August 2026

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads 2026-08-20 at 23:22 By The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that added a typosquatted dependency whose build script downloaded and executed a remote payload during compilation. […]

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts 2026-08-20 at 22:59 By Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, governments, and think tanks across Europe, as well as academia and think tanks within

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More 2026-08-20 at 22:12 By A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data 2026-08-20 at 21:12 By Adversa AI has disclosed an attack technique that it says can cause xAI’s Grok chatbot to send a user’s name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user

How Retailers Are Approaching Modernization 2026-08-20 at 20:00 By Modern difficulties are shaping how retail organizations approach modernization. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure 2026-08-20 at 19:59 By The U.S. government on Wednesday warned of an “active threat” targeting critical infrastructure organizations in the country using artificial intelligence (AI)-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers (PLCs) to conduct reconnaissance and capability development using

UC Berkeley professor who criticized student math abilities admits to using AI to help write viral op-ed 2026-08-20 at 19:31 By Titus Wu She said huge portions of her students are failing to keep up with college calculus and she’s forced to teach middle-school algebra and fractions to students. This article is an excerpt from

OpenAI confirms ChatGPT Outage 2026-08-20 at 18:55 By On August 19, OpenAI confirmed a ChatGPT outage affecting users worldwide.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

9M Images Exposed by Facial Recognition Platform 2026-08-20 at 18:00 By 450.2 gigabytes of data were exposed in a public database with no password protection or encryption. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE 2026-08-20 at 16:48 By Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability (“GHSA-864f-rcv7-6rh4”), which

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers 2026-08-20 at 16:35 By Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the cloud computing and virtualization technology company, the issues affect customer-managed NetScaler ADC and NetScaler

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution 2026-08-20 at 16:24 By A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability in question is CVE-2026-73570 (CVSS score: 8.9), which refers to a case of