Cybersecurity and other IT news aggregator

LATEST FEEDS

  • Locking your ssh-agent exposed local-only keys until OpenSSH 10.5

    Locking your ssh-agent exposed local-only keys until OpenSSH 10.5 2026-08-11 at 12:15 By Anamarija Pogorelec Lock your ssh-agent and it should sit there refusing to sign anything until you unlock it. In OpenSSH 10.4, locking it also switched off the check that tells the agent whether a request came from your own machine or arrived…

  • Anthropic strikes $9B compute deal with Bitcoin miner Riot: Report

    Anthropic strikes $9B compute deal with Bitcoin miner Riot: Report 2026-08-11 at 11:00 By Cointelegraph by Zoltan Vardai Anthropic reportedly struck a $9 billion deal with Riot for 191 megawatts of capacity from the Bitcoin miner’s Rockdale campus in Texas. This article is an excerpt from Cointelegraph.com News View Original Source

  • Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

    Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine 2026-08-11 at 09:55 By Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment. The plant…

  • GPT-5.6-Cyber refuses security researchers’ requests far less often

    GPT-5.6-Cyber refuses security researchers’ requests far less often 2026-08-11 at 09:32 By Sinisa Markovic GPT-5.6-Cyber is a new OpenAI model built on GPT-5.6 Sol, trained to find zero-day vulnerabilities and build exploit chains, with fewer refusals on higher-risk, dual-use work. Model is available only through Daybreak Red, the higher tier of OpenAI’s vetted access program…

  • South Korea drops Travel Rule threshold for crypto transfers

    South Korea drops Travel Rule threshold for crypto transfers 2026-08-11 at 09:28 By Cointelegraph by Yohan Yun South Korea will remove its 1 million won Travel Rule threshold and apply information-sharing requirements to all transfers between registered crypto service providers. This article is an excerpt from Cointelegraph.com News View Original Source

  • Mozilla Issues New Firefox GPG Key Following Exposure

    Mozilla Issues New Firefox GPG Key Following Exposure 2026-08-11 at 09:16 By Eduard Kovacs The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it. The post Mozilla Issues New Firefox GPG Key Following Exposure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original…

  • Who will be the Stanislav Petrov in your organization?

    Who will be the Stanislav Petrov in your organization? 2026-08-11 at 09:00 By Help Net Security The recent news coverage of “rogue AI” systems hacking innocent companies reminded me of one of the world’s most unsung heroes and genuinely someone who may well have saved the world. In 1983, the USSR’s early warning systems reported…

  • Payments platform Decta explores stablecoin-enabled treasury settlement

    Payments platform Decta explores stablecoin-enabled treasury settlement 2026-08-11 at 09:00 By Cointelegraph by Helen Partz Decta will use USDC through OpenPayd’s infrastructure for international treasury settlement, seeking faster transfers and more efficient liquidity management. This article is an excerpt from Cointelegraph.com News View Original Source

  • BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

    BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins 2026-08-11 at 08:48 By Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform’s plugins team to temporarily disable their downloads. “Unlike traditional software supply chain attacks, zero source code files were modified…

  • An AI tool found 84 flaws in 5G network software and 23 of them still have no fix

    An AI tool found 84 flaws in 5G network software and 23 of them still have no fix 2026-08-11 at 08:30 By Mirko Zorz Researchers at Nanyang Technological University turned a set of AI agents loose on the software that runs 4G and 5G phone networks, and the agents came back with 84 security flaws…

  • Previously unseen entry vector used to breach Polish energy plant

    Previously unseen entry vector used to breach Polish energy plant 2026-08-11 at 08:00 By Sinisa Markovic The December 29 cyberattack on a Polish combined heat and power (CHP) plant was the first observed case of attackers gaining access to an OT network through a private APN, according to CERT Polska. The private APN is a…

  • Mass Kidnapping Increased 154% from 2020 to 2025

    Mass Kidnapping Increased 154% from 2020 to 2025 2026-08-11 at 08:00 By 2026 will see an increase in kidnaps-for-ransom.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

  • Your security vendor gets the frontier cyber model, you get the findings

    Your security vendor gets the frontier cyber model, you get the findings 2026-08-11 at 07:43 By Anamarija Pogorelec Selected red team specialists can now use OpenAI’s cyber models to find and exploit weaknesses in client applications and infrastructure. Those clients never get the models themselves. That split is the design of the Daybreak Cyber Partner…

  • As AI keeps tight grip on world, the thrill of collecting vintage computers is growing

    As AI keeps tight grip on world, the thrill of collecting vintage computers is growing 2026-08-11 at 04:42 By Associated Press Software engineer Josh Dersch is among a growing community of vintage computer collectors saving classic machines from the digital dustbin. This article is an excerpt from Latest Technology News | New York Post View…

  • Famed California bars forced to boot draconian surveillance system after privacy backlash

    Famed California bars forced to boot draconian surveillance system after privacy backlash 2026-08-11 at 02:00 By Marina Peña The bars Badlands and Toad Hall said they would stop using the AI-powered platform PatronScan, which was used to verify IDs and ages and flag problem patrons across all venues. This article is an excerpt from Latest…

  • Judge stays CFTC’s case against US soldier over prediction market bets

    Judge stays CFTC’s case against US soldier over prediction market bets 2026-08-10 at 23:50 By Cointelegraph by Turner Wright A New York judge granted a motion filed by US prosecutors in July to stay the CFTC’s civil case against Gannon Ken Van Dyke over making more than $400,000 on prediction markets. This article is an…

  • TRON USDT supply hits $87.9B as transfers reach $2.1T in Q2: Messari

    TRON USDT supply hits $87.9B as transfers reach $2.1T in Q2: Messari 2026-08-10 at 22:47 By Cointelegraph by Nate Kostar Messari reported that TRON recorded all-time highs in stablecoin supply and network activity during the second quarter, while DeFi and decentralized exchange activity declined. This article is an excerpt from Cointelegraph.com News View Original Source

  • UK money laundering suspect bought $100M in Trump crypto business: NYT

    UK money laundering suspect bought $100M in Trump crypto business: NYT 2026-08-10 at 22:35 By Cointelegraph by Turner Wright An individual behind the Aqua 1 entity that purchased $100 million worth of World Liberty Financial tokens in 2025 is reportedly a businessman with ties to the UK and UAE. This article is an excerpt from…

  • GameStop CEO Ryan Cohen mulls dropping $56B eBay takeover bid: report

    GameStop CEO Ryan Cohen mulls dropping $56B eBay takeover bid: report 2026-08-10 at 21:01 By Thomas Barrabi Cohen – who became a favorite of retail investors as GameStop rose to “meme stock” prominence – is instead considering proposing a partnership that would allow eBay access to GameStop’s base of approximately 1,600 US stores, Bloomberg reported,…

  • Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development

    Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development 2026-08-10 at 20:29 By AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fixes, and control risk at human speed. When software output jumps 10 to 50 times, the problem is…

  • AI-Ready PAM: When Your Identity Security Solution Talks Back

    AI-Ready PAM: When Your Identity Security Solution Talks Back 2026-08-10 at 19:45 By Adam Roll How MCP turns PAM into an AI-ready source for faster reporting and compliance visibility This article is an excerpt from SECURITY.COM View Original Source

  • China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw

    China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw 2026-08-10 at 19:38 By Microsoft has disclosed that Storm-1175, a financially motivated threat actor linked to China, has deployed a previously undocumented ransomware strain called StormEncryptor. The use of StormEncryptor marks a shift from the adversary’s previous use of Medusa ransomware, the Microsoft Threat Intelligence…

  • ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors

    ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors 2026-08-10 at 18:00 By A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting the default. That pretty much covers the mood this week. Old bugs…

  • Cyberattack on Steam hardware shipper leaks names, addresses, and order data

    Cyberattack on Steam hardware shipper leaks names, addresses, and order data 2026-08-10 at 17:34 By Sinisa Markovic Video game publisher Valve is alerting customers in Europe to a data breach at CEVA Logistics, its Steam hardware shipping partner. Reports from affected customers began surfacing on social media earlier today, after Valve started sending out data…

  • OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns

    OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns 2026-08-10 at 17:33 By Eduard Kovacs The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold.  The post OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original…

  • Stealthium Targets Security Blind Spots in AI Accelerators and Neo-Clouds

    Stealthium Targets Security Blind Spots in AI Accelerators and Neo-Clouds 2026-08-10 at 17:19 By Kevin Townsend The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure. The post Stealthium Targets Security Blind Spots in AI Accelerators and Neo-Clouds appeared first on SecurityWeek. This article is an…

  • Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC

    Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC 2026-08-10 at 17:07 By Ionut Arghire Remote, unauthenticated attackers could exploit the bugs to cause a denial-of-service (DoS) condition. The post Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain

    CNCMachineRMS: The Undocumented RAT At the End of a BabaDeda Chain 2026-08-10 at 16:55 By Rodel Mendrez This post is the result of an investigation into a case we worked on, in which we traced a loader chain that ended where we didn’t expect. This article is an excerpt from LevelBlue SpiderLabs Blog View Original…

  • Sen. Bernie Sanders demands CEOs pause AI development ‘in the interest of humanity’

    Sen. Bernie Sanders demands CEOs pause AI development ‘in the interest of humanity’ 2026-08-10 at 16:47 By Ryan King Sen. Bernie Sanders gave an ultimatum to the CEOs of Anthropic, Meta, and OpenAI, warning them to pause the development of artificial intelligence now or else have lawmakers do it for them. This article is an…

  • Metabase zero-day exploited to access Framework customer data

    Metabase zero-day exploited to access Framework customer data 2026-08-10 at 16:42 By Zeljka Zorz Framework, the San Francisco-based company that designs repairable and upgradeable laptops, has suffered a data breach after attackers managed to exploit a zero-day vulnerability in the Metabase business intelligence service. According to the notification sent to affected Framework customers, the attackers…

  • Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development

    Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development 2026-08-10 at 16:19 By North Korea’s state hackers are no longer content to type prompts into public chatbots. One of the country’s main espionage groups has begun running artificial intelligence (AI) offline on its own servers, connecting document-search tools to files in its…

  • Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users

    Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users 2026-08-10 at 16:19 By Sinisa Markovic Microsoft is changing how Entra ID handles MFA for people who sign in with Windows Hello for Business (WHfB) or macOS Platform Single Sign-On (PSSO). The rollout reaches worldwide and GCC tenants starting…

  • ‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad

    ‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad 2026-08-10 at 15:59 By Ionut Arghire An AI agent executes instructions that an attacker has planted in the log or alert that records a blocked request word for word. The post ‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad appeared first on SecurityWeek.…

  • Ransomware Now Shows Up in Nearly Half of All Breaches: A Survival Playbook for Lean Security Teams

    Ransomware Now Shows Up in Nearly Half of All Breaches: A Survival Playbook for Lean Security Teams 2026-08-10 at 15:44 By Ashish Khaitan Ransomware stopped being an isolated incident type in 2025. It became the dominant force behind the modern breach landscape, and the ransomware data breach statistics from Cyble’s own tracking make the shift…

  • New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA

    New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA 2026-08-10 at 15:25 By Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable passwords and resist phishing. The attacks instead reused signed authentication material that Windows had…

  • New Jersey, Alabama Join States Targeted in Water Cyberattacks

    New Jersey, Alabama Join States Targeted in Water Cyberattacks 2026-08-10 at 14:44 By Eduard Kovacs Hackers linked to Iran targeted industrial control systems (ICS) at water facilities in at least a dozen US states. The post New Jersey, Alabama Join States Targeted in Water Cyberattacks appeared first on SecurityWeek. This article is an excerpt from…

  • N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577

    N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577 2026-08-10 at 14:34 By Zeljka Zorz To help customers fend off ongoing attacks, N-able released a second security hotfix for N‑central, its monitoring and management (RMM) solution popular with managed service providers (MSPs). “Hotfix 2 is required, even if you already applied the earlier hotfix.…

  • Meta’s Mark Zuckerberg pushes positive AI message, calls for open-source approach to beat China

    Meta’s Mark Zuckerberg pushes positive AI message, calls for open-source approach to beat China 2026-08-10 at 13:59 By Ariel Zilber Amid AI doomerism, Meta CEO Mark Zuckerberg is continuing his attempt at positive messaging about the tech in a new manifesto while calling on Washington to lower barriers for US open-source developers to help them…

  • Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility

    Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility 2026-08-10 at 13:01 By Eduard Kovacs CERT.PL said this appears to be the first instance of a private APN being used as an attack vector. The post Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility appeared first on SecurityWeek. This article…

  • OpenAI risks White House relationship with hiring of ‘nuisance’ AI policy executive: sources

    OpenAI risks White House relationship with hiring of ‘nuisance’ AI policy executive: sources 2026-08-10 at 13:00 By Thomas Barrabi Ball infuriated Trump AI officials last month after claiming that the White House should create “regulatory risk” — or new rules imposing consequences on US firms — to discourage use of Chinese AI models. This article…

  • CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability

    CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability 2026-08-10 at 12:31 By Ionut Arghire The critical-severity flaw allows unauthenticated, remote attackers to execute arbitrary commands. The post CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Anthropic to put AI in charge of reviewing Claude Code actions by default

    Anthropic to put AI in charge of reviewing Claude Code actions by default 2026-08-10 at 12:13 By Anamarija Pogorelec Anthropic will make auto mode in Claude Code the default for new sessions on Pro, Max, and Team plans starting August 14. Users who previously selected a different default may receive a one-time prompt asking whether…

  • The Crime Began Well Before the Breach

    The Crime Began Well Before the Breach 2026-08-10 at 12:00 By The image most security professionals still carry of perimeter crime is the opportunist: the actor who spots an open gate, grabs what is within reach, and flees. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

  • Corporate Data Stolen in Levi Strauss Cyberattack

    Corporate Data Stolen in Levi Strauss Cyberattack 2026-08-10 at 11:55 By Ionut Arghire Using social engineering, a threat actor accessed the computers of three employees and exfiltrated data from them. The post Corporate Data Stolen in Levi Strauss Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

  • Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials

    Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials 2026-08-10 at 10:38 By Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro (“solidity-pro”) that has been observed delivering a browser wallet and credential stealer. The names of the extensions are below – helper-beeps.solidity-pro web3devtoolsx.solidity-pro Although…

  • UK regulators to prepare tokenized gold framework: Report

    UK regulators to prepare tokenized gold framework: Report 2026-08-10 at 10:25 By Cointelegraph by Zoltan Vardai The UK’s FCA is reportedly preparing a regulatory framework for tokenized gold and how these products may be used as collateral assets in wholesale markets. This article is an excerpt from Cointelegraph.com News View Original Source

  • OpenAI locks down Astra over potential critical cyber capabilities

    OpenAI locks down Astra over potential critical cyber capabilities 2026-08-10 at 10:09 By Anamarija Pogorelec OpenAI’s internal evaluation of its upcoming model, Astra, found significant advances in agentic coding and cybersecurity, leading the company to conclude that it cannot rule out the model reaching the critical capability level for cybersecurity under its Preparedness Framework. The…

  • GitHub Dependabot malware alerts now cover eight ecosystems

    GitHub Dependabot malware alerts now cover eight ecosystems 2026-08-10 at 10:01 By Mirko Zorz GitHub has flagged npm malware since March 2026. Anyone pulling in a bad PyPI, Maven, RubyGems, NuGet, Go, crates.io, or PHP Composer package has had no such warning, because GitHub’s malware detection only ever watched one ecosystem. That changed this month.…

  • Modern Wireless-First Security Solutions Deliver Multiple Benefits for Mixed-Use Properties

    Modern Wireless-First Security Solutions Deliver Multiple Benefits for Mixed-Use Properties 2026-08-10 at 10:00 By The most common longstanding security and safety challenges of mixed-use properties generally fall into 4 categories.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

  • OpenAI’s Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause

    OpenAI’s Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause 2026-08-10 at 08:50 By OpenAI has announced that it’s pausing some “internal activities” involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. In response to the discovery, the…

Browse older archives

Scroll to Top