Cybersecurity and other IT news aggregator

LATEST FEEDS

  • ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

    ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More 2026-08-20 at 22:12 By A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to…

  • New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data

    New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data 2026-08-20 at 21:12 By Adversa AI has disclosed an attack technique that it says can cause xAI’s Grok chatbot to send a user’s name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user…

  • US debt tops $40T stoking debate on what it means for Bitcoin

    US debt tops $40T stoking debate on what it means for Bitcoin 2026-08-20 at 20:43 By Cointelegraph by Nate Kostar Analysts say the $40 trillion debt milestone could bolster Bitcoin’s long-term case, even as Treasury yields, dollar strength and liquidity remain key near-term drivers. This article is an excerpt from Cointelegraph.com News View Original Source

  • How Retailers Are Approaching Modernization

    How Retailers Are Approaching Modernization 2026-08-20 at 20:00 By Modern difficulties are shaping how retail organizations approach modernization. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

  • AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure

    AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure 2026-08-20 at 19:59 By The U.S. government on Wednesday warned of an “active threat” targeting critical infrastructure organizations in the country using artificial intelligence (AI)-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers (PLCs) to conduct reconnaissance and capability development using…

  • UC Berkeley professor who criticized student math abilities admits to using AI to help write viral op-ed

    UC Berkeley professor who criticized student math abilities admits to using AI to help write viral op-ed 2026-08-20 at 19:31 By Titus Wu She said huge portions of her students are failing to keep up with college calculus and she’s forced to teach middle-school algebra and fractions to students. This article is an excerpt from…

  • Bitcoin miners pour billions into AI as capex outpaces revenue 15-to-1

    Bitcoin miners pour billions into AI as capex outpaces revenue 15-to-1 2026-08-20 at 19:12 By Cointelegraph by Sam Bourgi Nine public miners generated $341 million from AI and HPC operations in the first half of 2026 after spending more than $5 billion on capital assets. This article is an excerpt from Cointelegraph.com News View Original…

  • OpenAI confirms ChatGPT Outage

    OpenAI confirms ChatGPT Outage 2026-08-20 at 18:55 By On August 19, OpenAI confirmed a ChatGPT outage affecting users worldwide.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

  • Most Americans say the Trump family’s crypto investments are not ‘appropriate’: Poll

    Most Americans say the Trump family’s crypto investments are not ‘appropriate’: Poll 2026-08-20 at 18:53 By Cointelegraph by Turner Wright A new poll showed 63% of 1,166 Americans varied sharply along partisan lines, with a majority of Republicans saying it was appropriate for Trump and his family to invest in crypto. This article is an…

  • 9M Images Exposed by Facial Recognition Platform

    9M Images Exposed by Facial Recognition Platform 2026-08-20 at 18:00 By 450.2 gigabytes of data were exposed in a public database with no password protection or encryption. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

  • Hackers Target Zimbra Servers in Active Exploitation Campaign

    Hackers Target Zimbra Servers in Active Exploitation Campaign 2026-08-20 at 17:50 By Eduard Kovacs Exploitation of the Zimbra Collaboration vulnerability CVE-2026-73570 has been observed by Poland’s CERT Polska. The post Hackers Target Zimbra Servers in Active Exploitation Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Surveillance – Everything You Wanted to Know, But Were Afraid to Ask

    Surveillance – Everything You Wanted to Know, But Were Afraid to Ask 2026-08-20 at 17:30 By Kevin Townsend We all know they’re watching us. But we don’t know who they are, nor why nor how they are doing it. The post Surveillance – Everything You Wanted to Know, But Were Afraid to Ask appeared first…

  • Why Business Leaders Need a New Response Model to AI-Enabled Incidents

    Why Business Leaders Need a New Response Model to AI-Enabled Incidents 2026-08-20 at 17:00 By Brandy Wityak Originally published by Cybersecurity Insider. This article is an excerpt from LevelBlue Blog View Original Source

  • Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

    Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE 2026-08-20 at 16:48 By Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability (“GHSA-864f-rcv7-6rh4”), which…

  • Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

    Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers 2026-08-20 at 16:35 By Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the cloud computing and virtualization technology company, the issues affect customer-managed NetScaler ADC and NetScaler…

  • MiCA cracks down on USDT in Europe… but no one else cares

    MiCA cracks down on USDT in Europe… but no one else cares 2026-08-20 at 16:30 By Cointelegraph by Christina Comben USDT is disappearing from regulated European platforms, but there is little sign that it has resulted in weakening global demand for Tether. This article is an excerpt from Cointelegraph.com News View Original Source

  • Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

    Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution 2026-08-20 at 16:24 By A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability in question is CVE-2026-73570 (CVSS score: 8.9), which refers to a case of…

  • Bitdeer signs $400M AI cloud computing deal for Malaysia facility

    Bitdeer signs $400M AI cloud computing deal for Malaysia facility 2026-08-20 at 16:18 By Cointelegraph by Zoltan Vardai Bitdeer expects revenue from the five-year agreement to begin in early 2027 as it builds toward 350 megawatts of AI cloud capacity by 2028. This article is an excerpt from Cointelegraph.com News View Original Source

  • Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia

    Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia 2026-08-20 at 16:16 By Ionut Arghire Operation CameraSwarm targeted Dahua cameras across multiple countries, focusing on Russian and CIS telecom netblocks. The post Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View…

  • Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities

    Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities 2026-08-20 at 15:24 By Ionut Arghire The flaws could be exploited to execute arbitrary code, access sensitive information, and elevate privileges. The post Atlassian, Splunk Patch Dozens of Critical, High-Severity Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • MLflow Vulnerability Exploited for Cloud Credential Theft

    MLflow Vulnerability Exploited for Cloud Credential Theft 2026-08-20 at 15:05 By Ionut Arghire The critical-severity flaw allows attackers to send HTTP requests to internal endpoints and extract sensitive information. The post MLflow Vulnerability Exploited for Cloud Credential Theft appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments

    Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments 2026-08-20 at 15:01 By Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date a point-of-sale (POS) terminal reads over near-field communication (NFC), without breaking any of…

  • Why “Shady AI” is Security’s Next Big Governance Problem

    Why “Shady AI” is Security’s Next Big Governance Problem 2026-08-20 at 14:45 By In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it.  The incident began when a Meta employee posted a technical question on…

  • Corero brings cloud-based AI threat analysis to SmartWall ONE

    Corero brings cloud-based AI threat analysis to SmartWall ONE 2026-08-20 at 14:22 By Industry News Corero Network Security has announced AI-Augmented Cloud-Assist for SmartWall ONE, extending its automated DDoS protection with cloud-delivered AI analysis, threat intelligence, and policy optimization. As cybercriminals increasingly leverage AI to develop and evolve attack campaigns, defenders must respond with equal…

  • AWS limits AI agents’ data access, even when manipulated

    AWS limits AI agents’ data access, even when manipulated 2026-08-20 at 14:17 By Anamarija Pogorelec AWS has detailed an approach for propagating user authorization context through AI agents, allowing access controls to be enforced by infrastructure and downstream services rather than relying on the agent itself. Customers using Amazon Bedrock AgentCore can build AI agents…

  • Fake Gemini installer delivers Vidar infostealer via Google Colab lure

    Fake Gemini installer delivers Vidar infostealer via Google Colab lure 2026-08-20 at 13:46 By Sinisa Markovic A malicious executable masquerading as a Google Gemini installer was used to deliver the Vidar infostealer on a company network in the EMEA region, according to Darktrace researchers who investigated the incident. “During the initial analysis, it was noted…

  • Apple News, Google promote outlets that endorse Dem presidential candidates — while shutting out Republicans: study

    Apple News, Google promote outlets that endorse Dem presidential candidates — while shutting out Republicans: study 2026-08-20 at 13:00 By Thomas Barrabi The most-promoted news outlets on Apple News and Google News haven’t endorsed a Republican in the last 10 presidential elections — the latest sign of alleged anti-conservative bias, according to a new analysis.…

  • What Happens When Two Iconic Brands Unite?

    What Happens When Two Iconic Brands Unite? 2026-08-20 at 13:00 By Monica White Symantec® CBX is the perfect marriage of Symantec and Carbon Black® technologies into a unified XDR platform This article is an excerpt from SECURITY.COM View Original Source

  • OpenAI previews privacy-focused system for detecting AI misuse

    OpenAI previews privacy-focused system for detecting AI misuse 2026-08-20 at 12:09 By Anamarija Pogorelec OpenAI is previewing Private Safety Processing with early customers seeking greater certainty about how their data will be protected as AI systems become more capable. The system identifies patterns across related interactions while restricting OpenAI personnel from accessing the underlying content.…

  • US agencies warn of AI-powered attacks on Siemens industrial controllers

    US agencies warn of AI-powered attacks on Siemens industrial controllers 2026-08-20 at 12:07 By Sinisa Markovic Threat actors are using AI to write exploit scripts targeting internet-exposed Siemens S7 Series programmable logic controllers (PLCs) used across water, energy, manufacturing, and other critical infrastructure sectors, according to US federal agencies. PLCs are the small industrial computers…

  • Abdul El-Sayed reveals he would take socialist plan a ‘step further’ than Bernie Sanders for key US industry

    Abdul El-Sayed reveals he would take socialist plan a ‘step further’ than Bernie Sanders for key US industry 2026-08-20 at 04:38 By Fox News El-Sayed said he wanted to “take it a step further” than Bernie Sanders’ public ownership model for a major US industry. This article is an excerpt from Latest Technology News |…

  • Mission to save NASA’s aging Swift space telescope called off after rescue spacecraft loses control

    Mission to save NASA’s aging Swift space telescope called off after rescue spacecraft loses control 2026-08-20 at 00:30 By Associated Press The mission to save NASA’s sinking Swift Observatory was called off Wednesday, dooming the telescope to a fiery reentry later this year. This article is an excerpt from Latest Technology News | New York…

  • Amazon expanding lightweight drone delivery to 500 US cities with potential 30-minute wait times for packages

    Amazon expanding lightweight drone delivery to 500 US cities with potential 30-minute wait times for packages 2026-08-20 at 00:18 By Associated Press Customers could receive the drone deliveries in as fast as 30 minutes, Amazon said in a news release. This article is an excerpt from Latest Technology News | New York Post View Original…

  • Mark Zuckerberg’s Meta had ‘don’t ask, don’t tell’ policy on child safety, ex-employee testifies in historic trial

    Mark Zuckerberg’s Meta had ‘don’t ask, don’t tell’ policy on child safety, ex-employee testifies in historic trial 2026-08-19 at 23:43 By Thomas Barrabi Arturo Béjar, a former Meta safety researcher who has become one of its biggest critics, told jurors in California federal court that Zuckerberg did little to address the harmful effects of Facebook…

  • Bitcoin.com integrates UAE-registered US dollar stablecoin into self-custodial wallet

    Bitcoin.com integrates UAE-registered US dollar stablecoin into self-custodial wallet 2026-08-19 at 23:33 By Cointelegraph by Nate Kostar The integration expands access to USDU, the UAE’s first central bank-registered US dollar stablecoin, as it builds distribution beyond institutional channels. This article is an excerpt from Cointelegraph.com News View Original Source

  • Trump pushes for CLARITY Act passage alongside crypto leaders

    Trump pushes for CLARITY Act passage alongside crypto leaders 2026-08-19 at 22:54 By Cointelegraph by Turner Wright Donald Trump spoke from the White House on Wednesday, urging the Senate to pass a crypto market structure bill to keep the country “ahead of China.” This article is an excerpt from Cointelegraph.com News View Original Source

  • Anthropic’s earnings overtake OpenAI’s for the first time: ‘revenue engine’

    Anthropic’s earnings overtake OpenAI’s for the first time: ‘revenue engine’ 2026-08-19 at 22:53 By Ariel Zilber Anthropic has reportedly overtaken OpenAI in quarterly sales for the first time — a stunning reversal for the ChatGPT maker in its bitter rivalry with the startup founded by a group of its former employees. This article is an…

  • Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second

    Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second 2026-08-19 at 22:02 By Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker in the production environment at up to 12 bits per second, 360 times the rate of an…

  • OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

    OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior 2026-08-19 at 21:06 By OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artificial intelligence (AI) models for two weeks while it shored up additional defenses and increased the scope of its monitoring to avert another Hugging…

  • Hacker Summer Camp Is a Defender’s Education

    Hacker Summer Camp Is a Defender’s Education 2026-08-19 at 20:15 By What Las Vegas 2026 taught about identity and privilege. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

  • TikTok Ban on Government Devices Reversed, Mobile Security Expert Weighs In

    TikTok Ban on Government Devices Reversed, Mobile Security Expert Weighs In 2026-08-19 at 20:00 By The Department of Justice (DOJ) decided last month that TikTok was no longer to be banned from government devices.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

  • China robot makers show off latest humanoids as tech event draws surprise visit from Nvidia CEO’s daughter

    China robot makers show off latest humanoids as tech event draws surprise visit from Nvidia CEO’s daughter 2026-08-19 at 19:38 By Reuters Chinese robot makers showed off humanoids sorting parcels, packing mobile phones and helping with household chores at a Beijing conference on Wednesday, seeking to demonstrate a shift from crowd-pleasing displays to broader commercial…

  • From Puzzle Solver to Program Builder

    From Puzzle Solver to Program Builder 2026-08-19 at 19:00 By Listen to Dina Atwell, Director, Cyber Insider Threat Program Management at Capital One, discuss her career in the security industry.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

  • Chinese humanoid robot maker Unitree jumps 460% in blockbuster Shanghai IPO

    Chinese humanoid robot maker Unitree jumps 460% in blockbuster Shanghai IPO 2026-08-19 at 18:45 By Thomas Barrabi Unitree – whose dexterous robots have raised national security concerns in Congress – raised 6.1 billion yuan ($904 million) in its public debut. The Hangzhou-based firm is the first robotics firm from mainland China to go public, with…

  • Cloud Sync Root RegistrationShieldBreak: Hunting Windows Defender Remediation Abuse and Cloud Files Hijacking

    Cloud Sync Root RegistrationShieldBreak: Hunting Windows Defender Remediation Abuse and Cloud Files Hijacking 2026-08-19 at 18:40 By Serhii Melnyk and Timmy Lister Following GreenPlasma, YellowKey and MiniPlasma, RoguePlanet and GreatXML, and LegacyHive, the Nightmare-Eclipse disclosure actor has published ShieldBreak — its latest Windows proof of concept (PoC) released shortly after Microsoft’s August 2026 Patch Tuesday.…

  • Security Leaders Discuss Azure Exfiltration Campaign

    Security Leaders Discuss Azure Exfiltration Campaign 2026-08-19 at 18:00 By A hacker claimed to have stolen 3.6 million Azure account records from major organizations. Security leaders discuss.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

  • When the Attacker Wears Your Logo: Detecting and Taking Down Impersonation at AI Speed

    When the Attacker Wears Your Logo: Detecting and Taking Down Impersonation at AI Speed 2026-08-19 at 17:01 By Ashish Khaitan A company can have strong firewalls, modern endpoint protection, and carefully controlled access—and still find its brand being used as a weapon against customers, employees, and partners.  That is the new reality of digital impersonation.…

  • LevelBlue Named a Major Player in the 2026 IDC MarketScape MDR/MXDR for Enterprise

    LevelBlue Named a Major Player in the 2026 IDC MarketScape MDR/MXDR for Enterprise 2026-08-19 at 17:00 By Security leaders are rethinking what they expect from Managed Detection and Response (MDR) providers, prompting the market to enter a new phase of maturity. Organizations are looking beyond containment metrics and response times, evaluating providers based on their…

  • Intezer adds native response automation without separate SOAR

    Intezer adds native response automation without separate SOAR 2026-08-19 at 16:56 By Industry News Intezer has announced Workflows, a native automation and response builder that enables security teams to create and customize response workflows directly inside the Intezer platform. Workflows brings response into the same platform where alerts are triaged and investigated, allowing organizations to…

  • Virtual Event Today: CodeSecCon – Secure Your Code and Applications

    Virtual Event Today: CodeSecCon – Secure Your Code and Applications 2026-08-19 at 16:36 By SecurityWeek News CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. The post Virtual Event Today: CodeSecCon – Secure Your Code and Applications appeared first on SecurityWeek. This…

Browse older archives

Scroll to Top