Cybersecurity and other IT news aggregator

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face 2026-08-28 at 00:01 By OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior as early as late May. The incident,…

Mosquito killer retailing for $988 swears to battle rising California West Nile threat 2026-08-27 at 23:59 By Christopher Edwards Earlier this month, the second Californian this year died from West Nile Virus. This article is an excerpt from Latest Technology News | New York Post View Original Source

LAX Security Guard Found With 24 Pounds of Fentanyl, Facing Charges 2026-08-27 at 20:00 By A security guard was allegedly caught with fentanyl in the LAX restroom.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Learn How to Build Security Operations Ready for AI-Powered Attacks 2026-08-27 at 19:57 By Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act. Advanced AI models can now help attackers discover vulnerabilities, generate exploit code, and move through weaknesses faster…

Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks 2026-08-27 at 19:57 By The Australian Federal Police (AFP) has charged two Western Australian men with a combined total of 14 offences over their alleged role in TeamPCP, the cybercrime group behind the March 2026 compromise of the open-source security scanners Trivy and Checkmarx…

DOJ, NASA, Others Among Victims of Chinese State-Sponsored Hack 2026-08-27 at 19:00 By The DOJ and other federal entities were targeted by a Chinese state-sponsored actor. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE 2026-08-27 at 18:13 By Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers…

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories 2026-08-27 at 18:12 By A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into a machine. The rest of the week gets stranger: botnets borrowing…

Parents rip Meta’s attempt to curb children from its social media sites after historic $18B settlement: ‘Not enough’ 2026-08-27 at 17:14 By David Landsel, Faran Krentcil Tech giant Meta agreed to a historic $18B payout to 47 U.S. states on Wednesday — as part of an effort to settle claims that social media has harmed…

Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers 2026-08-27 at 16:39 By Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered, agentic integrated development environment (IDE), that could facilitate data exfiltration via prompt injection and Kiro Powers. The security flaw, which does not have a CVE…

12.9M Exposed by Carhartt Data Breach 2026-08-27 at 15:03 By More than 50 gigabytes of documents were reportedly stolen. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools 2026-08-27 at 14:00 By Individuals and organizations in Cambodia have emerged as the target of a new campaign that delivers an open-source remote access trojan (RAT) called Spark RAT. “The samples employ diverse lure themes, suggesting an effort to appeal to a broad…

GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address 2026-08-27 at 13:13 By Threat actors linked by Arctic Wolf to Dark Caracal with medium confidence deployed a previously undocumented Go-based malware framework, GoCaracal, during a June 2026 intrusion at an unnamed communications organization in Venezuela. GoCaracal provides operators with remote shell access and…

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access 2026-08-27 at 11:13 By Academic researchers have disclosed a Rowhammer attack impacting NVIDIA workstation GPUs with GDDR6 memory that defeats error correction codes (ECC), the mitigation NVIDIA recommends against GPU Rowhammer, and enables denial-of-service (DoS) and privilege escalation to a root…

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs 2026-08-27 at 10:05 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its Known Exploited Vulnerabilities (KEV) catalog, including a high-severity security vulnerability impacting Citrix NetScaler ADC and NetScaler Gateway, citing evidence of active exploitation.…

AI Models are Finding Vulnerabilities Faster 2026-08-27 at 07:00 By A report by SentinelOne and Tenable Holdings analyzed vulnerability discovery, exposure, and exploitation.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Medical Device Manufacturer Boston Scientific Faces Cyberattack 2026-08-27 at 07:00 By Boston Scientific, a U.S. medical device manufacturer, announced a cyberattack affecting their global operations. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Parents who blame their kids’ deaths on social media celebrate Meta’s $18B settlement — but say ‘It’s like losing her all over again’ 2026-08-27 at 01:02 By Rikki Schlott “I’m hoping that the settlement hurts Meta a little bit,” one mom said. “I hope that Mark Zuckerberg doesn’t just think that this is the cost of…