Uncategorized

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks 2026-08-03 at 17:03 By This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than […]

The health-threatening AI tech banned in EU this week — while US remains unregulated 2026-08-03 at 15:59 By Patrice Peck From heightened stress responses to subtle manipulation, experts say AI’s hidden health risks are only beginning to emerge. This article is an excerpt from Latest Technology News | New York Post View Original Source

FOMO in the SOC: Where AI Platforms like Claude Actually Fit 2026-08-03 at 14:30 By AI is moving incredibly fast, and every security leader is feeling the pressure to keep up. AI platforms like Claude, Codex and Cursor are already helping security teams write detections, investigate alerts, summarize incidents, and automate repetitive work. The conversation

PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web 2026-08-03 at 14:27 By The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web. The data included names, organisations and work email addresses belonging to police officers, police staff, criminal

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS 2026-08-03 at 13:49 By An unknown Chinese-threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys said it identified the threat actor running more than

N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete 2026-08-03 at 12:14 By N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers. Its first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7

Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code 2026-08-03 at 12:14 By Three high-severity security flaws have been disclosed in Hugging Face’s Diffusers library that could allow crafted model repositories to stealthily execute arbitrary code on machines that load it, opening the artificial intelligence (AI) supply chain to security risk. “These vulnerabilities

6 Crisis Response Best Practices (That Actually Hold Up When Things go Sideways) 2026-08-03 at 12:00 By An effective crisis response strategy requires flexibility and fast-acting solutions. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable 2026-08-03 at 11:05 By Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them. The vendor’s July 31 security bulletin says nearly undetectable changes to .fsa

When Cyberattacks Hit Medical Devices, Patients Pay the Price 2026-08-03 at 11:00 By When a cyberattack affects a medical device, the most important question isn’t what happened to the technology. It’s what happened to the patient.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Silicon Valley couple schemes Grammy winner out of millions over AI music: suit 2026-08-02 at 21:37 By Jeremy Louwerse Songwriter “Oak” Felder and music mogul partner Lucas Keller are suing Walter and Samia De Brouwer for $5M over stolen AI music software. This article is an excerpt from Latest Technology News | New York Post

Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes 2026-08-01 at 20:17 By An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only

Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites 2026-08-01 at 13:01 By Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported

Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction 2026-08-01 at 10:12 By Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware 2026-08-01 at 09:29 By A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report. Researchers track the operation as CaptiveCrunch

The Execution Gap: Why Great Security Design Doesn’t Always Deliver Great Security 2026-08-01 at 07:00 By Walk through almost any modern data centre and you’ll find some of the most advanced physical security technology ever deployed. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk 2026-07-31 at 21:52 By A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025. These targeted organizations operate

AI in Healthcare: Reducing Risk in the Emerging Malpractice Frontier 2026-07-31 at 21:37 By Artificial intelligence is transforming healthcare. But with these advances comes a new category of legal risk: AI-related malpractice liability. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Social media companies sued over deaths of 4 teens as pressure increases for child safety 2026-07-31 at 21:17 By Associated Press The four teens who died by suicide each experienced harms including social media addiction, severe sleep deprivation, depression, anxiety and suicidal ideation after years of using the social platforms, the complaint states. This article

HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm 2026-07-31 at 21:01 By Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted