News

A consortium of tech giants, including Meta, TikTok, Google, and Snap, is facing approximately 3,000 lawsuits regarding youth safety due to allegations that they marketed addictive products harmful to children's mental health. A recent ruling from the 9th US…

A recent presidential memorandum expands U.S. federal capabilities against foreign cybercrime by enabling vetted private companies to conduct offensive cyber operations under federal oversight. Managed by the National Coordination Center, these operations…

The article discusses an incident involving the Akira ransomware group that attempted to deploy ransomware on a victim's system but faced an unexpected failure. Using an initial credential spraying attack, the attackers gained access to a SonicWall SSL VPN…

Threat actors are exploiting a critical vulnerability (CVE-2026-59310) in VMware vCenter, disclosed on July 29 and patched by Broadcom. The flaw, rated 9.8 on the CVSS scale, is associated with directory traversal in the Syslog server allowing remote code…

A security researcher known as Nightmare Eclipse released a new zero-day exploit named ShieldBreak, which allows for privilege escalation on Windows systems. This exploit specifically targets Microsoft Defender, enabling users to gain SYSTEM privileges. It…

The article discusses the exploitation of a critical vulnerability in SharePoint (CVE-2026-55040), which allows unauthenticated users to impersonate administrators. The flaw, with a CVSS score of 9.1, was patched in July 2026, but public proof-of-concept…

The ICO reprimanded the UK's Criminal Records Office (ACRO) following a data breach affecting over 10,000 individuals. The breach, which occurred from August 2022 to March 2023, was due to poor security practices, such as inadequate patch management and…

Microsoft has reported that the China-linked cybercriminal group Storm-1175 has replaced its previous ransomware, Medusa, with a new strain known as StormEncryptor. This ransomware encrypts files and appends a `.encrypted` extension, along with leaving a…

In May 2026, Kaspersky researchers uncovered a new cyber-espionage campaign by the Armored Likho group targeting individuals and organizations in Russia. The campaign utilizes a deceptive app to deliver the **Still Toolkit**, which comprises two primary…

A critical vulnerability (CVE-2026-65640) affecting WordPress versions 4.7.0 to 7.0.3 has been identified and patched in version 7.0.4. This flaw, which allows authenticated remote code execution via the Imagick and Ghostscript libraries, poses a significant…

The article discusses a newly detected self-propagating npm worm named ChainDrop, which is linked to over 400 infected packages, downloaded extensively, and targets developer environments and cloud infrastructures. It can steal sensitive credentials, such as…

The North Korean Lazarus Group has launched a new phase of its long-running 'Operation Dream Job,' targeting defense and aerospace professionals with fake job offers that exploit a recently discovered Windows zero-day vulnerability, identified as…

A recent cybersecurity vulnerability involves Belgium's eID authentication system, where a compromised browser extension allowed hackers to steal identities, payment information, and execute code remotely on users' machines. The 'Connective' signing…

The content outlines the detection of a critical cybersecurity threat involving a fake Zoom installer that deploys the Overlord remote access tool (RAT) on macOS and Windows. Key points include: 1. **Active Exploits**: Three CVEs have been identified,…

The article discusses a recent cybersecurity vulnerability in SharePoint that allows for authentication bypass. Following the public release of proof of concept (PoC) code, attackers have started exploiting this weakness. The vulnerability poses risks to…

This page features an ISC Stormcast update for August 13th, 2026, with Guy Bruneau serving as the handler on duty. It mentions the current threat level is green. There are links to learn more about classes taught by Dr. Johannes Ullrich and resources related…

The article discusses the use of the Gemma4 Large Language Model (LLM) to analyze malware hashes collected by the DShield sensor over the past 30 days. The analysis aims to understand the threat posed by suspicious download activities by actors/bots. Key…

Three critical vulnerabilities were reported today, involving Cisco Secure Firewall, Microsoft Windows, and Metabase. A focus is on a newly disclosed MariaDB remote code execution exploit that allows low-privileged users to execute commands. The exploit…

GitLab released a patch on August 12, 2026, addressing 13 security flaws in versions 19.2.2, 19.1.4, and 19.0.6. The most critical issues are high-severity cross-site scripting bugs, with CVSS scores of 8.7. There have been no confirmed exploits for these…

A massive supply-chain attack on LiteLLM has resulted in the exposure of terabytes of sensitive credentials belonging to major organizations like Microsoft, Amazon, and Cisco. This breach was revealed by security firms CloudSEK and Hudson Rock and affected…

The 'City-Forum' campaign has been targeting Salesforce and ServiceNow from March 2025, employing a custom toolset to exploit overly permissive guest access for data theft across various sectors, including finance and telecommunications. Researchers from…

CEVA Logistics experienced a cyberattack on July 29, disrupting operations at eight warehouses in Europe and halting shipments. The company informed customers on August 1 of the shipment delays related to the attack, which has not been linked to a known…

The article discusses a cyberattack attributed to China-linked hackers who utilized eight AI agents to autonomously breach Taiwan's government network. This operation, documented by Israeli cybersecurity firm Dream, marked a significant advancement in cyber…

The article reports that the Lazarus group has exploited a Windows zero-day vulnerability to gain SYSTEM access and deploy a backdoor. The ongoing cyber espionage activities highlight the need for organizations to strengthen their security measures against…

Walmart has transformed its cybersecurity approach by co-locating its red and blue teams to foster collaboration and trust through a 'purple teaming' model. This initiative, led by Jason O'Dell, aims to create a learning environment where both offensive and…

A recently patched SharePoint vulnerability, CVE-2026-55040, is being actively exploited following the release of a proof-of-concept exploit. This vulnerability allows attackers to bypass authentication and potentially access or modify files without…

Research has uncovered three critical vulnerabilities in Zoom, dubbed "Zoomsday," that could allow one participant to attack another during meetings via malicious data. These flaws, tracked as CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, impact…

A new malware strain, WindRelay, is being used in conjunction with the SpyNote remote access trojan (RAT) in a fraud scheme, where criminals impersonate bank employees to manipulate victims during a phone call. The fraudster instructs the victim to install…

The article by Johannes Ullrich on Linux Kernel Process Accounting outlines the importance and functionality of this kernel feature that tracks process activities. It emphasizes that process accounting is not enabled by default on Linux systems and provides…

The page reports on critical security vulnerabilities related to the Dell Virtual Storage Integrator (VSI) for VMware vSphere Client. Two significant flaws were identified: CVE-2026-67261, which allows unauthenticated remote code execution with a CVSS score…

The article by Ravie Lakshmanan discusses a significant security issue affecting 737 VPN extensions for Chrome, which have been found to route user traffic through proxies potentially compromising user privacy. The investigation highlights the need for users…

On August 2, 2026, Colombia's Ministry of Justice suffered a ransomware attack that impacted public services related to drug monitoring and legal processes, occurring just before a presidential transition. The national CERT had recently warned of increased…

The August 2026 Patch Tuesday from Microsoft addresses 421 vulnerabilities, including three critical zero-days and 62 rated as critical. Notably, a flaw exploited by the Lazarus group allows SYSTEM privileges. Key updates include a public Windows privilege…

Researchers from A Security disclosed vulnerabilities in Zoom that could allow attackers to hijack devices through screen sharing. The vulnerabilities, discovered using AI, affect all operating systems Zoom supports: Windows, macOS, Linux, iOS, and Android.…

The Lazarus Group, linked to North Korea, executed a new malware campaign utilizing a post-quantum key exchange to negotiate its command channel and deploy a Windows zero-day exploit against defense and aerospace firms in Europe and India. The exploitation…

AI security startup Mindgard has raised $30 million in a Series A funding round, bringing its total funding to approximately $42 million. The investment was led by Album VC, with contributions from Karma Ventures and other existing investors. Established in…