2026

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More 2026-08-20 at 22:12 By A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to […]

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data 2026-08-20 at 21:12 By Adversa AI has disclosed an attack technique that it says can cause xAI’s Grok chatbot to send a user’s name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user […]

How Retailers Are Approaching Modernization 2026-08-20 at 20:00 By Modern difficulties are shaping how retail organizations approach modernization. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure 2026-08-20 at 19:59 By The U.S. government on Wednesday warned of an “active threat” targeting critical infrastructure organizations in the country using artificial intelligence (AI)-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers (PLCs) to conduct reconnaissance and capability development using […]

UC Berkeley professor who criticized student math abilities admits to using AI to help write viral op-ed 2026-08-20 at 19:31 By Titus Wu She said huge portions of her students are failing to keep up with college calculus and she’s forced to teach middle-school algebra and fractions to students. This article is an excerpt from […]

OpenAI confirms ChatGPT Outage 2026-08-20 at 18:55 By On August 19, OpenAI confirmed a ChatGPT outage affecting users worldwide.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

9M Images Exposed by Facial Recognition Platform 2026-08-20 at 18:00 By 450.2 gigabytes of data were exposed in a public database with no password protection or encryption. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE 2026-08-20 at 16:48 By Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability (“GHSA-864f-rcv7-6rh4”), which […]

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers 2026-08-20 at 16:35 By Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the cloud computing and virtualization technology company, the issues affect customer-managed NetScaler ADC and NetScaler […]

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution 2026-08-20 at 16:24 By A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability in question is CVE-2026-73570 (CVSS score: 8.9), which refers to a case of […]