🐛 COMMON VULNERABILITIES AND EXPOSURES 5[−]
19 Aug KEVCISA Alerts on Active Exploitation of Trend Micro Apex One VulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Trend Micro Apex One vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, warning of active exploitation targeting the enterprise security platform. The vulnerability, tracked as CVE-2…GBHACKERS.COM
19 AugPipeMagic Malware Imitates ChatGPT App to Exploit Windows Vulnerability and Deploy RansomwareThe PipeMagic malware, which is credited to the financially motivated threat actor Storm-2460, is a remarkable illustration of how cyber dangers are always changing. It poses as the genuine open-source ChatGPT Desktop Application from GitHub. This sophisticated modular backdoor f…GBHACKERS.COM
19 AugPublic Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code ExecutionA new exploit combining two critical, now-patched security flaws in SAP NetWeaver has emerged in the wild, putting organizations at risk of system compromise and data theft. The exploit in question chains together CVE-2025-31324 and CVE-2025-42999 to bypass authentication and ach…THEHACKERNEWS.COM
19 Aug KEVCyberangriff auf Colt: Support-Systeme nach Lösegelddrohung offlineDer TK-Konzern Colt kämpft seit einer Woche mit den Folgen einer Ransomware-Attacke. A9 STUDIO – shutterstock.com Colt Technology Services, ein britischer Telekommunikationskonzern, der 900 Rechenzentren in Europa, Asien und Nordamerika miteinander verbindet, wurde am 12. August …CSOONLINE.COM
19 AugSurprise departure of Oracle security chief as company shifts focus to AIOracle’s veteran chief security officer Mary Ann Davidson is leaving the company unexpectedly, ending a career in senior management spanning almost four decades. A prominent figure at the company since joining in 1988 from the US Navy, Davidson was among a select group of survivi…CSOONLINE.COM
⚠️ VULNERABILITY DISCLOSURE 34[−]
19 AugWie CISOs von der Blockchain profitierenDie Blockchain macht Trust verifizierbar. everything possible | shutterstock.com Sicherheitsvorfälle gehen nicht nur auf eine Kompromittierung der internen Systeme zurück. Sie hängen regelmäßig auch damit zusammen, dass: Privileged-Access-Protokolle fehlen, SaaS-Audit-Trails nich…CSOONLINE.COM
19 AugHackers Exploit Cisco Secure Links to Evade Scanners and Bypass FiltersCybercriminals have discovered a sophisticated new attack vector that weaponizes Cisco’s security infrastructure against users, according to recent research from Raven AI. The company’s context-aware detection systems uncovered a credential phishing campaign that expl…GBHACKERS.COM
19 AugEspionage Surge: China-Linked Hackers Target African Government IT Infrastructure Using SharePoint and Stealthy Toolssubmitted by Hotznplotzn to cybersecurity 1 points | 0 comments https://cybersrcc.com/2025/08/18/apt41-espionage-surge-china-linked-hackers-target-african-government-it-infrastructure-using-sharepoint-and-stealthy-tools cross-posted from: lemmy.sdf.org/post/40704783 Archived In a…INFOSEC.PUB
19 AugEspionage Surge: China-Linked Hackers Target African Government IT Infrastructure Using SharePoint and Stealthy Toolssubmitted by Hotznplotzn to cybersecurity 2 points | 0 comments https://cybersrcc.com/2025/08/18/apt41-espionage-surge-china-linked-hackers-target-african-government-it-infrastructure-using-sharepoint-and-stealthy-tools cross-posted from: lemmy.sdf.org/post/40704783 Archived In a…SH.ITJUST.WORKS
19 Aug7 signs it’s time for a managed security service providerA managed security service provider (MSSP) offers clients a comprehensive array of security services. Operating as a third party, an MSSP can reduce an IT team’s workload and free up crucial time to support and expand other essential organizational operations. Trevor Young, chief…CSOONLINE.COM
19 AugMicrosoft Entra Private Access brings conditional access to on-prem Active DirectoryAttackers are increasingly targeting cloud resources, but that doesn’t mean they no longer see our on-premises Active Directory installations as excellent targets for gaining access to our networks. Government entities, for example, often rely on lots of on-premises servers as we…CSOONLINE.COM
19 AugNew Sni5Gect Attack Targets 5G to Steal Messages and Inject PayloadsCybersecurity researchers at Singapore University of Technology and Design have unveiled a sophisticated new attack framework called SNI5GECT that can intercept 5G communications and inject malicious payloads without requiring a rogue base station. The research demonstr…GBHACKERS.COM
19 AugMassive Allianz Life data breach impacts 1.1 million peopleHackers have stolen the personal information of 1.1 million individuals in a Salesforce data theft attack, which impacted U.S. insurance giant Allianz Life in July. [...]BLEEPINGCOMPUTER.COM
19 AugPyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain AttacksThe maintainers of the Python Package Index (PyPI) repository have announced that the package manager now checks for expired domains to prevent supply chain attacks. "These changes improve PyPI's overall account security posture, making it harder for attackers to exploit expired …THEHACKERNEWS.COM
19 AugIntel Outside: Hacking every Intel employee and various internal websitessubmitted by Pro to cybersecurity 1 points | 0 comments https://eaton-works.com/2025/08/18/intel-outside-hack/ cross-posted from: programming.dev/post/35909752 Comments - Hackernews ; - Reddit . It was possible to bypass the corporate login on an internal business card ordering w…SH.ITJUST.WORKS
19 AugNew Exploit Poses Threat to SAP NetWeaver InstancesA new public exploit chains two critical flaws in SAP NetWeaver, exposing unpatched instances to code execution attacks. The post New Exploit Poses Threat to SAP NetWeaver Instances appeared first on SecurityWeek .SECURITYWEEK.COM
19 AugEMERGING TRENDS Q&A: Pentesting goes continuous as Plainsea joins wave reshaping securityPenetration testing has long served as a cornerstone of cybersecurity—a red-team exercise, often once or twice a year, designed to surface exploitable weaknesses. But in today’s dynamic threat landscape, that model is showing its age. Related: Pentesting in the AI … (more…)…LASTWATCHDOG.COM
19 AugZero-Day Exploit in WinRAR FileA zero-day vulnerability in WinRAR is being exploited by at least two Russian criminal groups: The vulnerability seemed to have super Windows powers. It abused alternate data streams , a Windows feature that allows different ways of representing the same file path. The exploit ab…SCHNEIER.COM
19 AugSingapore issues critical alert on Dire Wolf ransomware targeting global tech and manufacturing firmsThe Cyber Security Agency of Singapore (CSA) issued a critical alert on Monday, cautioning organizations about ransomware group Dire Wolf, which has launched targeted attacks across multiple manufacturing and technology sectors. First identified in May this year, the ransomware h…CSOONLINE.COM
19 AugU.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties PushbackThe U.K. government has apparently abandoned its plans to force Apple to weaken encryption protections and include a backdoor that would have enabled access to the protected data of U.S. citizens. U.S. Director of National Intelligence (DNI) Tulsi Gabbard, in a statement posted o…THEHACKERNEWS.COM
19 AugShinyHunters strike again: Workday breach tied to Salesforce-targeted social engineering waveThe cyberattack on enterprise software giant Workday’s CRM platform is likely part of a broader Salesforce-targeted social engineering campaign, according to experts. While the company did not name the affected platform in its public statement on Friday, researchers linked it to …CSOONLINE.COM
19 AugProtecting your car against the PerfektBlue vulnerability in Bluetooth | Kaspersky official blogWhat the PerfektBlue vulnerability is, how dangerous it is, and how to protect your car from Bluetooth attacksKASPERSKY.COM
19 Aug[FREE RESOURCE KIT] Cybersecurity Awareness Month Kit 2025 Now AvailableIn the never-ending battle against cyber villains, your users are on the front lines.KNOWBE4.COM
19 AugSAP 0-Day Exploit Reportedly Leaked by ShinyHunters HackersA sophisticated exploit targeting critical SAP vulnerabilities has been publicly released by the notorious hacking group ShinyHunters, significantly escalating the threat landscape for enterprise SAP environments. The exploit, which chains together multiple zero-day vulnerabiliti…GBHACKERS.COM
19 AugAustralia’s TPG Telecom Investigating iiNet HackTPG Telecom has disclosed a cybersecurity incident after discovering unauthorized access to an iiNet order management system. The post Australia’s TPG Telecom Investigating iiNet Hack appeared first on SecurityWeek .SECURITYWEEK.COM
19 AugPharma firm Inotiv says ransomware attack impacted operationsAmerican pharmaceutical company Inotiv has disclosed that some of its systems and data have been encrypted in a ransomware attack, impacting the company's business operations. [...]BLEEPINGCOMPUTER.COM
19 AugCyberheistNews Vol 15 #33 [Beware] When Your AI Helper Becomes a Hacker's Dream ToolKNOWBE4.COM
19 AugNew security features beef up Google Cloud PlatformNew security capabilities are being added to Google Cloud Platform (GCP) to help developers detect and protect artificial intelligence agents. The features were announced today at the annual Google Cloud Security Summit . “We’re excited about the new capabilities that we’re bring…CSOONLINE.COM
19 AugStop Dumping Spreadsheets — Start Fixing SecurityIn this quick clip, cybersecurity expert Kalyani Pawar calls out the outdated “dump & run” approach — dropping a spreadsheet with 400+ CVEs on a dev team and expecting results. She explains why this method fails and how probability-based triage is changing the game. Perfect for s…YOUTUBE.COM
19 AugCISA Releases Four Industrial Control Systems AdvisoriesCISA released four Industrial Control Systems (ICS) advisories on August 19, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-231-01 Siemens Desigo CC Product Family and SENTRON Powermanager IC…CISA.GOV
19 AugNew ClickFix Attack Deploys Fake BBC News Page and Fake Cloudflare Verification to Deceive UsersCybersecurity researchers have uncovered a novel ClickFix attack variant that impersonates trusted BBC news content while leveraging counterfeit Cloudflare Turnstile verification interfaces to coerce users into executing malicious PowerShell commands. This campaign, detailed in r…GBHACKERS.COM
19 AugElastic rejects claims of a zero-day RCE flaw in Defend EDREnterprise search and security company Elastic is rejecting reports of a zero-day vulnerability impacting its Defend endpoint detection and response (EDR) product. [...]BLEEPINGCOMPUTER.COM
19 AugHow We Exploited CodeRabbit: From a Simple PR to RCE and Write Access on 1M Repositoriessubmitted by cm0002 to cybersecurity 3 points | 0 comments https://research.kudelskisecurity.com/2025/08/19/how-we-exploited-coderabbit-from-a-simple-pr-to-rce-and-write-access-on-1m-repositories?=0INFOSEC.PUB
19 AugMobile Phishers Target Brokerage Customers in ‘Ramp and Dump’ Cashout SchemeCybercriminal groups specializing in advanced mobile phishing kits have evolved their operations beyond stealing payment card data for mobile wallet enrollment, now pivoting to exploit brokerage accounts in sophisticated ‘ramp and dump’ schemes. This shift, as detaile…GBHACKERS.COM
19 AugApache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux SystemsThreat actors are exploiting a nearly two-year-old security flaw in Apache ActiveMQ to gain persistent access to cloud Linux systems and deploy malware called DripDropper. But in an unusual twist, the unknown attackers have been observed patching the exploited vulnerability after…THEHACKERNEWS.COM
19 AugOkta open-sources catalog of Auth0 rules for threat detectionOkta has open-sourced ready-made Sigma-based queries for Auth0 customers to detect account takeovers, misconfigurations, and suspicious behavior in event logs. [...]BLEEPINGCOMPUTER.COM
19 AugIncreased Elasticsearch Recognizance Scans, (Tue, Aug 19th)I noticed an increase in scans that appear to try to identify Elasticsearch instances. Elasticsearch is not a new target. Its ability to easily store and manage JSON data, combined with a simple HTTP API, makes it a convenient tool to store data that is directly accessible from t…ISC.SANS.EDU
19 Aug47,000 Individuals Affected by Data Breach, Reveals NY Business CouncilThe Business Council of New York State, Inc., a prominent commercial organization based in Albany, has disclosed a data breach impacting approximately 47,329 individuals. The breach, characterized as an external system intrusion commonly associated with sophisticated hacking tech…GBHACKERS.COM
19 AugOregon Man Charged in ‘Rapper Bot’ DDoS ServiceA 22-year-old Oregon man has been arrested on suspicion of operating "Rapper Bot," a massive botnet used to power a service for launching distributed denial-of-service (DDoS) attacks against targets -- including a March 2025 DDoS that knocked Twitter/X offline. The Justice Depart…KREBSONSECURITY.COM
📋 SECURITY BULLETINS 1[−]
19 AugMicrosoft: August security updates break Windows recovery, resetMicrosoft has confirmed that the August 2025 Windows security updates are breaking reset and recovery operations on systems running Windows 10 and older versions of Windows 11. [...]BLEEPINGCOMPUTER.COM
📢 SECURITY ADVISORIES 3[−]
19 AugCryptoagility: the strategic pillar for digital resilienceIn an increasingly dynamic digital environment exposed to emerging risks, security cannot rely solely on the robustness of current cryptographic algorithms. The real strength of an organization lies in its ability to adapt quickly when these algorithms, keys or certificates becom…CSOONLINE.COM
🔥 INCIDENT REPORTING 14[−]
19 AugIntel Websites Compromised, Allowing Hackers Access to Employee and Confidential DataA series of critical security flaws in Intel’s internal web infrastructure exposed the personal details of more than 270,000 employees and potentially provided attackers with access to sensitive corporate and supplier information. The discoveries highlight severe weaknesses acros…GBHACKERS.COM
19 AugHijacked Satellites and Orbiting Space Weapons: In the 21st Century, Space Is the New BattlefieldFrom hacked satellites to nuclear threats in orbit, the battle for dominance beyond Earth is redefining modern warfare and national security. The post Hijacked Satellites and Orbiting Space Weapons: In the 21st Century, Space Is the New Battlefield appeared first on SecurityWeek …SECURITYWEEK.COM
19 AugCyber attack exposes details of more than 200,000 iinet customerssubmitted by vk6flab to cybersecurity 1 points | 0 comments https://www.abc.net.au/news/2025-08-19/iinet-reveals-details-accessed-by-cyber-criminal/105671974 In short: Australian internet provider iiNet has compromised the email addresses or phone numbers of hundreds of thousands…INFOSEC.PUB
19 AugLockbit Linux ESXi Ransomware Variant Reveals Evasion Techniques and File Encryption ProcessA recent reverse engineering analysis of a Lockbit ransomware variant targeting Linux-based ESXi servers has uncovered several sophisticated evasion techniques and operational details. The malware, first documented in 2022, employs the ptrace system call to detect debugging envir…GBHACKERS.COM
19 AugEin Viertel der CISOs wird nach Ransomware-Angriff entlassensrcset="https://b2b-contenthub.com/wp-content/uploads/2025/08/shutterstock_2588510909.jpg?quality=50&strip=all 7330w, https://b2b-contenthub.com/wp-content/uploads/2025/08/shutterstock_2588510909.jpg?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenthub.c…CSOONLINE.COM
19 AugGambling Tech Firm Bragg Discloses CyberattackBragg Gaming Group says hackers accessed its internal systems over the weekend, but did not affect its operations. The post Gambling Tech Firm Bragg Discloses Cyberattack appeared first on SecurityWeek .SECURITYWEEK.COM
19 AugNY Business Council discloses data breach affecting 47,000 peopleThe Business Council of New York State (BCNYS) has revealed that attackers who breached its network in February stole the personal, financial, and health information of over 47,000 individuals. [...]BLEEPINGCOMPUTER.COM
19 AugSurge in Scans From Hacked Cisco, Linksys, and Araknis RoutersCybersecurity researchers have identified a significant increase in malicious scanning activities originating from compromised consumer and enterprise networking equipment, with particular focus on Cisco, Linksys, and Araknis router models. The Shadowserver Foundation, a prominen…GBHACKERS.COM
19 AugThe State of Ransomware in Retail 2025361 IT and cybersecurity leaders reveal the ransomware realities for retail businesses today.SOPHOS.COM
19 AugNo Malware. No Admin Rights. HUGE Cisco Breach.A hacker didn’t need malware or admin access to hit Cisco — just a convincing voice and a process gap. In this jaw-dropping case, a voice phishing call to a company rep opened the door to a third-party CRM, exposing names, emails, phone numbers, and account metadata of Cisco.com …YOUTUBE.COM
19 AugNorth Korean Threat Actor Delivers Ransomware Via Phishing EmailsThe North Korean threat actor ScarCruft has incorporated ransomware into its arsenal, according to researchers at South Korean security firm S2W.KNOWBE4.COM
19 AugSpeed cameras knocked out after cyber attackA hack of the Netherlands' Public Prosecution Service has had an unusual side effect - causing some speed cameras to be no longer capturing evidence of motorists breaking the rules of the road. Read more in my article on the Hot for Security blog.BITDEFENDER.COM
19 AugHow I Hacked McDonald's (Their Security Contact Was Harder to Find Than Their Secret Sauce Recipe)submitted by Pro to cybersecurity 3 points | 0 comments https://bobdahacker.com/blog/mcdonalds-security-vulnerabilities cross-posted from: programming.dev/post/35974793SH.ITJUST.WORKS
19 AugNew Research Exposes DPRK IT Workers’ Email Addresses and Recruitment TrendsNew cybersecurity research has revealed important details about how DPRK-affiliated IT professionals, who fall under Microsoft’s “Jasper Sleet” threat actor group, operate. They take advantage of remote work opportunities in the Web3, blockchain, and cryptocurre…GBHACKERS.COM
🕵️ THREAT INTELLIGENCE 20[−]
19 AugNoodlophile Malware Campaign Expands Global Reach with Copyright Phishing LuresThe threat actors behind the Noodlophile malware are leveraging spear-phishing emails and updated delivery mechanisms to deploy the information stealer in attacks aimed at enterprises located in the U.S., Europe, Baltic countries, and the Asia-Pacific (APAC) region. "The Noodloph…THEHACKERNEWS.COM
19 AugISC Stormcast For Tuesday, August 19th, 2025 https://isc.sans.edu/podcastdetail/9576, (Tue, Aug 19th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
19 AugMalicious npm Packages Target Crypto Developers to Steal Login CredentialsA sophisticated threat campaign dubbed “Solana-Scan” has emerged, deploying malicious npm packages aimed at infiltrating the Solana cryptocurrency ecosystem. Identified by the Safety research team through advanced malicious package detection technology, this operation…GBHACKERS.COM
19 AugNew Research Links VPN Apps, Highlights Security DeficienciesCitizen Lab has identified links between multiple VPN providers, and multiple security weaknesses in their mobile applications. The post New Research Links VPN Apps, Highlights Security Deficiencies appeared first on SecurityWeek .SECURITYWEEK.COM
19 AugManaging the Minimization of a Container Attack Surface - Neil Carpenter - ASW #344A smaller attack surface should lead to a smaller list of CVEs to track, which in turn should lead to a smaller set of vulns that you should care about. But in practice, keeping something like a container image small has a lot of challenges in terms of what should be considered m…YOUTUBE.COM
19 Aug1.1 Million Unique Records Identified in Allianz Life Data LeakHave I Been Pwned has analyzed the information made public by the hackers who recently targeted Allianz Life. The post 1.1 Million Unique Records Identified in Allianz Life Data Leak appeared first on SecurityWeek .SECURITYWEEK.COM
19 AugPyPI Moves to Stop Domain Resurrection Attacks with Expired Domain BlocksThe Python Package Index (PyPI) has implemented new security measures to protect against domain resurrection attacks, a sophisticated supply-chain threat where attackers purchase expired domains to hijack user accounts through password reset mechanisms. Since early June 2025, the…GBHACKERS.COM
19 AugMicrosoft Defender AI Can Detect Plaintext Credentials in Active DirectoryMicrosoft has unveiled a new AI-powered security capability that addresses one of cybersecurity’s most persistent vulnerabilities: plaintext credentials stored in Active Directory systems. The enhanced Microsoft Defender feature uses sophisticated artificial intelligence to…GBHACKERS.COM
19 AugNorth Korean Kimsuky Hackers Use GitHub to Target Foreign Embassies with XenoRAT MalwareThe Trellix Advanced Research Center exposed a DPRK-linked espionage operation attributed to the Kimsuky group (APT43), targeting diplomatic missions in South Korea. Between March and July, at least 19 spear-phishing emails impersonated trusted diplomatic contacts, delivering mal…GBHACKERS.COM
19 AugHacktivist Sentenced to 20 Months of Prison in UKAl-Tahery Al-Mashriky of the Yemen Cyber Army has been accused of hacking into and defacing many websites as part of hacktivist campaigns. The post Hacktivist Sentenced to 20 Months of Prison in UK appeared first on SecurityWeek .SECURITYWEEK.COM
19 AugNew Android Attack Targets Indian Users with Free Electricity Subsidy to Install MalwareA newly identified Android phishing campaign is aggressively targeting Indian users by masquerading as the legitimate PM Surya Ghar: Muft Bijli Yojana, a government initiative approved in February 2024 that offers subsidies for solar rooftop installations, covering up to 60% of c…GBHACKERS.COM
19 AugValue Exchange in CybersecurityWorking with our partners, we're on a shared mission to deliver better security outcomes. Consider the strength of a vendor's partnerships. The post Value Exchange in Cybersecurity appeared first on Palo Alto Networks Blog .PALOALTONETWORKS.COM
19 AugGabbard Says UK Scraps Demand for Apple to Give Backdoor Access to DataBritain abandoned its demand that Apple provide backdoor access to any encrypted user data stored in the cloud. The post Gabbard Says UK Scraps Demand for Apple to Give Backdoor Access to Data appeared first on SecurityWeek .SECURITYWEEK.COM
19 AugMicrosoft Dissects PipeMagic Modular BackdoorPipeMagic, which poses as a ChatGPT application, is a modular malware framework that provides persistent access and flexibility. The post Microsoft Dissects PipeMagic Modular Backdoor appeared first on SecurityWeek .SECURITYWEEK.COM
19 AugIntel Outside: Hacking every Intel employee and various internal websitessubmitted by cm0002 to cybersecurity 2 points | 0 comments https://eaton-works.com/2025/08/18/intel-outside-hack/INFOSEC.PUB
19 AugWhy ‘Shift Left’ Might Be Hurting SecurityWhen a young software developer took the stage at a tech conference and declared “Shift Left does not work,” the room went silent. This short captures the bold statement that challenges one of cybersecurity’s most popular strategies. From developer pressures to the need for true …YOUTUBE.COM
19 AugWeaponized Copyright Documents Used by Threat Actors to Target Key Employees with Noodlophile StealerThe Noodlophile Stealer malware, initially uncovered in campaigns leveraging fake AI video generation platforms, has evolved into a targeted spear-phishing operation that weaponizes copyright infringement notices to infiltrate enterprises with substantial Facebook presences. This…GBHACKERS.COM
19 AugGrapheneOS: Another contributor attacked & banned by Daniel Micaysubmitted by maltfield to cybersecurity 1 points | 0 comments https://tech.michaelaltfield.net/2025/08/19/grapheneos-daniel-micay-banned/ Why was I banned from GrapheneOS ? That’s a good question. Why I was banned from GrapheneOS by Daniel Micay)SH.ITJUST.WORKS
19 AugNew Research Reveals Security Vulnerabilities Linked to Popular VPN AppsResearchers have uncovered deceptive practices among major VPN providers, linking seemingly independent entities into three distinct “families” with combined Google Play Store downloads exceeding 700 million. By analyzing business filings, APK artifacts, and network c…GBHACKERS.COM
19 AugThe cult of Doug, Crime, Pipemagic, Clickfix, Cats in Space, Josh Marpet, and more... - SWN #504The cult of Doug, Crime, Pipemagic, Clickfix, Cats in Space, Uncle Silvio, Josh Marpet, and more on the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-504YOUTUBE.COM
🌐 CYBER THREAT LANDSCAPE 3[−]
19 AugUS spy chief says UK has dropped its Apple backdoor demandTulsi Gabbard said that President Donald Trump and Vice President JD Vance also participated in the negotiations with the U.K. government over its once-secret demand to Apple.TECHCRUNCH.COM
19 AugThe AI Fix #64: AI can be vaccinated against evil, and the “Rumble in the Silicon Jungle”In episode 64 of The AI Fix, AI discovers new physics, a robot crab looks for love on the beaches of Portugal, the “Godfather of AI” thinks our only hope is to build motherly AI, a robot folds some laundry, the UK government has a terrible idea, and our hosts discover a long lost…GRAHAMCLULEY.COM
19 AugNew GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT CodeFinancial institutions like trading and brokerage firms are the target of a new campaign that delivers a previously unreported remote access trojan called GodRAT. The malicious activity involves the "distribution of malicious .SCR (screen saver) files disguised as financial docum…THEHACKERNEWS.COM
📡 INFOSEC NEWS 7[−]
19 AugWhy Your Security Culture is Critical to Mitigating Cyber RiskAfter two decades of developing increasingly mature security architectures, organizations are running up against a hard truth: tools and technologies alone are not enough to mitigate cyber risk. As tech stacks have grown more sophisticated and capable, attackers have shifted thei…THEHACKERNEWS.COM
19 AugHow KnowBe4 Defend Seamlessly Integrates with Microsoft Defender for Office 365 Quarantine—And Why SOC Teams Should CareModern Security Operations Centers (SOCs) face a persistent challenge: managing threats across multiple security tools while maintaining operational efficiency.KNOWBE4.COM
19 AugOpenAI releases $4 ChatGPT plan, but it's not available in the US for nowOpenAI has finally announced the GPT Go subscription, which costs just $4 in the US or INR 399 in India. [...]BLEEPINGCOMPUTER.COM
19 AugYour next customer is on the TechCrunch Disrupt 2025 expo floor — will they find you or your competitor?TechCrunch Disrupt 2025 lands in San Francisco from October 27–29, and the Expo Hall is already packed with early adopters, startup scouts, and enterprise buyers looking to discover what’s next. If you’re not there to show off your product, your competitors will be — and they’ll …TECHCRUNCH.COM
19 AugMicrosoft shares workaround for Teams "couldn't connect" errorMicrosoft is resolving a known issue that causes "couldn't connect" errors when launching the Microsoft Teams desktop and web applications. [...]BLEEPINGCOMPUTER.COM
19 AugPyPI now blocks domain resurrection attacks used for hijacking accountsThe Python Package Index (PyPI) has introduced new protections against domain resurrection attacks that enable hijacking accounts through password resets. [...]BLEEPINGCOMPUTER.COM
19 AugThe need for speed: Why organizations are turning to rapid, trustworthy MDRHow top-tier managed detection and response (MDR) can help organizations stay ahead of increasingly agile and determined adversariesWELIVESECURITY.COM