Uncategorized

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution 2026-08-21 at 09:06 By Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required. The vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is […]

Army unit offering 4 bonus off days upon release of Grand Theft Auto VI to soldiers who reenlist 2026-08-21 at 01:06 By Associated Press Commanders of the 9th Brigade Engineer Battalion based at Fort Stewart, Georgia, believe free time to indulge in the latest entry in the Grand Theft Auto series. This article is an

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads 2026-08-20 at 23:22 By The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that added a typosquatted dependency whose build script downloaded and executed a remote payload during compilation.

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts 2026-08-20 at 22:59 By Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working in academia, aerospace and defense, governments, and think tanks across Europe, as well as academia and think tanks within

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More 2026-08-20 at 22:12 By A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against defenses. Legitimate apps help malware blend in. A weak header check opens a path to

New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data 2026-08-20 at 21:12 By Adversa AI has disclosed an attack technique that it says can cause xAI’s Grok chatbot to send a user’s name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user

How Retailers Are Approaching Modernization 2026-08-20 at 20:00 By Modern difficulties are shaping how retail organizations approach modernization. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure 2026-08-20 at 19:59 By The U.S. government on Wednesday warned of an “active threat” targeting critical infrastructure organizations in the country using artificial intelligence (AI)-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable Logic Controllers (PLCs) to conduct reconnaissance and capability development using

UC Berkeley professor who criticized student math abilities admits to using AI to help write viral op-ed 2026-08-20 at 19:31 By Titus Wu She said huge portions of her students are failing to keep up with college calculus and she’s forced to teach middle-school algebra and fractions to students. This article is an excerpt from

OpenAI confirms ChatGPT Outage 2026-08-20 at 18:55 By On August 19, OpenAI confirmed a ChatGPT outage affecting users worldwide.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

9M Images Exposed by Facial Recognition Platform 2026-08-20 at 18:00 By 450.2 gigabytes of data were exposed in a public database with no password protection or encryption. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE 2026-08-20 at 16:48 By Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability (“GHSA-864f-rcv7-6rh4”), which

Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers 2026-08-20 at 16:35 By Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the cloud computing and virtualization technology company, the issues affect customer-managed NetScaler ADC and NetScaler

Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution 2026-08-20 at 16:24 By A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability in question is CVE-2026-73570 (CVSS score: 8.9), which refers to a case of

Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments 2026-08-20 at 15:01 By Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date a point-of-sale (POS) terminal reads over near-field communication (NFC), without breaking any of

Why “Shady AI” is Security’s Next Big Governance Problem 2026-08-20 at 14:45 By In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it.  The incident began when a Meta employee posted a technical question on

What Happens When Two Iconic Brands Unite? 2026-08-20 at 13:00 By Monica White Symantec® CBX is the perfect marriage of Symantec and Carbon Black® technologies into a unified XDR platform This article is an excerpt from SECURITY.COM View Original Source

Apple News, Google promote outlets that endorse Dem presidential candidates — while shutting out Republicans: study 2026-08-20 at 13:00 By Thomas Barrabi The most-promoted news outlets on Apple News and Google News haven’t endorsed a Republican in the last 10 presidential elections — the latest sign of alleged anti-conservative bias, according to a new analysis.

Abdul El-Sayed reveals he would take socialist plan a ‘step further’ than Bernie Sanders for key US industry 2026-08-20 at 04:38 By Fox News El-Sayed said he wanted to “take it a step further” than Bernie Sanders’ public ownership model for a major US industry. This article is an excerpt from Latest Technology News |

Mission to save NASA’s aging Swift space telescope called off after rescue spacecraft loses control 2026-08-20 at 00:30 By Associated Press The mission to save NASA’s sinking Swift Observatory was called off Wednesday, dooming the telescope to a fiery reentry later this year. This article is an excerpt from Latest Technology News | New York