Cybersecurity and other IT news aggregator

Parents who blame their kids’ deaths on social media celebrate Meta’s $18B settlement — but say ‘It’s like losing her all over again’ 2026-08-27 at 01:02 By Rikki Schlott “I’m hoping that the settlement hurts Meta a little bit,” one mom said. “I hope that Mark Zuckerberg doesn’t just think that this is the cost of…

Meta calls out YouTube, TikTok after historic $18 billion settlement 2026-08-26 at 23:54 By Thomas Barrabi Meta’s deal to settle a federal lawsuit alleging it fueled a teen mental health crisis has a major caveat – its chief rivals TikTok and Google-owned YouTube must agree to make the same safety changes to their apps before…

‘Nostradamus of AI’ promised to buy wife a galaxy — then his $45B hedge fund blew up 2026-08-26 at 21:59 By Ariel Zilber Leopold Aschenbrenner is the 24-year-old German-born wunderkind who has been dubbed the “Nostradamus of AI.” This article is an excerpt from Latest Technology News | New York Post View Original Source

Apple sets launch date for new iPhone series — the first major event for new CEO John Ternus 2026-08-26 at 21:40 By Reuters Apple is expected to unveil its newest iPhone series and potentially its ​long-awaited foldable phone. This article is an excerpt from Latest Technology News | New York Post View Original Source

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler 2026-08-26 at 21:22 By Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus Manticore, an Iranian state-sponsored hacking group affiliated with the Islamic Revolutionary Guard Corps (IRGC). Group-IB, in a new analysis published today, described the cyber espionage actor as among…

100+ Internet-Exposed Water Systems Faced Cyberattacks Last Month 2026-08-26 at 20:35 By More than 100 water systems were targeted with cyberattacks. Security leaders weigh in.   This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

A Look Inside the Phishing Service Attacking Organizations 2026-08-26 at 20:05 By Research examined artifacts from the campaign and discovered hundreds of organizations targeted. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations 2026-08-26 at 19:42 By The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter operated by Chinese threat actors to target critical infrastructure and other sensitive networks in the country. The activity has been…

Hype vs. Reality: What Organizations Need to Know Before Using AI 2026-08-26 at 19:00 By Listen to Diana Kelley, CISO at Noma Security, explain how organizations can safely implement AI.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing 2026-08-26 at 18:22 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published the results of two red team assessments it conducted simultaneously against two critical infrastructure organizations, using what it described as similar tradecraft while recording sharply different defensive outcomes. Both organizations…

Red Team Discoveries Support Organizations in Assessing Risk 2026-08-26 at 18:00 By Red team tests were conducted at the behest of two critical infrastructure organizations.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions 2026-08-26 at 16:44 By Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that’s used as a proxy to redirect Microsoft 365 sign-ins, while capturing authenticated sessions in the process. In a report shared with The Hacker News ahead…

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine 2026-08-26 at 16:07 By The SOC we’ve always known was built around a model that guarantees most of the alert queue will never receive analyst review. There’s never time. In a traditional SOC, the typical progression follows a well-known pattern: an alert…

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code 2026-08-26 at 14:55 By The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura’s HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary files from a server and execute code on it. The flaws, tracked as…

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown 2026-08-26 at 14:32 By An eight-month INTERPOL operation targeting West African organized crime groups has led to arrests of 58 people and the identification of 263 suspects. “The operation, which brought together 22 countries from six continents, is a response to the…

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode 2026-08-26 at 14:32 By An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEEPWALKER, that stays inert in memory until a specifically crafted network packet reaches the machine and then runs commands written in a 23-instruction language of its…

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in Tests 2026-08-26 at 13:27 By Aikido Security has published research that recreates the Australian gym-booking incident in a synthetic environment, finding that Claude Opus 4.6, running on the OpenClaw agent harness, exploited a client-side-only booking restriction in 9 of 10 runs. The original…

How To Take Prevention to the Web Layer 2026-08-26 at 13:00 By Dori Varas Visibility across every domain is the first step to taking back control of web traffic and network activity This article is an excerpt from SECURITY.COM View Original Source

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation 2026-08-26 at 12:38 By OpenAI on Tuesday said it banned a cluster of Russian ChatGPT accounts that used VPNs to bypass access restrictions and run an influence operation, which relied on its artificial intelligence (AI) tool to generate social media posts and comments that were…

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload 2026-08-26 at 09:27 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday warned of active exploitation efforts targeting a recently patched critical security flaw impacting Gitea. The vulnerability in question is CVE-2026-60004 (CVSS score: 9.8), a case of remote code execution that…

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes 2026-08-26 at 08:47 By Cybersecurity researchers have disclosed details of a phishing-as-a-service (PhaaS) platform built to strip Apple’s Activation Lock from stolen devices, using rented AI voice agents that call theft victims posing as Apple Support and ask for their device passcode.…