🐛 COMMON VULNERABILITIES AND EXPOSURES 2[−]
1 AugAdobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User InteractionAdobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-48449, carries a severity score o…THEHACKERNEWS.COM
1 AugAdobe fixed a maximum-severity vulnerability flaw in Campaign ClassicAdobe fixed a maximum severity vulnerability in Campaign Classic that could let attackers run code remotely without user interaction. Adobe has addressed a critical vulnerability, tracked as CVE-2026-48449 (CVSS score of 10.0), in Adobe Campaign Classic, the company’s enter…SECURITYAFFAIRS.COM
⚠️ VULNERABILITY DISCLOSURE 12[−]
1 AugAMGEN reports breach to SECFrom Amgen’s filing on July 29 to the Securities and Exchange Commission: Item 1.05 Material Cybersecurity Incidents. In July 2026, Amgen Inc. (the “Company”) identified unauthorized activity involving data stored in cloud environments hosted by third-party clou…DATABREACHES.NET
1 AugThe driver's seat to ransomware.This week, we are joined by Marcus Hutchins, Principal Threat Researcher at Expel, sharing their work on "Not very gentlemanly: Analyzing a zero-day exploit used by The Gentlemen ransomware to disable targets’ EDRs." Researchers examine how the Gentlemen ransomware group used…THECYBERWIRE.COM
1 AugSystem Announcement: MaintenanceDataBreaches.net will be undergoing some maintenance and upgrades this weekend and may be unavailable at times. We’ll be back, though! Thank you for your patience. SourceDATABREACHES.NET
1 AugRuby on Rails Patches Critical VulnerabilityThe flaw can be exploited by unauthenticated attackers to read arbitrary files and potentially achieve remote code execution (RCE). The post Ruby on Rails Patches Critical Vulnerability appeared first on SecurityWeek .SECURITYWEEK.COM
1 AugRails patches critical Active Storage flaw with RCE potentialA critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). [...]BLEEPINGCOMPUTER.COM
1 AugMon General Hospital notifies patients of phishing attack and breachWDTV reports: Monongalia County General Hospital Company, known as Mon General, announced it was recently the victim of a phishing attack that may have compromised the personal and medical information of some patients. Hospital officials say the incident was discovered on May 6, …DATABREACHES.NET
1 AugRussian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 TokensMicrosoft says Russian hackers hijacked hotel Wi-Fi portals to spread malware and steal Microsoft 365 tokens from travelers. Microsoft Threat Intelligence disclosed CaptiveCrunch, a campaign it attributes to Storm-2945, an operational sub-cluster of Midnight Blizzard, the Russian…SECURITYAFFAIRS.COM
1 AugSixth Circuit to Rehear Case on FCC Data Breach Rules CaseJake Neenan reports: A full panel of federal judges will rehear a case that upheld expanded telecom data breach rules. The Federal Communications Commission, now under Republican control, has indicated it’s likely to reverse the rules anyway. But industry groups and GOP lawmakers…DATABREACHES.NET
1 AugThe double extortion of a Russian ransomware threatens the medical records that Diater has kept for 10 years.Miguel Gomez reports: The biopharmaceutical company Diater, founded in Madrid in 1999, has appeared on the list of victims that the ransomware group DeadLock is disseminating on the dark web. The intrusion affects a company that manages particularly sensitive information of patie…DATABREACHES.NET
1 AugCareCloud Data Breach Impacts Over 350,000Ionut Arghire reports: Healthcare information technology company CareCloud is notifying at least 350,000 people that their information was stolen in a data breach. The incident involved an electronic health record environment within the CareCloud Health division, which was disrup…DATABREACHES.NET
1 AugSuspected cyberattack disrupts Oceanside, California, school district systemsDysruptionHub reports: A suspected cyberattack disrupted work email, internet access, Google Drive and other applications at Oceanside Unified School District in California as officials investigated and worked to restore service. The district confirmed a computer network disrupti…DATABREACHES.NET
1 AugAU: GO2 Health medical clinic in Brisbane waited almost three months to alert patients it was hackedWill Murray reports: Another medical clinic has revealed it has been targeted by hackers, less than a week after Partnered Health announced a major data breach. GO2 Health in Everton Park, in Brisbane’s north, said the clinic’s main email mailbox was accessed in April…DATABREACHES.NET
📢 SECURITY ADVISORIES 3[−]
1 AugSuspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurkA Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025. Thes…THEHACKERNEWS.COM
1 AugClaude escaped the testing sandbox three times.Minnesota cyberattack scale is more extensive than anticipated. OpenAI's agent breached more than Hugging Face. Senator Wyden looks to eliminate legacy VPNs from federal networks. Thailand's Ministry of Finance targeted by autonomous AI agent.THECYBERWIRE.COM
1 AugColdcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 MinutesAn attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2…THEHACKERNEWS.COM
🔥 INCIDENT REPORTING 6[−]
1 AugHealthcare Cybersecurity in 2026: Healthcare CISO Matt Burke on AI, MFA, SOCs & Incident ReadinessOn Cybersecurity Today on the Weekend, host David speaks with Matt Burke, CISO of Bespoke Concierge MD, a telemedicine provider with doctors licensed in all 50 states, about defending patient data amid rising healthcare threats in 2026. Burke explains why healthcare is heavily ta…CYBERSECURITYTODAY.LIBSYN.COM
1 AugThe hidden risks in space supply chains.As the space ecosystem continues to expand, the sector has become increasingly filled with new suppliers, manufacturers, and operators. However, while this development has led to the introduction of new technologies, it has also greatly expanded space's cyberattack surface. In th…THECYBERWIRE.COM
1 AugSplitVPN - 865,336 breached accountsIn July 2026, the Russian VPN service SplitVPN (previously known as NotVPN) suffered a data breach . The incident exposed millions of customer records, including 865k unique email addresses. Other impacted data included IP addresses, the user's country, and partial payment card d…HAVEIBEENPWNED.COM
1 AugHackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer SitesAttackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and repor…THEHACKERNEWS.COM
1 AugNobody Knows if OpenAI’s and Anthropic’s AI Hacking Sprees Are IllegalBoth major AI labs’ models broke containment, escaped onto the internet, and hacked other companies. If a human had done that, the law would likely be against them. But a bot?WIRED.COM
1 Aug7 States’ Water Systems Hit by Cyberattacks Likely Tied to IranPlus: The FBI eyes AI-powered tech to detect future crimes, Russia charges Telegram’s founder, xAI sues to stop a state’s “nudification” ban, and the Democrats learn a lesson about getting scammed.WIRED.COM
🕵️ THREAT INTELLIGENCE 3[−]
1 AugHijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance MalwareA fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report. Researchers track the operation as CaptiveCrunch and attr…THEHACKERNEWS.COM
1 AugBalance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity InvestmentsThe funding round was led by SYN Ventures, with participation from existing investors DataTribe and TEDCO. The post Balance Theory Raises $19 Million to Help Enterprises Manage Cybersecurity Investments appeared first on SecurityWeek .SECURITYWEEK.COM
1 AugThe New Trick Against AI ScrapersAI scrapers are designed to collect content from websites and documents. One emerging defense doesn't try to stop the scraper—instead, it changes what the scraper sees. Technologies like Shield Font can preserve a normal reading experience for people while causing AI systems to e…YOUTUBE.COM
📡 INFOSEC NEWS 1[−]
1 AugPhishing Campaigns Targeting AI Solutions Providers, (Sat, Aug 1st)Most phishing campaigns rely on the fact that the victim is afraid to loose "something": money, access to information, ... Many brands have been impersonated by campaigns but I spotted some phishing emails that focus on AI services like ChatGPT.
ISC.SANS.EDU