🐛 COMMON VULNERABILITIES AND EXPOSURES 4[−]
7 AugHuman oversight is still critical as AI patching tools miss security risksAI-generated vulnerability patches still heavily depend on human review, particularly the ones involving security-sensitive code, according to a research. Researchers from 1Password have disclosed an internal evaluation that found AI-generated fixes frequently overlook broader co…CSOONLINE.COM
7 AugNew WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAPWordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the content management system. Under additional conditions, the bug can be chained into PHP code execution on the server. Tracked as CVE-2026-…THEHACKERNEWS.COM
7 AugVU#987105: The nothings stb TrueType library, up to version 1.26, contains a heap buffer overflow vulnerabilityOverview A heap buffer overflow vulnerability exists in the stb TrueType library created by nothings. Exploitation of this vulnerability can occur when handling malformed font data and may lead to both Denial of Service (DoS) and Information Disclosure. Description The nothings s…KB.CERT.ORG
7 Aug KEVRapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)Overview On July 27, 2026, JetBrains published a security advisory for CVE-2026-63077 , a critical unsafe deserialization vulnerability affecting JetBrains TeamCity . An attacker who can reach a TeamCity server over HTTP or HTTPS can exploit the agent polling protocol without cre…RAPID7.COM
⚠️ VULNERABILITY DISCLOSURE 34[−]
7 AugThe Era of Cheap Bugs, Water utility attacks spread to 12 states, Coldcard wallet losses could hit 130 millionPasskeys Phished at BlackHat, Water Utility Attacks Spread, and $130M ColdCard Wallet Flaw In this August 7, 2026 episode, David Shipley recaps key Black Hat themes, including Microsoft's warning that cheap, automated vulnerability discovery is outpacing patching, alongside resea…CYBERSECURITYTODAY.LIBSYN.COM
7 AugShieldFont fights AI scraping by handing crawlers the wrong wordsIsaque Seneda and Gabriel Abrucio built a web font that draws one set of words on screen and leaves a different set in the page’s source code. A person reading in a browser sees the writing as written. A scraper pulling the HTML gets different words in the same grammar, at …HELPNETSECURITY.COM
7 AugAugust 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?July 2026 Patch Tuesday was record-setting in so many ways. The sheer volume of security patches for almost every product in the Microsoft portfolio was the highest ever and, of course, well over 600 CVEs were identified in the Security Updates Guide. Interestingly, only two CVEs…HELPNETSECURITY.COM
7 AugWhat the first year of EU AI Act transparency enforcement could look likeIn this Help Net Security interview, Edwin Weijdema, Field CTO at Veeam, answers questions on Article 50 of the EU AI Act and what the first year of enforcement might bring. He explains why corrective orders will likely outnumber large fines, when an AI agent working through a ti…HELPNETSECURITY.COM
7 AugCritical Vulnerabilities Patched With Chrome 151 UpdateThe browser refresh eliminates over two dozen memory safety bugs, including critical use-after-free flaws. The post Critical Vulnerabilities Patched With Chrome 151 Update appeared first on SecurityWeek .SECURITYWEEK.COM
7 AugKeepit AI Truth Cloud protects the data behind enterprise AIKeepit announced AI Truth Cloud, transforming backup from a compliance requirement into the strategically valuable data asset an organization can hold. As AI agents take on business-critical decisions, AI Truth Cloud positions Keepit as the sovereign source of truth that enterpri…HELPNETSECURITY.COM
7 AugNew NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT TablesSecurity researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. Presented at Black Hat …THEHACKERNEWS.COM
7 AugMalware Can Abuse Windows Hello for Business Keys for Persistent Entra ID AccessSecurity researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, disclose victim IP addresses and mapped ports, and exhaust NAT table…THEHACKERNEWS.COM
7 AugPython package security in 2026: How supply chain attacks are targeting your AI development environmentOn March 24, 2026, developers building AI applications with LiteLLM — a Python package with 95 million monthly downloads — unknowingly installed malicious code. A threat actor group known as TeamPCP had compromised the PyPI distribution pipeline and pushed malicious versions 1.82…CSOONLINE.COM
7 AugTruck Brake Controller’s Safety Recall Doubled as Hidden Security FixNMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabilities. The post Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix appeared first on SecurityWeek .SECURITYWEEK.COM
7 AugAI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-DayPortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by James Kettle, generated and proved new HTTP desynchronization techniques after exploring 30,000 candidate attack vectors. PortSwigger said a separate human-guided discovery cascade…THEHACKERNEWS.COM
7 AugAgentic AI for Cyber Defenders: What Security Teams Built at Black Hat USA 2026Agentic AI armed attackers first, but it also put real building power in defenders’ hands. Here’s what security practitioners built in two days at Black Hat USA 2026, and how the CyberAgents Exchange keeps that work compounding long after the event. Key takeaways Building defensi…TENABLE.COM
7 AugGrowing Up The Hard WayOpen Source had a great childhood. For two decades it got to be a kid. It ran around barefoot, gave everything away, trusted strangers, and never once thought about who was watching. It ran the kind of lemonade stand that took IOUs from anyone who wandered up — take what you need…THEHACKERNEWS.COM
7 Aug18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape ContainersA use-after-free bug in Linux's SCTP networking code can be turned into full root on a host, and Tencent researchers say they used it to escape a container and reach the machine underneath. The flaw has existed since 2008. The fix already shipped: stable kernels 7.1.6, 6.18.42, 6…THEHACKERNEWS.COM
7 AugIPVanish launches isolated browser to reduce Windows telemetry exposureIPVanish has introduced a remote browser isolation feature designed to prevent Windows telemetry from directly correlating browsing activity with Microsoft’s persistent Global Device Identifier (GDID). The company announced IPVanish Secure Browser, citing the recently discl…CYBERINSIDER.COM
7 Aug200 accounts compromised in Swiss government’s Microsoft SharePoint breachHackers exploited vulnerabilities in Microsoft SharePoint servers belonging to Switzerland’s Federal Office of Information Technology, Systems and Telecommunication (BIT), compromising the login credentials of around 200 accounts. On July 28, BIT’s security specialists noti…HELPNETSECURITY.COM
7 AugSnowflake attacker pleads guilty to hack of 165 companies’ dataA Canadian hacker has admitted being part of a group responsible for several major cyberattacks. Connor Riley Moucka pleaded guilty to being part of a coterie of hackers that hit 165 organizations, resulting in the theft of customer records and the extortion of millions of dollar…CSOONLINE.COM
7 AugLevi Strauss discloses data breach after social engineering attack on employeesLevi Strauss & Co. has disclosed a cybersecurity incident in which an unauthorized third party used social engineering to gain access to three employees’ company-issued computers and steal corporate information. The apparel company said in a Form 8-K filing with the US Securi…CYBERINSIDER.COM
7 AugAU: Hackers leak sensitive Victorian court data to dark webKristian Silva and Danny The personal information of Victorian court users has been posted on the dark web, sparking a police investigation. Names, emails and job titles of people who attended online hearings in regional courts were posted on an underground hacking forum in July.…DATABREACHES.NET
7 AugWhat Canvas learned from a massive cyberattackAlcino Donadel reports: …. Instructure, the edtech company behind learning management system Canvas, suffered one of the largest data breaches in the U.S. this year after cybercriminals gained access through a third-party vendor—an increasingly common occurrence in higher e…DATABREACHES.NET
7 AugUnlimited Technology Systems Data Breach Affects 3.8 Million PatientsHIPAA Journal reports an update to the Unlimited Technology Systems breach that occurred between October 10 – 15, 2025, and was discovered on October 19, 2025: On July 23, 2026, the HIPAA Journal reported on a data breach at Unlimited Technology Systems, a Montgomery, Ohio-…DATABREACHES.NET
7 AugMoonshot’s Kimi AI model has also escaped from a test environmentYet another AI model has escaped from a cybersecurity test lab: This time, it’s the Chinese company Moonshot’s Kimi K3 model on the run. Frontier Security spotted that Kimi K3 had found a loophole in the UK AI Safety Institute’s test environment for AI models performing cybersecu…CSOONLINE.COM
7 AugVishing attacks target hedge funds.Cyberattack disrupts North Carolina Ports operations. Metabase Cloud breached by zero-day flaw.THECYBERWIRE.COM
7 AugBTS #79 - InfraTrust - Understanding Infrastructure Vulnerabilities & RiskIn this episode of Below the Surface, Paul Asadoorian is joined by Chase Snyder and Vlad Babkin for a conversation about InfraTrust, InfraTrust Pulse, and the hard problem of making infrastructure vulnerability data useful for defenders. The first half of the episode focuses on w…ECLYPSIUM.COM
7 AugTrojanized AI skills gain 1.7M installs in agent-targeted attackResearchers have uncovered an extremely effective attack campaign that involved AI agent skills trojanized to deploy a credential stealer. The incident is part of a growing trend in which attackers are targeting the AI software supply chain by poisoning sharable instruction and c…CSOONLINE.COM
7 AugMore than half of AI-generated patches are brokenResearch finds your AI generated security patch is more likely to fail than fully fix a vulnerability. It might even introduce brand new flaws to exploit along the way. The post More than half of AI-generated patches are broken appeared first on CyberScoop .CYBERSCOOP.COM
7 AugBoston Children’s Hospital named in North Korean hacking operationNaomi Diaz reports: Boston Children’s Hospital is among roughly a dozen organizations publicly named by security researcher Vangelis Stykas as impacted by a large-scale North Korean hacking operation, Wired reported Aug. 5. The hospital disputes that its own systems were breached…DATABREACHES.NET
7 AugWordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server TakeoverWordPress XSS2Shell flaw enables admin takeover and remote code execution. Users should update to patched versions. Researchers at Pwn just published a report on a vulnerability chain they’re calling XSS2Shell, and the entry point is quite simple: type a username that doesn…SECURITYAFFAIRS.COM
7 AugRing around the ransom.Vishing attacks target hedge funds. Metabase Cloud breached by zero-day flaw. Cyberattack disrupts North Carolina Ports operations. The Chinese government has launched a security review of Palo Alto Networks products. US defense supplier breached by phishing attack. Healthcare so…THECYBERWIRE.COM
7 AugMetabase SQLi zero-day exploited in customer data-theft attacksA critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. [...]BLEEPINGCOMPUTER.COM
7 AugCity of Coweta hit with system-wide ransomware attack, has backupKTUL in Oklahoma reports: The City of Coweta says they are currently responding to a ransomware attack. According to officials, on Werdnesday, August 5, the City experienced at system-wide attack and immediately contacted their contracted IT provider and additional cycbersecurity…DATABREACHES.NET
7 AugNew York State Department of Financial Services Secures Cybersecurity Settlement with Order Express, Inc.A press release from the NYS DFS: August 5, 2026 New York State Department of Financial Services Acting Superintendent Kaitlin Asrow announced today that Order Express, Inc., a licensed money transmitter, will pay a $250,000 penalty for violations of DFS’s cybersecurity regulatio…DATABREACHES.NET
7 AugInside the Modern SOC: The Identity Front DoorIdentity-based attacks drive 90% of incidents. Learn how modern attackers exploit identities and what SOC leaders can do to respond. The post Inside the Modern SOC: The Identity Front Door appeared first on Unit 42 .UNIT42.PALOALTONETWORKS.COM
7 AugUS cloud ‘kill switch’ is as dangerous as ransomware, European businesses fearEmma Woollacott reports: European firms are more concerned about a potential US government-imposed ‘kill switch’ for cloud services than almost anything else. In a survey of 1,500 businesses in the UK, France, and Germany, Proton found that with many having built thei…DATABREACHES.NET
📋 SECURITY BULLETINS 1[−]
7 AugMicrosoft, Apple Release Fresh Security UpdatesMicrosoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass. The post Microsoft, Apple Release Fresh Security Updates appeared first on SecurityWeek .SECURITYWEEK.COM
📢 SECURITY ADVISORIES 4[−]
7 AugAI firms know policymakers won’t ‘let you make a Terminator factory,’ DHS official saysLeading AI companies have learned important lessons from recent incidents, the official said, and regulation isn’t necessary to preserve those lessons.CYBERSECURITYDIVE.COM
7 AugUS cyber ambassador nominee Cassady confirmed in SenateNTIA official Adam Cassady becomes the second person confirmed to be the State Department's ambassador-at-large for cyber policy.THERECORD.MEDIA
7 AugA decade of enterprise identity in the cloud with AWS Managed Microsoft ADTen years ago, we launched AWS Directory Service for Microsoft Active Directory, a fully managed Microsoft Active Directory in the AWS Cloud. In that original announcement, Jeff Barr described a straightforward promise: “You will spend less time administering and more time workin…AWS.AMAZON.COM
🔥 INCIDENT REPORTING 20[−]
7 AugRisky Bulletin: A Meta AI model also escaped a testing sandboxA Meta AI model also escaped a testing sandbox, a cyberattack disrupts ports in North Carolina, the Philippines will establish a cybersecurity agency, and a Ransom Cartel admin gets 16 years in prison.RISKY.BIZ
7 AugExact Sciences - 10,869,543 breached accountsIn July 2026, Exact Sciences (now owned by Abbott Laboratories) was the target of a ShinyHunters "pay or leak" extortion campaign . The group claimed to have obtained data from the company's cancer diagnostics business, which they later published publicly. The breach contained 10…HAVEIBEENPWNED.COM
7 Aug3.8 Million Impacted by Unlimited Technology Systems Data BreachHackers stole personal, medical, and health insurance information from a company’s data center. The post 3.8 Million Impacted by Unlimited Technology Systems Data Breach appeared first on SecurityWeek .SECURITYWEEK.COM
7 AugRansomware Surges in July After Q2 LullFinance, technology and healthcare sectors were particularly heavily targeted in July, according to ComparitechINFOSECURITY-MAGAZINE.COM
7 AugHealthcare and Victim Support Charities Affected by Beacon Cyber IncidentBeacon has informed around 1500 customer charities that its CRM databases were accessed and likely exfiltrated by an unauthorized actorINFOSECURITY-MAGAZINE.COM
7 AugFrench rugby club Stade Français restores systems after cyberattack, probes data leakThe club said Thursday that it had already restored its IT environment from clean backups, allowing operations to continue normally. It added that its ticketing platform and online store were not affected and remain fully operational.THERECORD.MEDIA
7 AugUnlimited Technology Systems data breach impacts 3.8 million peopleUnlimited Technology Systems, a healthcare software and revenue cycle management provider, has suffered a data breach affecting more than 3.8 million people. The HHS Office for Civil Rights lists the Ohio-based company as a business associate and says the hacking incident affecte…CYBERINSIDER.COM
7 AugLevi Strauss says hackers breached employee computers, accessed corporate dataIntruders exfiltrated certain corporate information after gaining access to three company-issued computers through a social engineering attack, Levi Strauss reported.THERECORD.MEDIA
7 AugNorth Carolina Ports confirms cyberattack disrupting operationsThe North Carolina Ports Authority has confirmed that a cyberattack disrupted IT systems and slowed operations at Port of Wilmington, Port of Morehead City, and Charlotte Inland Port. [...]BLEEPINGCOMPUTER.COM
7 AugCoast Guard says it is monitoring cyberattack that disrupted North Carolina’s portsThe cyberattack hit gate systems at all three North Carolina ports, as officials continue investigating the breach and its effects on operations. The post Coast Guard says it is monitoring cyberattack that disrupted North Carolina’s ports appeared first on CyberScoop .CYBERSCOOP.COM
7 AugReal emails, hijacked payments: Two H1 2026 attack chainsGen's H1 2026 Threat Report examines two separate attack chains. One used compromised business inboxes and browser manipulation in a banking-malware campaign, while the other used clipboard hijacking to redirect cryptocurrency payments. [...]BLEEPINGCOMPUTER.COM
7 AugIn Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall StreetNoteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached via phishing. The post In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall St…SECURITYWEEK.COM
7 AugIrregular, firm behind AI hacking incidents, won't say if there were moreA spokesperson said Irregular’s investigation into what happened with Anthropic, OpenAI and Meta's AI models was ongoing and that they could not “go into further details.”THERECORD.MEDIA
7 AugLevi Strauss & Co. says hackers stole corporate data in cyberattackLevi Strauss & Co. (Levi's) says that hackers used social engineering on three of its employees to gain access to and steal corporate data stored on their machines. [...]BLEEPINGCOMPUTER.COM
7 AugComputer maker Framework notifies ‘all customers’ of a data breachFramework told "all" of its customers that hackers accessed their names, email addresses, phone numbers, and physical addresses in a data breach.TECHCRUNCH.COM
7 AugSecuring your Amazon S3 buckets: Identifying and remediating over-permissioned accessMisconfigured Amazon Simple Storage Service (Amazon S3) buckets can expose your data to unauthorized access. Without proactive review, S3 bucket policies or Access Control Lists (ACLs) configured with broad access may go unnoticed in your environment. In this post, you learn how …AWS.AMAZON.COM
7 AugMilitary device manufacturer discloses cyber incident to SECIEH Corporation — which produces specialized products used in military satellites, missiles and fighter jets — said it discovered a cyberattack on Tuesday and immediately tried to contain it.THERECORD.MEDIA
7 AugHackers Impersonate IT Support to Breach Leading Financial CompaniesHackers used fake IT help desks to steal MFA credentials, targeting over 200 firms, including major financial companies. A hacking campaign operating under names including Redact, Pink, Falcon, and Helix has built credential-stealing websites targeting employees at Blackstone, Br…SECURITYAFFAIRS.COM
7 AugUNC6671 Vishing Attacks Target Personal Phones to Steal SaaS DataA recent wave of cyber attacks targeting financial services, private equity, and professional services is attributed to a data extortion group known as UNC6671. "UNC6671 continues to rely on voice phishing (vishing) to target enterprise employees, posing as IT help desk staff fac…THEHACKERNEWS.COM
7 AugUnlimited Technology Systems breach impacts 3.8 million peopleHealthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025. [...]BLEEPINGCOMPUTER.COM
🕵️ THREAT INTELLIGENCE 15[−]
7 AugISC Stormcast For Friday, August 7th, 2026 https://isc.sans.edu/podcastdetail/10042, (Fri, Aug 7th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
7 AugUS fuel gauge exposure fell by more than half in three monthsEvery month for the better part of a year, about 4,800 US internet addresses answered a query in the protocol that fuel tank gauges speak. In June the number was 2,354. The count fell across April, May, and June, all three months sit below the previous year’s floor, and the…HELPNETSECURITY.COM
7 AugGut feeling does nothing against AI spear phishing textsA banker at a credit union sat down at a table with a dozen printed text messages, all of them written for that banker personally, and put them in order from the one most likely to get a click down to the one least likely. One of them stopped the sorting. It looked like something…HELPNETSECURITY.COM
7 AugTeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain CampaignA new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their sights on the software supply chain. "The c…THEHACKERNEWS.COM
7 AugOpenAI drops ChatGPT text chat limits for free users, adds new safeguards for teensOpenAI has updated GPT-5.6 Sol, the model behind ChatGPT for Plus and Pro subscribers, and pushed a new model, GPT-5.6 Luna, out to everyone using the free tier. The company is also removing the rate limit on text conversations for free users, allowing them to keep chats going wi…HELPNETSECURITY.COM
7 AugBlack Hat USA 2026 – Summary of Vendor Announcements (Part 4)Companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas. The post Black Hat USA 2026 – Summary of Vendor Announcements (Part 4) appeared first on SecurityWeek .SECURITYWEEK.COM
7 AugICE Is Buying Access to Credit Card RecordsThrough data brokers, ICE is buying the information you provided to open a credit card.SCHNEIER.COM
7 AugVishing Extortion Group UNC6671 Rebrands After Making MillionsInitially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands. The post Vishing Extortion Group UNC6671 Rebrands After Making Millions appeared first on SecurityWeek .SECURITYWEEK.COM
7 AugBreaking the attack chain created by exposed cloud secretsTL;DR A secret is only as safe as the route it takes Secrets are supposed to let systems authenticate without leaving credentials sitting in plain view. However, a secret still has to be created, stored, retrieved by a workload, used and …PENTESTPARTNERS.COM
7 AugAI Fails Without Understanding WhyA database can show relationships between data points. A knowledge graph adds context by explaining why those relationships exist and why they matter. AI systems that only ingest massive amounts of information may struggle without deeper structure and context. The ability to unde…YOUTUBE.COM
7 AugInside the Fake Copyright Racket Silencing News OutletsJournalists and civil society are being silenced by accusations of copyright infringement, says Alberto Fittarelli in a report by the OCCRP. The post Inside the Fake Copyright Racket Silencing News Outlets appeared first on The Citizen Lab .CITIZENLAB.CA
7 AugExperts say healthcare faces cybersecurity crisis: ‘These are patient safety issues’Regulatory failures, funding constraints and industry consolidation have created serious hacking risks.CYBERSECURITYDIVE.COM
7 AugFriday Squid Blogging: Arctic Bobtail Squid VideoNice video of the Arctic bobtail squid. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.SCHNEIER.COM
7 AugSci-Fi, PKD, Greatness, Passkeys, AgentBreaker, Rockwell, Flock, Josh Marpet - SWN #605Sci-Fi, PKD, Greatness, Passkeys, AgentBreaker, Rockwell, Flock, Doug is very dark, Josh Marpet, and More on this episode of the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-605YOUTUBE.COM
7 AugRenting Phishing Attacks MonthlyPhishing-as-a-service platforms have changed how some cybercriminal groups operate. Instead of creating every component themselves, attackers can use subscription-based services that provide phishing infrastructure and support for targeting common platforms. This shift lowers the…YOUTUBE.COM
🌐 CYBER THREAT LANDSCAPE 3[−]
7 AugResearchers Discover Hidden Backdoor in 20 Router Models Allowing Remote Root AccessA hidden backdoor in 20 router models lets remote servers execute commands as root, putting affected devices at risk of takeover. Jacob Baines had a router on his desk that kept trying to call home, and it wasn’t supposed to. VulnCheck researchers found a backdoor baked int…SECURITYAFFAIRS.COM
7 AugLiving off the coding agent: Two tales of tunnels and LaunchAgentsAgent-parented reverse tunnels and LaunchAgents can expose a local admin app to the internet. Endpoint still needs to treat that as high severity even when the activity looks like vibe-coded ops, not confirmed malware.ELASTIC.CO
7 AugClickFix Attacks Deliver macOS Stealer That Can Drain Crypto WalletsClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and cached credentials. The macOS-focused infection chain is designed to deliver a shell script that pro…THEHACKERNEWS.COM
📡 INFOSEC NEWS 14[−]
7 AugLinux Shell Forensic: Let?s Dive Into Atuin!, (Fri, Aug 7th)UNIX systems (including Linux) are well-known to record a lot of activities in many different locations. But there is one domain where they definitely lack of "modern" logging: shells. Most shells provide an historization of the typed commands through a flat file in the $HOM…ISC.SANS.EDU
7 AugAI Deepfakes Used to Impersonate OnlyFans Creators in New ScamScammers use AI deepfakes to impersonate OnlyFans creators, trick fans into sending money, then disappear after payment. Criminals are building fake identities using AI-generated deepfakes of real OnlyFans creators, luring their followers with promises of live chats, and then dis…SECURITYAFFAIRS.COM
7 AugClaude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow SecretsA GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic's and Google's own coding-agent repositories. On OpenAI's, it was enough to hijack the next agent run. Novee Security ran the attack against each vendor…THEHACKERNEWS.COM
7 AugGoogle Links Redact Extortion Group to BlackFile RebrandBlackFile has rebranded as Redact after an alleged affiliate hijack, with Google linking the group to ongoing vishing and extortion campaignsINFOSECURITY-MAGAZINE.COM
7 AugMicrosoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance EmailsCybersecurity researchers have called attention to an active "widespread email-driven phishing campaign" that employs adversary-in-the-middle (AitM) techniques to take control of Microsoft 365 accounts with an aim to identify key personnel involved in financial workflows and gath…THEHACKERNEWS.COM
7 AugMeta Ordered to Pay $567 Million Over Child Safety Failures in New Mexico CaseMeta was ordered to pay $567M after a judge ruled its platforms harmed children, bringing New Mexico penalties to $942M. Meta ‘s child-safety legal bill just got another half-billion dollars heavier. A New Mexico state judge ruled that company’s platforms constitute a…SECURITYAFFAIRS.COM
7 AugChinese AI model Kimi escaped its cybersecurity testing environment, researchers sayIn the Kimi test, the sandbox designed to contain the experiment was not properly configured.TECHCRUNCH.COM
7 AugBeware cut-price AI services that read your every wordf someone offered you 90% off the official price to access Claude, the powerful AI model from Anthropic, would you be tempted? It turns out that around 900 people were, and they may be regretting their decision. Read more in my article on the Fortra blog.FORTRA.COM
7 AugAI-Generated Patches Fail Half the TimeA study of more than 6,000 patches found that even working patches can introduce new bugs, break something else, or are open to bypass.DARKREADING.COM
7 AugNew Mexico judge orders Meta to pay $567 million in kids online safety caseThe money will be used to create a fund to mitigate social media harms, including by carving out $420 million for treatment for New Mexico youth who have been hurt on the platforms.THERECORD.MEDIA
7 AugWater utilities group partners with DEF CON offshoot for Water Watch CenterThe National Rural Water Association and a group of cybersecurity experts have formed a program to help cash-strapped utilities face the increase in threats to their systems.THERECORD.MEDIA
7 AugSecurity researchers scanned the Polish web and found courts, hospitals, and airports at risk of hacksResearchers found common points of failure, like software used to organize and display web content, could have allowed hackers to run riot through government websites.TECHCRUNCH.COM
7 AugAI chat bots are sliding into League of Legends friend requestsChat bots are sending friend requests in Riot immediately after ending your game. What are the scammers up to now?MALWAREBYTES.COM
7 AugMeta ordered to pay $942 million over harm to childrenA new court ruling not only fined Meta to the extent of $942 million but also ordered it to improve its age assurance tools.MALWAREBYTES.COM