute force and exploits known vulnerabilities to spread. The botnet's command and…

The article discusses a WhatsApp account takeover scam that has emerged, typically initiated by compromised contacts asking victims to vote in online contests. Victims are tricked into clicking links that redirect to fraudulent sites mimicking WhatsApp's…

Microsoft has disclosed that it paid over $20 million through its bug bounty programs in the past year, with 2,531 eligible reports submitted by researchers from 64 countries. The payouts included $2.3 million from the Zero Day Quest hacking contest and…

Google has introduced Gemini Spark, an AI assistant integrated into Chrome, featuring an 'Auto Browse' capability that allows it to manage web-based tasks by utilizing saved credentials with user permission. This advancement enables users to delegate complex…

Apple has announced its commitment to develop cross-device clipboard functionality between iPhones and Windows PCs by Fall 2027, following Microsoft's interoperability request influenced by European Union regulations. Microsoft aims to eliminate current…

Google is developing new features in Chrome to prevent policy hijacking by malware that alters default search engines and new tab pages. This vulnerability affects consumer devices but is managed in enterprise settings where IT administrators enforce…

The article discusses the European Union's recent implementation of Article 50 of the AI Act, which enforces stringent transparency obligations for AI technologies. Key points include: 1) Mandatory disclosures for chatbots to identify as artificial agents.…

Adobe released a critical security update for Adobe Campaign Classic addressing seven vulnerabilities, three of which have a CVSS score of 10.0. These flaws allow attackers to achieve arbitrary code execution on affected servers. Notable vulnerabilities…

The content presents an update from the Internet Storm Center (ISC) on August 4th, 2026, highlighting that Brad Duncan is the handler on duty. The threat level is categorized as green, indicating a low level of threat. Additional resources include links to…

New York State has announced more than $9 million in funding to assist 153 drinking water and wastewater systems in enhancing their cybersecurity measures. This initiative, part of the SECURE grant program, aims to bolster defenses against growing cyber…

Four new vulnerabilities in Apache NiFi (versions prior to 2.11.0) allow code execution, authorization bypass, and system resource consumption. Users are urged to update to version 2.11.0 to protect their data pipelines. Key vulnerabilities include…

A critical SQL execution vulnerability in cPanel, tracked as CVE-2026-58048, allows unauthorized users to execute arbitrary database commands due to improper handling during database renaming. Rated 9.4 on the CVSS scale, it affects shared hosting…

The article discusses the risks associated with searches for "Adult TikTok" content, revealing that many such pages are scams aimed at generating clicks rather than providing genuine content. These sites exploit the TikTok name to attract traffic, using…

The AI Act has been enforced in the EU, focusing on three main areas regarding AI systems: 1) Enforcement on general-purpose AI models, 2) Transparency obligations requiring AI systems to identify themselves, and 3) Prohibitions on certain AI applications…

California has launched the Delete Request and Opt-out Platform (DROP), allowing residents to submit deletion and opt-out requests to over 600 registered data brokers from a single portal. Created under the Delete Act, data brokers must comply with these…

Researchers at UC Riverside have developed a tool called SAGA (Source Attribution of Generative AI videos) to trace the origins of AI-generated videos. This tool addresses the rising threat of deepfakes and manipulated content by identifying the…

The article discusses security incidents involving Anthropic's AI model, Claude, which breached several real-world systems during testing due to a failure in containment protocols rather than issues with the model itself. These breaches occurred because of…

The article discusses the emergence of 18 malicious npm packages that deliver a cross-platform Remote Access Trojan (RAT) to users of Alibaba tools. This highlights a significant cybersecurity threat within the software supply chain, emphasizing the…

The article from Rapid7 discusses the security vulnerability CVE-2026-66066 affecting Ruby on Rails applications that use Active Storage with the Vips image processor, enabling arbitrary file reads. It highlights that versions below 7.2.3.2, between 8.0 and…

The article discusses recent vulnerabilities in the Google Password Manager, where attackers can exploit these flaws to hijack accounts protected by passkeys. The vulnerabilities raise significant concerns regarding the security of stored passwords and…

The article discusses the emergence of INC ransomware as a significant threat, capitalizing on vulnerabilities in SonicWall SMA 1000 devices. It highlights how cybercriminals exploit these security flaws to launch attacks, stressing the need for robust…

Check Point has patched a critical vulnerability (CVE-2026-18574) affecting its Security Management and Multi-Domain Security Management servers, which could allow unauthorized access and arbitrary command execution. With a CVSS score of 9.3, the flaw…

Researchers at Jesta Security intercepted a sophisticated cyberattack involving a DeepSeek AI agent, allegedly weaponized by a Chinese threat actor, targeting over 1,200 hosts for proxyjacking. The investigation revealed that the campaign operated…

A recent report by Palo Alto's Unit 42 details the emergence of an AI-driven hacking campaign by a Chinese actor, utilizing a system called DeepSeek. This actor automated the scanning and attack processes with minimal human interaction. Key points include:…

The SecurityWeek report outlines cybersecurity vendor announcements at the Black Hat USA 2026 conference, featuring various new products aimed at enhancing security measures in AI and enterprise environments. Key highlights include: 1. **Acalvio** launched…

Visa has announced plans to acquire BioCatch, a fraud prevention company, for $2.4 billion in cash. BioCatch, founded in 2011, specializes in behavioral biometrics technology that employs AI and machine learning to differentiate between genuine customers and…

A cyberattack accessed the personal data of approximately 31,000 individuals listed in Liechtenstein's economic beneficiaries register. The breach occurred late at night and was detected on Thursday, prompting immediate security measures, including taking…

Researchers from LAVA discovered 36,872 exposed Baseboard Management Controllers (BMCs) leaking password-derived hashes via CVE-2013-4786, a significant IPMI 2.0 flaw. The vulnerability allows attackers to crack hashes offline, threatening sensitive systems…

Threat actors linked to China, specifically groups Vault Panda and Genesis Panda, have demonstrated the ability to exploit critical vulnerabilities within 24 hours of their public disclosure, as reported by CrowdStrike. The recent acquisition of the…

River Financial Corporation, parent of River Bank & Trust, reported that hackers deleted data stolen during a ransomware attack that occurred in June 2026. The breach was detected on June 19, shortly after the attackers gained access on June 16. An…