Cybersecurity and other IT news aggregator

New WordPress Pre-Auth XSS Could Lead to PHP Code Execution – Patch ASAP 2026-08-07 at 15:56 By WordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the content management system. pwn.ai demonstrated how the flaw can be chained into PHP code execution on the server…

Growing Up The Hard Way 2026-08-07 at 14:55 By Open Source had a great childhood. For two decades it got to be a kid. It ran around barefoot, gave everything away, trusted strangers, and never once thought about who was watching. It ran the kind of lemonade stand that took IOUs from anyone who wandered…

18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers 2026-08-07 at 14:10 By A use-after-free bug in Linux’s SCTP networking code can be turned into full root on a host, and Tencent researchers say they used it to escape a container and reach the machine underneath. The flaw has existed since…

Tish James, Kathy Hochul’s pursuit of Kalshi raises questions about why they’re ignoring Polymarket 2026-08-07 at 14:00 By Charles Gasparino Kalshi argues the suit is a death blow to its business. This article is an excerpt from Latest Technology News | New York Post View Original Source

I tested the new Samsung Galaxy Watch9: The health tracker’s most exciting features 2026-08-07 at 12:59 By Carly Stern The new watch, on sale today, tracks fitness and sleep, measures antioxidants in the skin, and an even do a body composition scan. This article is an excerpt from Latest Technology News | New York Post…

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables 2026-08-07 at 12:32 By Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, expose mapped ports, and exhaust NAT tables. Presented at Black Hat USA…

Stop, Drop, and Roll 2026-08-07 at 12:00 By Insights from national fire prevention standards for active shooter prevention. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access 2026-08-07 at 11:52 By Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT) connection state to hijack active TCP sessions, spoof DNS responses, disclose victim IP addresses and mapped ports, and exhaust NAT tables. Presented…

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets 2026-08-07 at 11:18 By A GitHub issue opened by an account with no repository privileges was enough to execute code on the CI runners behind Anthropic’s and Google’s own coding-agent repositories. On OpenAI’s, it was enough to hijack the next agent…

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign 2026-08-07 at 09:50 By A new analysis has uncovered that the threat actor tracked as TeamPCP has been active on the cybercrime scene as far back as 2020, indicating the group has been compromising internet-facing infrastructure for years before training their…

As AI Outpaces Regulation, Trust is at Risk 2026-08-07 at 08:00 By AI will continue to outpace regulation. The question is not whether the gap exists, every CISO already knows it does. The question is who owns it. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Gavin Newsom dragged to court in self-driving truck battle that could change state forever 2026-08-06 at 22:26 By Titus Wu Gov. Gavin Newsom’s administration improperly rolled out regulations that pave the way for self-driving trucks on state roads, the union claimed. This article is an excerpt from Latest Technology News | New York Post View…

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts 2026-08-06 at 20:58 By Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is…

Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs 2026-08-06 at 20:13 By Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review. The security issues affect Cisco Catalyst SD-WAN Software, regardless of device…

‘Nostradamus of AI’ Leopold Aschenbrenner makes new $400M bet after Situational Awareness fund’s near-collapse 2026-08-06 at 19:56 By Thomas Barrabi Leopold Aschenbrenner, has made a new $400 million bet on a private company – just days after the near-implosion of his hedge fund, according to a report. This article is an excerpt from Latest Technology…

New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs 2026-08-06 at 19:17 By An unprivileged Linux program can time a hardware interrupt to land in the gap between a processor sanitizing its branch predictor and the kernel using it, re-poisoning the predictor after the defense has run. MIT CSAIL researchers…

ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories 2026-08-06 at 18:24 By Apparently, opening the thing is now enough. A repo can run before the first prompt, a package can hide among hundreds, and a harmless-looking PDF can finish the job. This week runs on cheap leverage: exposed servers, recycled…

Building Trust in AI Starts with Trustworthy Data 2026-08-06 at 18:00 By Enterprise AI is transitioning from the “does it work” phase to the “how can we adopt it safely” phase, creating an unprecedented and complex mix of opportunities and challenges for business leaders. This article is an excerpt from Subscribe to Security Magazine’s RSS…

The Detection Gap: MITRE ATT&CK T1053.005 2026-08-06 at 17:00 By Kirk Hasty MITRE ATT&CK Walkthrough: T1053.005 (Scheduled Task/Job: Scheduled Task) This article is an excerpt from SECURITY.COM View Original Source