Cybersecurity and other IT news aggregator

Fighting Fire with Fire: How Businesses Are Using AI to Enhance Risk Management 2026-08-19 at 07:00 By The emergence of AI has changed how modern organizations view security and risk management.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

The Deepfake Problem is Growing, and Authentication Needs a Rethink 2026-08-19 at 07:00 By In this threat landscape, the assumption that what we see and hear is always real is disintegrating.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Meta aimed to ‘hook’ teens on Facebook and Instagram, lied about health risks, prosecutor argues as historic case begins 2026-08-18 at 23:41 By Thomas Barrabi Mark Zuckerberg’s Meta built its apps to be addictive for kids and then lied to the public about health risks so it could rake in massive profits, a California prosecutor…

Copilot Exposed Its Own Vulnerabilities When Prompted 2026-08-18 at 21:43 By A one-click vulnerability in Microsoft Copilot Personal, named CoSnitch, was recently discovered. Security magazine talks with the research author to learn more.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps 2026-08-18 at 20:47 By Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal that it said could allow a single click on a crafted link to silently pull data from connected apps and other information available to the victim’s Copilot…

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets 2026-08-18 at 20:44 By Two critical vulnerabilities impacting MLflow, an open-source artificial intelligence (AI) platform, and FUXA, an open-source, web-based SCADA / HMI software built for operational technology (OT) and industrial automation, are witnessing malicious scanning and exploitation efforts. According to independent reports from…

Google Publishes Post-Quantum Cryptography Roadmap 2026-08-18 at 20:00 By Google Cloud published a roadmap for post-quantum cryptography, and this security leader is sharing his insights.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000 2026-08-18 at 19:58 By A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to victim organizations and claims to delete stolen data from ransomware groups’ servers in exchange for a fee ranging from $20,000 to $60,000. “In these…

Third-Party Breach Exposes Pokémon Center Customer Data 2026-08-18 at 19:00 By The Pokémon Center experienced a third-party data breach that exposed customer order details, including names and email addresses.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New York ranks No. 1 in US as most social media-addicted — find out which platforms your state is scrolling 2026-08-18 at 18:40 By Ben Cost We’re the city that never sleeps — because we’re always scrolling on our smartphones. This article is an excerpt from Latest Technology News | New York Post View Original…

‘Superman’ robot allegedly outruns Usain Bolt in uncanny video: ‘Breaking the limits of humanity’ 2026-08-18 at 16:36 By Ben Cost Chinese robot firm Unitree has unveiled a super-humanoid that they claim could dust Usain Bolt, the world’s fastest sprinter ever, in a foot race, among other incredible feats of athleticism. This article is an excerpt…

AI “Mind Viruses” Can Spread Between Agents Through Persistent Prompt Files 2026-08-18 at 15:38 By Security researchers at Anthropic and Switzerland’s EPFL have demonstrated that self-propagating payloads can spread from one artificial intelligence (AI) agent to the next through the editable system prompt files that autonomous agent harnesses use to carry state between sessions. The…

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks 2026-08-18 at 15:38 By Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. “TWINLOOT is a modular, PyArmor-hardened Python implant designed to operate its entire command-and-control infrastructure inside trusted Microsoft services,” Ontinue said in a technical report shared…

One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025 2026-08-18 at 14:30 By A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according to research published this week by agent security platform Reco. The activity, which Reco has…

16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets 2026-08-18 at 14:20 By Cybersecurity researchers have flagged a new typosquatting campaign targeting RubyGems users with a Windows-based information stealer. OpenSourceMalware, which discovered the activity on August 15, 2026, is tracking the threat under the moniker StubMaker. The complete list of packages published as part…

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers 2026-08-18 at 12:10 By SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers, and purchase details of approximately 39,798 customers. The hardware wallet maker said all affected customers were notified individually by…

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects 2026-08-18 at 00:03 By GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data. The…

Nvidia provides $105B in financing toward OpenAI’s massive Ohio data center — will be one of biggest in world 2026-08-17 at 22:05 By Thomas Barrabi OpenAI has inked a 20-year deal for the site, which will ultimately provide about eight gigawatts of computing capacity that will help support products like ChatGPT. In energy terms, a…

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection 2026-08-17 at 21:44 By Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake’s public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials. The issue was present…

Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads 2026-08-17 at 21:22 By A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites. The vulnerability, tracked as CVE-2026-15748, is rated 9.8 out…

US Government Hired a North Korean IT Worker, FBI Investigating 2026-08-17 at 21:00 By A North Korean remote IT worker was hired by an unidentified U.S. federal agency.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic 2026-08-17 at 20:41 By Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used by Iranian nation-state hackers in attacks targeting entities in Israel. Russian cybersecurity company Kaspersky said its ongoing monitoring of the threat activity…

Mark Zuckerberg’s Meta could face ‘astronomical’ damages as historic teen mental health case heads to trial 2026-08-17 at 19:46 By Thomas Barrabi The Instagram parent claims it could face $1.4 trillion in damages – nearly the size of its entire market cap – based on how a coalition of state attorneys general argue that penalties…

Why GSOCs and Protective Intelligence Are the Cornerstone of Executive Protection 2026-08-17 at 19:00 By The converging landscape has shifted executive protection from a reactionary and operational pursuit to an intelligence-driven mission.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New California law could change how kids consume social media forever 2026-08-17 at 18:46 By Nina Joudeh The proposals, AB 1709 and AB 2, cleared the State Senate Appropriations Committee this week and could reach Gov. Gavin Newsom’s desk before the legislative session ends Aug. 31. This article is an excerpt from Latest Technology News…

Multiple Suicides Reported in US Cyber Operations Forces 2026-08-17 at 17:53 By 5 individuals associated with the U.S. Cyber Operations Forces committed suicide.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source