Security Feed

🔒 Security News Digest - 2026-07-30 📊 11 updates from 8 sources: 🦠 Malwarebytes: Hims & Hers sued over alleged health data privacy failures https://www.malwarebytes.com/blog/privacy/2026/07/hims-hers-sued-over-alleged-health-data-privacy-failures 🔹 Threat Intelligence: Batten Down Your Packages: Mitigation Guidance for Supply Chain Compromise https://cloud.google.com/blog/topics/threat-intelligence/mitigation-guidance-for-supply-chain-compromise/ 🔹 SecurityWeek: DataBahn Raises $40 Million for Agentic Data Pipeline Management https://www.securityweek.com/databahn-raises-40-million-for-agentic-data-pipeline-management/ 🔹 The Record from Recorded Future News: North Korea’s Lazarus Group sharing tools with ransomware hackers, South Korean agencies warn https://therecord.media/north-korea-hackers-ransomware 🔹 Security News | TechCrunch: In the Hugging Face breach, OpenAI’s hacker was noisy and fast — but not unstoppable https://techcrunch.com/2026/07/30/in-the-hugging-face-breach-openais-hacker-was-noisy-and-fast-but-not-unstoppable/ 🔹 The Hacker News: ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories https://thehackernews.com/2026/07/threatsday-ai-powered-hacking-370.html 🔹 darkreading: Claude Mythos — Hype vs. Reality: What Security Teams Need to Know https://www.darkreading.com/cybersecurity-operations/claude-mythos-hype-vs-reality 🔹 SecurityWeek: Timeless Compliance: Why Better Questions Beat Bigger Frameworks https://www.securityweek.com/timeless-compliance-why-better-questions-beat-bigger-frameworks/ 🦠 Malwarebytes: Malwarebytes for Windows, now available on the Microsoft Store https://www.malwarebytes.com/blog/product/2026/07/malwarebytes-for-windows-now-available-on-the-microsoft-store 🔹 Security News | TechCrunch: Okta buys AI security startup Permiso; source says for about $200M https://techcrunch.com/2026/07/30/okta-buys-ai-security-startup-permiso-source-says-for-about-200m/ 🔹 Krebs on Security: Read This Before You Buy That TV Streaming Stick https://krebsonsecurity.com/2026/07/read-this-before-you-buy-that-tv-streaming-stick/ #InfoSec #SecurityNews

🔒 Security News Digest - 2026-07-27 📊 7 updates from 2 sources: 🔹 The Hacker News: GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption https://thehackernews.com/2026/07/github-adds-3-day-dependabot-cooldown.html 🔹 The Hacker News: TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments https://thehackernews.com/2026/07/teleshim-abuses-telegram-for-c2-in.html 🔹 SecurityWeek: DentaQuest Data Breach Potentially Impacts Over 23 Million People https://www.securityweek.com/dentaquest-data-breach-potentially-impacts-over-23-million-people/ 🔹 SecurityWeek: Anthropic’s Opus 5 Nears Mythos 5 on Finding Bugs, but Falls Short on Exploits https://www.securityweek.com/anthropics-opus-5-nears-mythos-5-on-finding-bugs-but-falls-short-on-exploits/ 🔹 SecurityWeek: Hacked Public Wi-Fi Gateways Used to Harvest Corporate Credentials https://www.securityweek.com/hacked-public-wi-fi-gateways-used-to-harvest-corporate-credentials/ 🔹 SecurityWeek: What’s Hiding in Your Mobile Apps? Lookout MSEC Aims to Find Out https://www.securityweek.com/whats-hiding-in-your-mobile-apps-lookout-msec-aims-to-find-out/ 🔹 SecurityWeek: Beelzebub Raises $3.4 Million for Hacker-Trapping Platform https://www.securityweek.com/beelzebub-raises-3-4-million-for-hacker-trapping-platform/ #InfoSec #SecurityNews

🔒 Security News Digest - 2026-07-27 📊 6 updates from 2 sources: 🔹 SecurityWeek: Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack https://www.securityweek.com/coca-cola-confirms-data-breach-after-fairlife-ransomware-attack/ 🔹 SecurityWeek: Nvidia and Tech Giants Launch AI Security Alliance https://www.securityweek.com/nvidia-and-tech-giants-launch-ai-security-alliance/ 🔹 The Hacker News: Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update https://thehackernews.com/2026/07/operation-bluedash-deploys-level-rmm.html 🔹 SecurityWeek: MedusaHVNC Malware Uses Hidden Windows Desktops to Evade Detection https://www.securityweek.com/medusahvnc-malware-uses-hidden-windows-desktops-to-evade-detection/ 🔹 The Hacker News: n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process https://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html 🔹 SecurityWeek: PTC Windchill Vulnerability Exploited in Ransomware Campaign https://www.securityweek.com/ptc-windchill-vulnerability-exploited-in-ransomware-campaign/ #InfoSec #SecurityNews

🦠 Malwarebytes The AI Act kicks into action, forces companies to be clear about AI chatbots The European Union (EU) has started enforcing key parts of the AI Act, with immediate, visible consequences for chatbots, deepfakes and other consumer‑facing AI. 🔗 https://www.malwarebytes.com/blog/news/2026/08/the-ai-act-kicks-into-action-forces-companies-to-be-clear-about-ai-bots

🔒 Security News Digest - 2026-07-27 📊 5 updates from 4 sources: 🔹 SecurityWeek: New GitHub, PyPI Policies Boost Supply Chain Security https://www.securityweek.com/new-github-pypi-policies-boost-supply-chain-security/ 🦠 Malwarebytes: What’s your data worth on the dark web? (Lock and Code S07E15) https://www.malwarebytes.com/blog/podcast/2026/07/whats-your-data-worth-on-the-dark-web-lock-and-code-s07e15 🔹 The Hacker News: Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw https://thehackernews.com/2026/07/public-exploit-released-for-patched.html 🦠 Malwarebytes: Sextortion scammers are exploiting ShinyHunters data leaks https://www.malwarebytes.com/blog/scams/2026/07/sextortion-scammers-are-exploiting-shinyhunters-data-leaks 🔹 The Record from Recorded Future News: Telegram phishing campaign targeted exiled Belarusian activist, Russians and Kazakhstanis https://therecord.media/telegram-belarus-activist-russia-cyberattack #InfoSec #SecurityNews

🔹 The Hacker News JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. "The payloads are protected with javascript-obfuscator, using multiple techniques including RC4-protected strings, control-flow flattening, proxy functions, and operation wrappers," Check Point Research said in a 🔗 https://thehackernews.com/2026/09/jsceal-malware-can-bypass-google.html

🔹 SecurityWeek MCBS Data Breach Affects 1.2 Million Individuals The PEAR ransomware group claimed to have stolen 3 TB of information from the medical business management company. The post MCBS Data Breach Affects 1.2 Million Individuals appeared first on SecurityWeek. 🔗 https://www.securityweek.com/mcbs-data-breach-affects-1-2-million-individuals/

🔒 Security News Digest - 2026-07-29 📊 8 updates from 2 sources: 🔹 The Hacker News: Flying Eagle Android RAT Traces Found on 170 Servers as Source Code Circulates https://thehackernews.com/2026/07/flying-eagle-android-rat-traces-found.html 🔹 The Hacker News: New Gitea RCE Lets Repository Writers Plant a Git Hook to Run Shell Commands https://thehackernews.com/2026/07/new-gitea-rce-lets-repository-writers.html 🔹 The Hacker News: OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach https://thehackernews.com/2026/07/openai-agent-used-exposed-credentials.html 🔹 SecurityWeek: Dozens of Minnesota Water Utilities Targeted in Coordinated OT Attacks https://www.securityweek.com/dozens-of-minnesota-water-utilities-targeted-in-coordinated-ot-attacks/ 🔹 SecurityWeek: JFrog Zero-Days Exploited in OpenAI-Hugging Face Hack https://www.securityweek.com/jfrog-zero-days-exploited-in-openai-hugging-face-hack/ 🔹 The Hacker News: Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass https://thehackernews.com/2026/07/rapid7-releases-poc-for-exploited-check.html 🔹 SecurityWeek: Spur Raises $200 Million for IP Intelligence Platform https://www.securityweek.com/spur-raises-200-million-for-ip-intelligence-platform/ 🔹 SecurityWeek: OpenAI’s Rogue AI Ventured Beyond Hugging Face https://www.securityweek.com/openais-rogue-ai-ventured-beyond-hugging-face/ #InfoSec #SecurityNews

🔒 Security News Digest - 2026-07-31 📊 6 updates from 2 sources: 🔹 SecurityWeek: Critical Code Execution Vulnerability Patched in TeamCity https://www.securityweek.com/critical-code-execution-vulnerability-patched-in-teamcity/ 🔹 SecurityWeek: CareCloud Data Breach Impacts Over 350,000 https://www.securityweek.com/carecloud-data-breach-impacts-over-350000/ 🔹 SecurityWeek: Critical Flaw Led to Azure Cosmos DB Pwnage https://www.securityweek.com/critical-flaw-led-to-azure-cosmos-db-pwnage/ 🔹 SecurityWeek: Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations https://www.securityweek.com/after-openai-disclosure-anthropic-finds-its-own-models-hacked-3-organizations/ 🔹 Unit 42: The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version https://unit42.paloaltonetworks.com/xcsset-v40-malware-analysis/ 🔹 SecurityWeek: Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace https://www.securityweek.com/googles-ai-agent-uncovers-13-year-old-chrome-flaw-amid-record-patching-pace/ #InfoSec #SecurityNews

🔒 Security News Digest - 2026-08-06 📊 5 updates from 3 sources: 🔹 darkreading: No Perfect Fix for AI Browser Prompt Injection Flaws https://www.darkreading.com/application-security/no-perfect-fix-ai-browser-prompt-injection-flaws 🔹 Latest Bulletins: CVE-2026-18954 - Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server https://aws.amazon.com/security/security-bulletins/rss/2026-076-aws/ 🔹 darkreading: AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking https://www.darkreading.com/cyber-risk/ai-browsers-zero-click-agent-hijacking 🔹 darkreading: AI Sends Global Crime Syndicates Into Fraud Nirvana https://www.darkreading.com/threat-intelligence/ai-global-crime-syndicates-fraud-nirvana 🔹 Have I Been Pwned latest breaches: Inter-Con Security - 276,114 breached accounts https://haveibeenpwned.com/Breach/InterConSecurity #InfoSec #SecurityNews

🔒 Security News Digest - 2026-09-18 📊 18 updates from 6 sources: 🔹 The Hacker News: Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer https://thehackernews.com/2026/09/claimed-bug-bounty-hunter-likely-used.html 🔹 SecurityWeek: Brevo Supply Chain Attack Injects Malware Into 100,000 Websites https://www.securityweek.com/brevo-supply-chain-attack-injects-malware-into-100000-websites/ 🔹 Unit 42: A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity https://unit42.paloaltonetworks.com/securing-aws-agentcore-harness-credentials/ 🔹 SecurityWeek: NightmareStresser DDoS Service Disrupted in International Operation https://www.securityweek.com/nightmarestresser-ddos-service-disrupted-in-international-operation/ 🔹 The Hacker News: WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage https://thehackernews.com/2026/09/weaselbiscuit-stealer-spreads-via-13.html 🔹 SecurityWeek: Microsoft Patches 18 Vulnerabilities in AI, Cloud Products https://www.securityweek.com/microsoft-patches-18-vulnerabilities-in-ai-cloud-products/ 🔹 The Hacker News: Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents https://thehackernews.com/2026/09/plugin4shell-lets-repository-owners.html 🔹 The Hacker News: An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It. https://thehackernews.com/2026/09/an-abandoned-cdn-domain-was-re.html 🔹 SecurityWeek: 23 Million User Records Compromised in Gyazo Data Breach https://www.securityweek.com/23-million-user-records-compromised-in-gyazo-data-breach/ 🔹 SecurityWeek: AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code https://www.securityweek.com/ai-built-exploit-and-sign-in-flaw-opened-path-to-internal-openai-code/ 🔹 The Hacker News: Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation https://thehackernews.com/2026/09/microsoft-patches-cvss-100-azure-ai.html 🔹 The Record from Recorded Future News: Hacking group ‘NightEagle’ targeting China’s high-tech sector expands operations to Russia https://therecord.media/hacking-group-nighteagle-expands-russia-china 🔹 Security News | TechCrunch: Researchers used Anthropic’s Claude to hack into OpenAI https://techcrunch.com/2026/09/18/researchers-used-anthropics-claude-to-hack-into-openai/ 🦠 Malwarebytes: Did an AI really try to break free from human control? https://www.malwarebytes.com/blog/ai/2026/09/did-an-ai-really-try-to-break-free-from-human-control 🔹 SecurityWeek: In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw https://www.securityweek.com/in-other-news-ransomware-developer-sentenced-plugin4shell-ai-attack-critical-sap-flaw/ 🔹 The Record from Recorded Future News: Nations take action on North Korean IT workers after UN report https://therecord.media/nations-take-action-on-north-korean-it-worker-schemes 🦠 Malwarebytes: New Android malware uses AI to steal bank logins and PINs https://www.malwarebytes.com/blog/news/2026/09/new-android-malware-uses-ai-to-steal-bank-logins-and-pins 🔹 Security News | TechCrunch: FBI, Coast Guard boarded hacked oil tankers heading towards US coast https://techcrunch.com/2026/09/18/fbi-coast-guard-boarded-hacked-oil-tankers-heading-towards-us-coast/ #InfoSec #SecurityNews

🔹 The Hacker News Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary code execution. "VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue 🔗 https://thehackernews.com/2026/07/attackers-exploit-arista-velocloud.html

🔒 Security News Digest - 2026-07-28 📊 6 updates from 2 sources: 🔹 SecurityWeek: Critical Arista VeloCloud Orchestrator Vulnerability Exploited as Zero-Day https://www.securityweek.com/critical-arista-velocloud-orchestrator-vulnerability-exploited-as-zero-day/ 🔹 SecurityWeek: Unpatched Fastjson Vulnerability Exploited in Attacks https://www.securityweek.com/unpatched-fastjson-vulnerability-exploited-in-attacks/ 🔹 The Hacker News: Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit https://thehackernews.com/2026/07/researcher-says-ai-helped-develop-linux.html 🔹 The Hacker News: Critical TeamCity Flaw Could Let Attackers Run OS Commands Without Logging In https://thehackernews.com/2026/07/critical-teamcity-flaw-could-let.html 🔹 SecurityWeek: Google Adopts New Threat Actor Naming System https://www.securityweek.com/google-adopts-new-threat-actor-naming-system/ 🔹 SecurityWeek: Hush Security Raises $30 Million for AI Agent Governance https://www.securityweek.com/hush-security-raises-30-million-for-ai-agent-governance/ #InfoSec #SecurityNews

🔒 Security News Digest - 2026-08-11 📊 15 updates from 5 sources: 🦠 Malwarebytes: Fake popular sites offer a free app, instead take over PCs https://www.malwarebytes.com/blog/threat-intel/2026/08/fake-popular-sites-offer-a-free-app-instead-take-over-pcs 🦠 Malwarebytes: Watch out for fake TikTok Shops trying to steal your money https://www.malwarebytes.com/blog/scams/2026/08/watch-out-for-fake-tiktok-shops-trying-to-steal-your-money 🔹 The Hacker News: Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks https://thehackernews.com/2026/08/gunra-ransomware-exploits-fortinet-and.html 🔹 SecurityWeek: OpenAI Unveils New Cybersecurity Model GPT-5.6-Cyber https://www.securityweek.com/openai-unveils-new-cybersecurity-model-gpt-5-6-cyber/ 🔹 SecurityWeek: Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to Redemption https://www.securityweek.com/hacker-conversations-marcus-hutchins/ 🔹 Unit 42: Kimwolf v7: An Evolution of the Kimwolf Botnet https://unit42.paloaltonetworks.com/kimwolf-v7-botnet-malware/ 🔹 The Hacker News: Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets https://thehackernews.com/2026/08/malicious-mcp-servers-can-split.html 🔹 The Hacker News: Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11 https://thehackernews.com/2026/08/researchers-turn-usb-auto-install-into.html 🔹 SecurityWeek: Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities https://www.securityweek.com/extension-banned-for-stealing-ai-chats-returns-to-chrome-store-resumes-malicious-activities/ 🔹 The Hacker News: Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers https://thehackernews.com/2026/08/researchers-built-fake-crypto-startup.html 🔹 SecurityWeek: Corma Raises $60 Million for Defensive Cybersecurity AI Model https://www.securityweek.com/corma-raises-60-million-for-defensive-cybersecurity-ai-model/ 🔹 The Hacker News: Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo https://thehackernews.com/2026/08/mozilla-revokes-firefox-and-thunderbird.html 🔹 The Hacker News: A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices https://thehackernews.com/2026/08/a-malicious-sim-card-can-run-attacker.html 🔹 The Record from Recorded Future News: Kids’ online safety bill faces dim prospects of passage this session despite progress https://therecord.media/kids-online-safety-act-congress 🦠 Malwarebytes: Love/hate relationship: The AI affair. Young people love AI, but it’s breaking their trust https://www.malwarebytes.com/blog/ai/2026/08/love-hate-relationship-the-ai-affair-young-people-love-ai-but-its-breaking-their-trust #InfoSec #SecurityNews

🔒 Security News Digest - 2026-08-04 📊 5 updates from 3 sources: 🔹 darkreading: Device Code Phishing Up 1,500% in 2026; Vishing Doubles https://www.darkreading.com/cybersecurity-analytics/device-code-phishing-vishing-doubles 🔹 The Hacker News: CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html 🔹 SecurityWeek: 150,000 Impacted by Madera Community Hospital Data Breach https://www.securityweek.com/150000-impacted-by-madera-community-hospital-data-breach/ 🔹 The Hacker News: DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT https://thehackernews.com/2026/08/doublecup-uses-clickfix-and-cached-pngs.html 🔹 SecurityWeek: Decades-Old BMC Vulnerability Exposes Thousands of Data Centers to Attacks https://www.securityweek.com/decades-old-bmc-vulnerability-exposes-thousands-of-data-centers-to-attacks/ #InfoSec #SecurityNews

🔹 The Hacker News Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-pro") that has been observed delivering a browser wallet and credential stealer. The names of the extensions are below - helper-beeps.solidity-pro web3devtoolsx.solidity-pro Although neither of the extensions is now available on Open VSX, the GitHub repository 🔗 https://thehackernews.com/2026/08/solidity-pro-vs-code-extensions-steal.html

🔒 Security News Digest - 2026-08-04 📊 7 updates from 5 sources: 🔹 Latest Bulletins: CVE-2026-18830 - Issue with Amazon Bedrock AgentCore harness – Insufficient Input Validation https://aws.amazon.com/security/security-bulletins/rss/2026-073-aws/ 🔹 darkreading: Smoke#Screen RMM Takeover Gambit Exposes Threat Actor Playbook https://www.darkreading.com/cyberattacks-data-breaches/latest-rmm-fueled-phishing-attack-exposes-threat-actor-playbook 🔹 Security News | TechCrunch: Nvidia doesn’t mess around: A week after open AI industry group formed, it’s already showing progress https://techcrunch.com/2026/08/04/nvidia-doesnt-mess-around-a-week-after-open-ai-industry-group-formed-its-already-showing-progress/ 🔹 Latest Bulletins: CVE-2026-18656 & CVE-2026-18657 - Issue with Kiro IDE and CLI - Executable Resolution from Untrusted Project Directory on Windows https://aws.amazon.com/security/security-bulletins/rss/2026-074-aws/ 🔹 The Record from Recorded Future News: OpenAI: Cambodian scam centers used ChatGPT to lure Indian nationals, conduct investment fraud https://therecord.media/openai-chatgpt-cambodia-scam-centers-disruption 🔹 Security News | TechCrunch: Android app developers may be unwittingly sharing their users’ location data with advertisers https://techcrunch.com/2026/08/04/android-app-developers-may-be-unwittingly-sharing-their-users-location-data-with-advertisers/ 🦠 Malwarebytes: Apple battles it out again with the UK over encrypted iCloud access https://www.malwarebytes.com/blog/news/2026/08/apple-battles-it-out-again-with-uk-over-encrypted-icloud-access #InfoSec #SecurityNews

🔹 iTnews - Security iTnews Executive Retreat – Security Leaders Edition Hunter Valley, 17–18 September 🔗 https://www.itnews.com.au/feature/itnews-executive-retreat-security-leaders-edition-627912?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

🔹 iTnews - Security iTnews Executive Retreat – Security Leaders Edition - VIC 26-27 November, 2026, RACV Goldfields Resort, Creswick Victoria. 🔗 https://www.itnews.com.au/feature/itnews-executive-retreat-security-leaders-edition---vic-628732?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

🔒 Security News Digest - 2026-09-09 📊 23 updates from 7 sources: 🔹 The Hacker News: Chrome V8 Zero-Day Exploited in the Wild Enables Code Execution Inside Sandbox https://thehackernews.com/2026/09/chrome-v8-zero-day-exploited-in-wild.html 🔹 The Hacker News: U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok https://thehackernews.com/2026/09/us-agencies-accuse-china-ai-firms-of.html 🔹 SecurityWeek: Chrome 153 Patches Seventh Zero-Day of 2026 https://www.securityweek.com/chrome-153-patches-seventh-zero-day-of-2026/ 🔹 SecurityWeek: This Key Will Self-Destruct: An Open Standard for Revocable API Keys https://www.securityweek.com/this-key-will-self-destruct-an-open-standard-for-revocable-api-keys/ 🔹 SecurityWeek: New Phishing Attack Creates Malicious Pages Inside the Victim’s Browser https://www.securityweek.com/new-phishing-attack-creates-malicious-pages-inside-the-victims-browser/ 🔹 Unit 42: Untracked Nightmares: The Threats Hiding Behind Commodity Infrastructure https://unit42.paloaltonetworks.com/ppi-network-malware-campaign-analysis/ 🦠 Malwarebytes: Microsoft fixes record 964 flaws, including 2 exploited zero-days https://www.malwarebytes.com/blog/news/2026/09/microsoft-fixes-record-964-flaws-including-2-exploited-zero-days 🔹 SecurityWeek: Ivanti Patches Critical Flaws Across Enterprise Security Products https://www.securityweek.com/ivanti-patches-critical-flaws-across-enterprise-security-products/ 🔹 The Hacker News: Alby Hub Critical Flaw Could Let Attackers Take Over Internet-Exposed Bitcoin Wallets https://thehackernews.com/2026/09/alby-hub-critical-flaw-could-let.html 🔹 SecurityWeek: ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws https://www.securityweek.com/ics-patch-tuesday-schneider-electric-siemens-fix-critical-flaws/ 🔹 The Hacker News: DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval https://thehackernews.com/2026/09/deepseek-harness-flaw-let-ai-agents.html 🔹 The Hacker News: Webinar: Learn How to Answer “Are We Exposed?” Faster After a New CVE https://thehackernews.com/2026/09/webinar-learn-how-to-answer-are-we.html 🔹 SecurityWeek: Meta Launches Personal AI Agent, Muse, Emphasizes Safety and Privacy https://www.securityweek.com/meta-launches-personal-ai-agent-muse-emphasizes-safety-and-privacy/ 🔹 The Record from Recorded Future News: Ukraine prosecutor general steps down amid scam call center bribery probe https://therecord.media/ukraine-prosecutor-general-scam-center 🔹 SecurityWeek: US Agencies Warn China Is Systematically Extracting Frontier AI Capabilities https://www.securityweek.com/us-agencies-warn-china-is-systematically-extracting-frontier-ai-capabilities/ 🔹 Security News | TechCrunch: Sequoia doubles down on Cymphony as AI agents create new enterprise security risks https://techcrunch.com/2026/09/09/sequoia-doubles-down-on-cymphony-as-ai-agents-create-new-enterprise-security-risks/ 🔹 Security News | TechCrunch: Group of bipartisan lawmakers ask US government to ban several hack-for-hire firms https://techcrunch.com/2026/09/09/group-of-bipartisan-lawmakers-ask-us-government-to-ban-several-hack-for-hire-firms/ 🔹 The Hacker News: Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA https://thehackernews.com/2026/09/infostealer-logs-expose-replayable-ai.html 🔹 SecurityWeek: Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension https://www.securityweek.com/fortinet-patches-critical-vulnerabilities-in-fortimonitoronsight-chrome-extension/ 🔹 darkreading: Identity-Based AI Attack Threatens Security of Enterprise Data https://www.darkreading.com/threat-intelligence/identity-based-ai-attack-security-enterprise-data 🔹 Security News | TechCrunch: ‘Gambling with our lives’: Anthropic researcher quits, warns against self-improving AI https://techcrunch.com/2026/09/09/gambling-with-our-lives-anthropic-researcher-quits-warns-against-self-improving-ai/ 🦠 Malwarebytes: More than 100,000 fake stores are out to steal your card details https://www.malwarebytes.com/blog/scams/2026/09/more-than-100000-fake-stores-are-out-to-steal-your-card-details 🔹 The Record from Recorded Future News: FBI puts its cyber strategy on paper https://therecord.media/fbi-releases-first-public-cybersecurity-strategy #InfoSec #SecurityNews

🔒 Security News Digest - 2026-07-30 📊 8 updates from 3 sources: 🔹 SecurityWeek: Cisco Secure FMC Zero-Day Exploited in the Wild https://www.securityweek.com/cisco-secure-fmc-zero-day-exploited-in-the-wild/ 🔹 The Hacker News: FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks https://thehackernews.com/2026/07/fcc-blocks-new-foreign-produced-robots.html 🔹 The Hacker News: Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation https://thehackernews.com/2026/07/russian-hackers-exploit-microsoft-owa.html 🔹 SecurityWeek: Chrome 151 Patches 370 Vulnerabilities https://www.securityweek.com/chrome-151-patches-370-vulnerabilities/ 🔹 SecurityWeek: US and Allies Update SBOM Guidance https://www.securityweek.com/us-and-allies-update-sbom-guidance/ 🔹 SecurityWeek: 1 in 5 Data Center Assets Are Within Easy Reach of Attackers https://www.securityweek.com/1-in-5-data-center-assets-are-within-easy-reach-of-attackers/ 🔹 SecurityWeek: Critical Ruflo Flaw Lets Attackers Spawn Rogue AI Swarms https://www.securityweek.com/critical-ruflo-flaw-lets-attackers-spawn-rogue-ai-swarms/ 🔹 Unit 42: Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks https://unit42.paloaltonetworks.com/autonomous-ai-cyber-attack-campaign/ #InfoSec #SecurityNews

🔹 SecurityWeek New York Awards $9 Million to Strengthen Cybersecurity at 153 Water Systems The grants will help local governments assess and improve cyber defenses amid a multistate campaign targeting water and wastewater infrastructure. The post New York Awards $9 Million to Strengthen Cybersecurity at 153 Water Systems appeared first on SecurityWeek. 🔗 https://www.securityweek.com/new-york-awards-9-million-to-strengthen-cybersecurity-at-153-water-systems/

🔹 The Hacker News OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause OpenAI has announced that it's pausing some "internal activities" involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. In response to the discovery, the AI upstart said it's implementing security controls for higher-capability models and associated activities, such as isolated 🔗 https://thehackernews.com/2026/08/openais-next-ai-model-astra-shows-cyber.html

🔒 Security News Digest - 2026-07-29 📊 6 updates from 4 sources: 🔹 darkreading: Thousands of Data Center Controllers Open to Takeover https://www.darkreading.com/cyber-risk/flaw-exposes-data-centers-server-takeover 🔹 darkreading: Ghost Credentials Expose Cloud Systems to Hidden Identity Risks https://www.darkreading.com/cloud-security/non-human-identity-sprawl-creates-a-new-cloud-attack-path 🔹 The Record from Recorded Future News: Senate confirms Clayton as intel chief after delays https://therecord.media/jay-clayton-confirmed-dni-senate 🔹 Security News | TechCrunch: Cyera agrees to acquire Oasis Security for $1B to safeguard proliferating AI agents https://techcrunch.com/2026/07/28/cyera-agrees-to-acquire-oasis-security-for-1b-to-safeguard-proliferating-ai-agents/ 🔹 iTnews - Security: Okta details 'Work Panel', a turnkey SaaS platform for vishing crews https://www.itnews.com.au/news/okta-details-work-panel-a-turnkey-saas-platform-for-vishing-crews-627745?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed 🔹 iTnews - Security: OpenAI's Hugging Face hack mixed technical brilliance with incoherent noise https://www.itnews.com.au/news/openais-hugging-face-hack-mixed-technical-brilliance-with-incoherent-noise-627749?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed #InfoSec #SecurityNews

🔹 The Hacker News Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment. The plant supplies heat to roughly 50,000 residents. Recovery began at about 7:30 a.m. while the intruders were still active inside the network, and customers lost neither heat 🔗 https://thehackernews.com/2026/08/hackers-breach-polish-power-plant.html

🔒 Security News Digest - 2026-08-04 📊 15 updates from 6 sources: 🔹 The Hacker News: New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root https://thehackernews.com/2026/08/new-cpanel-critical-flaw-could-let.html 🔹 SecurityWeek: Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering https://www.securityweek.com/gemini-agent-to-agent-attack-exposed-secrets-enabled-pull-request-tampering/ 🔹 The Hacker News: Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent https://thehackernews.com/2026/08/google-deletes-3-adk-ai-workflows-after.html 🔹 The Hacker News: When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted https://thehackernews.com/2026/08/when-vibe-hacking-turns-ai-into-junior.html 🦠 Malwarebytes: Online backlash ends in Google rolling back Google Earth AI tool after a day https://www.malwarebytes.com/blog/news/2026/08/online-backlash-ends-in-google-rolling-back-google-earth-ai-tool-after-a-day 🔹 SecurityWeek: TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover https://www.securityweek.com/tp-link-omada-ztp-vulnerabilities-chain-into-full-network-takeover/ 🔹 SecurityWeek: Obsidian Security Raises $85 Million at $1.1 Billion Valuation https://www.securityweek.com/obsidian-security-raises-85-million-at-1-1-billion-valuation/ 🦠 Malwarebytes: Travelers targeted when logging into hotel Wi-Fi networks https://www.malwarebytes.com/blog/news/2026/08/travelers-targeted-when-logging-into-hotel-wi-fi-networks 🔹 The Record from Recorded Future News: Swiss IT agency hacked, 200 accounts compromised, SharePoint vulns suspected https://therecord.media/swiss-bit-foitt-hacked-possibly-sharepoint-vulnerabilities 🔹 Unit 42: Almost Half of Malware Samples Communicate Direct to IP https://unit42.paloaltonetworks.com/malware-bypass-dns-direct-to-ip/ 🔹 darkreading: AI Notetaker Lets Hackers Spy on Government, Corporate Video Calls https://www.darkreading.com/application-security/ai-notetaker-spy-government-corporate-video-calls 🔹 The Record from Recorded Future News: Apple launches new legal challenge against UK over iCloud access https://therecord.media/apple-uk-tcn-icloud-new-legal-challenge 🔹 Unit 42: The Frontier AI Vulnerability Burst: Industrializing Autonomous Zero-Day Discovery in Open-Source Software https://unit42.paloaltonetworks.com/frontier-ai-vulnerability-burst/ 🔹 SecurityWeek: Zenity Raises $125 Million in Series C Funding https://www.securityweek.com/zenity-raises-125-million-in-series-c-funding/ 🔹 SecurityWeek: Weaponized Email AI Assistants Could Help Attackers Hijack Accounts https://www.securityweek.com/weaponized-email-ai-assistants-could-help-attackers-hijack-accounts/ #InfoSec #SecurityNews

🔹 iTnews - Security Anthropic's Mythos 5 targeted real developers in UK cyber test Model without safety filters tried to social engineer coder during test. 🔗 https://www.itnews.com.au/news/anthropics-mythos-5-targeted-real-developers-in-uk-cyber-test-627952?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

🔒 Security News Digest - 2026-07-29 📊 7 updates from 4 sources: 🔹 The Record from Recorded Future News: OpenAI says rogue agent behind Hugging Face hack broke into additional services https://therecord.media/openai-says-rogue-agent-behind-hugging-face-hack-broke-into-additional-services 🔹 darkreading: Hugging Face Hack Lessons for Cyber Defenders https://www.darkreading.com/cyberattacks-data-breaches/hugging-face-hack-lessons-cyber-defenders 🔹 Security News | TechCrunch: US government bans new foreign-made humanoids, robot dogs, and solar inverters, citing risks to national security https://techcrunch.com/2026/07/29/us-government-bans-new-foreign-made-humanoids-robot-dogs-and-solar-inverters-citing-risks-to-national-security/ 🔹 darkreading: Who's Liable When AI Agents Escape? Hugging Face Breach Raises Hard Questions https://www.darkreading.com/cyberattacks-data-breaches/liable-ai-agents-escape-hugging-face-breach-questions 🔹 The Hacker News: Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads https://thehackernews.com/2026/07/critical-rails-flaw-could-let.html 🔹 darkreading: Red Agents vs. Blue Agents: How to Make AI Better At Defense https://www.darkreading.com/cybersecurity-operations/red-agents-vs-blue-agents-make-ai-better-defense 🔹 darkreading: OpenAI Rogue AI Incident Hit More Services Than Initially Thought https://www.darkreading.com/application-security/openai-rogue-ai-incident-services-initially-thought #InfoSec #SecurityNews

🔹 SecurityWeek Origin Energy Data Breach Affects 900,000 Australians The hacker claimed to have stolen the information of 2 million Origin Energy customers after breaching its systems. The post Origin Energy Data Breach Affects 900,000 Australians appeared first on SecurityWeek. 🔗 https://www.securityweek.com/origin-energy-data-breach-affects-900000-australians/

🔹 SecurityWeek ShinyHunters Claims Ernst & Young Hack Ernst & Young previously confirmed that personal and financial information was stolen from a third-party management platform. The post ShinyHunters Claims Ernst & Young Hack appeared first on SecurityWeek. 🔗 https://www.securityweek.com/shinyhunters-claims-ernst-young-hack/

🔹 The Hacker News Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a remote access trojan (RAT) associated with the DEV#POPPER malware family. The list of affected packages is as follows - @joyfill/layouts@0.1.2-2773.beta.0 @joyfill/components@4.0.0-rc24-2773-beta.4 The two packages "contain an import-time JavaScript implant that resolves encrypted code 🔗 https://thehackernews.com/2026/07/two-compromised-joyfill-npm-packages.html

🔒 Security News Digest - 2026-07-31 📊 7 updates from 4 sources: 🦠 Malwarebytes: Fake Flash Player installs AtlasRAT https://www.malwarebytes.com/blog/news/2026/07/fake-flash-player-installs-atlasrat 🔹 The Hacker News: Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks https://thehackernews.com/2026/07/chinese-hacker-commands-deepseek-via.html 🔹 The Hacker News: 6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026 https://thehackernews.com/2026/07/6-reasons-why-device-code-phishing-is.html 🔹 The Record from Recorded Future News: Anthropic says its AI hacked real-world companies in three incidents https://therecord.media/anthropic-ai-hacked-three-real-companies 🔹 darkreading: USA Fencing Lunges Into the Hidden Identity Challenge in Amateur Sports https://www.darkreading.com/identity-access-management-security/usa-fencing-hidden-identity-challenge-amateur-sports 🔹 darkreading: DROP Platform Lets Californians Reduce Digital Footprint https://www.darkreading.com/data-privacy/drop-platform-lets-californians-ditch-their-data 🔹 darkreading: Interpol Leverages Global System to Curtail Fraud Payments https://www.darkreading.com/cybersecurity-operations/interpol-leverages-global-system-curtail-fraud-payments #InfoSec #SecurityNews

🔹 iTnews - Security In Pictures: Security in the age of shadow AI Security Centric roundtable A selection of photos from a recent iTnews roundtable lunch at Bambini Trust restaurant in Sydney. 🔗 https://www.itnews.com.au/gallery/in-pictures-security-in-the-age-of-shadow-ai-security-centric-roundtable-627836?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

🔒 Security News Digest - 2026-07-30 📊 7 updates from 5 sources: 🔹 The Hacker News: DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware https://thehackernews.com/2026/07/dprk-linked-macos-malvertising-uses.html 🔹 Security News | TechCrunch: Google says it fixed more Chrome bugs in June than over the past two years, thanks to AI https://techcrunch.com/2026/07/30/google-says-it-fixed-more-chrome-bugs-in-june-than-over-the-past-two-years-thanks-to-ai/ 🔹 The Record from Recorded Future News: Semiconductor chip titan Analog Devices reports data breach https://therecord.media/analog-devices-semiconductor-company-data-breach 🔹 SecurityWeek: Okta to Acquire Identity Threat Detection Firm Permiso https://www.securityweek.com/okta-to-acquire-identity-threat-detection-firm-permiso/ 🔹 darkreading: AI Harnesses Burst With Potential Exploit Opps https://www.darkreading.com/application-security/ai-harnesses-potential-exploit-opps 🔹 Security News | TechCrunch: CareCloud begins to notify hundreds of thousands after hackers stole medical records https://techcrunch.com/2026/07/30/carecloud-begins-to-notify-hundreds-of-thousands-after-hackers-stole-medical-records/ 🔹 SecurityWeek: Bank of America to Acquire Cybersecurity Firm MDSec https://www.securityweek.com/bank-of-america-to-acquire-cybersecurity-firm-mdsec/ #InfoSec #SecurityNews

🔹 SecurityWeek Critical Flaws Discovered in Belgian eID Software Used by 2 Million People The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies. The post Critical Flaws Discovered in Belgian eID Software Used by 2 Million People appeared first on SecurityWeek. 🔗 https://www.securityweek.com/critical-flaws-discovered-in-belgian-eid-software-used-by-2-million-people/

🔹 SecurityWeek Mozilla Issues New Firefox GPG Key Following Exposure The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it. The post Mozilla Issues New Firefox GPG Key Following Exposure appeared first on SecurityWeek. 🔗 https://www.securityweek.com/mozilla-issues-new-firefox-gpg-key-following-exposure/

🔹 SecurityWeek CISA Urges Water Sector to Protect OT After Coordinated Attacks on PLCs CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minnesota systems. The post CISA Urges Water Sector to Protect OT After Coordinated Attacks on PLCs appeared first on SecurityWeek. 🔗 https://www.securityweek.com/cisa-urges-water-sector-to-protect-ot-after-coordinated-attacks-on-plcs/

🦠 Malwarebytes Apple accused of letting fake crypto app steal $1.8 million The case raises fresh questions about how effectively Apple polices apps that impersonate legitimate developers. 🔗 https://www.malwarebytes.com/blog/news/2026/07/apple-accused-of-letting-fake-crypto-app-steal-1-8-million

🔹 darkreading Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks The new program expands Vectra AI's partner strategy as increasingly complex security environments and the growing use of AI create demand for broader AI expertise, services, and security outcomes. 🔗 https://www.darkreading.com/cyberattacks-data-breaches/vectra-ai-launches-ascent-new-era-ai-driven-attacks

🔹 The Hacker News TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their sights on the software supply chain. "The connection is supported by overlapping domains, malware deployment paths, staging techniques, backend infrastructure, 🔗 https://thehackernews.com/2026/08/teampcp-linked-to-redis-attacks-dating.html

🔒 Security News Digest - 2026-08-03 📊 6 updates from 4 sources: 🔹 SecurityWeek: Visa to Acquire Fraud Intelligence Firm BioCatch for $2.4 Billion https://www.securityweek.com/visa-to-acquire-fraud-intelligence-firm-biocatch-for-2-4-billion/ 🔹 darkreading: Chinese Actor Weaponizes Deepseek AI Agent to Attack Security Firm https://www.darkreading.com/cyberattacks-data-breaches/chinese-actor-deepseek-ai-agent-attack-security-firm 🔹 SecurityWeek: Black Hat USA 2026 – Summary of Vendor Announcements (Part 1) https://www.securityweek.com/black-hat-usa-2026-summary-of-vendor-announcements-part-1/ 🔹 The Hacker News: INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws https://thehackernews.com/2026/08/inc-ransomware-emerges-as-dominant.html 🔹 The Hacker News: Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts https://thehackernews.com/2026/08/google-password-manager-attacks-could.html 🔹 The Record from Recorded Future News: Hackers steal 31,000 records identifying people behind Liechtenstein companies, foundations https://therecord.media/hackers-steal-records-liechtenstein-companies-foundations #InfoSec #SecurityNews

🦠 Malwarebytes A week in security (August 31 – September 6) Last week on Malwarebytes Labs: Stay safe! 🔗 https://www.malwarebytes.com/blog/news/2026/09/a-week-in-security-august-31-september-6

🔹 darkreading Minnesota Water Utility Attacks Expose Sector's Cyber-Risks A likely Iran-backed actor targeted more than 30 community water systems in Minnesota in a sobering reminder of rising threats to US critical infrastructure. 🔗 https://www.darkreading.com/ics-ot-security/minnesota-water-utility-attacks-expose-sector-cyber-risks

🔒 Security News Digest - 2026-07-27 📊 8 updates from 6 sources: 🔹 The Record from Recorded Future News: UK court rejects Bahrain immunity claim in spyware case https://therecord.media/uk-court-rejects-bahrain-immunity-claim-spyware-case 🔹 The Hacker News: NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework https://thehackernews.com/2026/07/nvidia-forms-37-member-open-secure-ai.html 🔹 Security News | TechCrunch: Microsoft launches its first cybersecurity model, plus a new agentic cybersecurity system https://techcrunch.com/2026/07/27/microsoft-launches-its-first-cyber-model-and-a-new-agentic-cybersecurity-system/ 🦠 Malwarebytes: Aftercall ads are driving Android users crazy https://www.malwarebytes.com/blog/news/2026/07/aftercall-ads-are-driving-android-users-crazy 🔹 Security News | TechCrunch: PSA: Your Claude shared chats and Artifacts may have ended up on Google https://techcrunch.com/2026/07/27/psa-your-claude-shared-chats-and-artifacts-may-have-ended-up-on-google/ 🔹 darkreading: FBI: Breaking Affiliate Trust Sped Along LockBit's Takedown https://www.darkreading.com/cybersecurity-operations/fbi-breaking-affiliate-trust-lockbit-takedown 🔹 iTnews - Security: ASD to critical infrastructure ops: be ready to isolate systems for three months https://www.itnews.com.au/news/asd-to-critical-infrastructure-ops-be-ready-to-isolate-systems-for-three-months-627708?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed 🔹 The Record from Recorded Future News: Outdated VPNs should be purged from federal agencies, senator says https://therecord.media/federal-purge-outdated-vpns-wyden-letter #InfoSec #SecurityNews

🔒 Security News Digest - 2026-08-03 📊 10 updates from 4 sources: 🔹 The Hacker News: Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code https://thehackernews.com/2026/08/hugging-face-diffusers-flaws-could-let.html 🔹 The Hacker News: N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html 🦠 Malwarebytes: A week in security (July 27 – August 2) https://www.malwarebytes.com/blog/news/2026/08/a-week-in-security-july-27-august-2 🔹 The Hacker News: Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable https://thehackernews.com/2026/08/thermo-fisher-patches-flaw-that-could.html 🔹 SecurityWeek: US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States https://www.securityweek.com/us-water-cyberattacks-extend-beyond-minnesota-to-at-least-6-other-states/ 🔹 The Hacker News: PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web https://thehackernews.com/2026/08/pnld-breach-exposes-uk-police-and.html 🔹 SecurityWeek: Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking https://www.securityweek.com/russian-state-apt-linked-to-recent-public-wi-fi-gateway-hacking/ 🔹 Unit 42: Pass the Passkey: A Novel Attack Surface in Passwordless Authentication https://unit42.paloaltonetworks.com/passwordless-authentication-security-risks/ 🔹 SecurityWeek: Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks https://www.securityweek.com/recent-sonicwall-vulnerabilities-exploited-in-ransomware-attacks/ 🔹 The Hacker News: Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS https://thehackernews.com/2026/08/chinese-threat-actor-uses-leaked.html #InfoSec #SecurityNews

🔹 SecurityWeek For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startup Decades after it appeared in “The Terminator,” Skynet looks more like a forecast of the cyber incident in which a rogue AI system hacked into another AI company on its own. The post For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startup appeared first on SecurityWeek. 🔗 https://www.securityweek.com/for-some-so-called-skynet-day-came-too-close-to-sci-fi-after-a-rogue-agent-hacked-into-a-startup/

🔹 darkreading Attackers Exploit N-able Patch Bypass Flaw on RMM Servers Over the weekend, the vendor discovered another vector of authentication bypass CVE-2026-18577 that gives attackers administrator access. 🔗 https://www.darkreading.com/vulnerabilities-threats/attackers-exploit-n-able-patch-bypass-flaw

🔹 darkreading AI Agent Drives Espionage Attack on Thai Ministry of Finance Attackers used Hermes, an autonomous open source tool, in unrestricted "YOLO mode" to conduct espionage against Thailand's Ministry of Finance. 🔗 https://www.darkreading.com/cyberattacks-data-breaches/ai-agent-espionage-attack-thai-ministry-finance

🔹 iTnews - Security Apple overhauls security with iOS and macOS 27 New operating system versions arrive with large chunk of patches and changes. 🔗 https://www.itnews.com.au/news/apple-overhauls-security-with-ios-and-macos-27-628916?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed

🦠 Malwarebytes A week in security (August 3 – August 9) A list of topics we covered in the week of August 3 to August 9 of 2026 🔗 https://www.malwarebytes.com/blog/news/2026/08/a-week-in-security-august-3-august-9