Cybersecurity and other IT news aggregator

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes 2026-08-01 at 20:17 By An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only…

Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites 2026-08-01 at 13:01 By Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported…

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction 2026-08-01 at 10:12 By Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on…

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware 2026-08-01 at 09:29 By A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report. Researchers track the operation as CaptiveCrunch…

The Execution Gap: Why Great Security Design Doesn’t Always Deliver Great Security 2026-08-01 at 07:00 By Walk through almost any modern data centre and you’ll find some of the most advanced physical security technology ever deployed. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk 2026-07-31 at 21:52 By A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025. These targeted organizations operate…

AI in Healthcare: Reducing Risk in the Emerging Malpractice Frontier 2026-07-31 at 21:37 By Artificial intelligence is transforming healthcare. But with these advances comes a new category of legal risk: AI-related malpractice liability. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Social media companies sued over deaths of 4 teens as pressure increases for child safety 2026-07-31 at 21:17 By Associated Press The four teens who died by suicide each experienced harms including social media addiction, severe sleep deprivation, depression, anxiety and suicidal ideation after years of using the social platforms, the complaint states. This article…

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm 2026-07-31 at 21:01 By Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted…

Roomba-style vacuums are ‘advanced robotic devices’ — and a threat to national security: FCC 2026-07-31 at 20:30 By Aurielle Weiss Your robotic vacuum could be spying on you. This article is an excerpt from Latest Technology News | New York Post View Original Source

Symantec DSPM is Here To Deliver Deeper Data Insights 2026-07-31 at 19:07 By Namrata Shiggaon How unified visibility and enforcement can help organizations protect their data in the AI era This article is an excerpt from SECURITY.COM View Original Source

Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined 2026-07-31 at 19:07 By Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined. Both versions were released last…

Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw 2026-07-31 at 19:07 By An academic study has disclosed a “widespread class” of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service (DoS) attacks and even session hijacking, allowing an attacker to seize control of…

How Election Manipulation Is Shifting from Hacks to Headlines 2026-07-31 at 19:00 By Election security has shifted from protecting systems to protecting trust.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies 2026-07-31 at 17:45 By Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then click ads on websites run by the same operators. Researchers named the operation…

Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations 2026-07-31 at 16:00 By Anthropic on Thursday became the latest artificial intelligence (AI) company to reveal that three of its models, including Claude Opus 4.7, Mythos 5, and an unnamed research model, had breached three unnamed organizations during cybersecurity testing without…

Short sellers have made a fortune betting against Elon Musk’s SpaceX — but the party won’t last forever 2026-07-31 at 14:57 By Charles Gasparino SpaceX is filled with risks, if the shorts are right. This article is an excerpt from Latest Technology News | New York Post View Original Source

6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026 2026-07-31 at 14:24 By Device code phishing – the abuse of the OAuth 2.0 device authorization grant to steal access tokens – has evolved from a niche red-team technique to an industrial-scale threat in under six months. Designed for input-constrained devices like smart…

Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks 2026-07-31 at 14:21 By Palo Alto Networks’ Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further…