Uncategorized

Google’s Jeff Dean — chief scientist for 27 years — leaving during AI leadership overhaul for startup 2026-08-06 at 03:07 By Taylor Herzlich Google’s current chief scientist is leaving to start his own AI startup, Discovery Loop, with three other company veterans, according to a company blog post. This article is an excerpt from Latest […]

Bloodbath at Visa as top execs making mega bucks get canned from California offices 2026-08-06 at 00:27 By Titus Wu Payment processing giant brutally cut 2,600 jobs, sparing no one — not even top executives. This article is an excerpt from Latest Technology News | New York Post View Original Source

Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports 2026-08-05 at 23:27 By Two security flaws in Paperclip could let attackers execute commands on a network server or a developer’s computer. Paperclip is an open-source control plane for teams of artificial intelligence (AI) agents, and both paths rely on importing a malicious

Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt 2026-08-05 at 23:27 By Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access to artificial intelligence (AI) models on underground cybercrime forums and messaging platforms. One such service, Poison Claude, claims to offer access to Anthropic’s large language models

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures 2026-08-05 at 21:44 By A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure, a change Microsoft Threat Intelligence tracked on infrastructure it had been watching for weeks. The server-side gate

OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes 2026-08-05 at 21:33 By OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial intelligence (AI) chatbot ChatGPT to facilitate a wide range of investment, romance, gambling, and law enforcement impersonation schemes. To that end, it banned a coordinated network of

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses 2026-08-05 at 18:55 By Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2) technique that conceals the C2 server IP address inside a made-up destination address of a completely empty Ethereum transfer. The new dead drop resolver approach, observed in two trojanized

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug 2026-08-05 at 17:27 By HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django. The three most serious: An unauthenticated flaw in Veeam’s console that hands over a managed agent’s credentials,

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch 2026-08-05 at 15:47 By A memory corruption flaw in the Linux kernel’s Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk 2026-08-05 at 15:47 By Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microsoft’s real authentication page. Once access and refresh tokens are issued, attackers may retain

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data 2026-08-05 at 14:52 By A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting information about the systems and development environments on which they were installed. The “evil twin” extensions were uploaded to the

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup 2026-08-05 at 14:04 By An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, no repository write access. A public repository and crafted Org-mode markup are enough. The

Leaked n8n API Tokens Exposed Live Instances to Credential Theft 2026-08-05 at 13:35 By GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive data and downstream credentials without exploiting a software vulnerability. We scanned public GitHub commits for exposed

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself 2026-08-05 at 12:54 By An agent running Anthropic’s Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project during a cyber evaluation by the UK’s AI Security Institute. When a bystander

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited 2026-08-05 at 12:54 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows – CVE-2026-9198 (CVSS

Mobile Application Security Fails to Match Levels of AI Use 2026-08-05 at 12:00 By Organizations face mobile app security struggles.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Majority of Organizations Lack Drone Mitigation Due to Legal Restrictions 2026-08-05 at 12:00 By Airports and other organizations lack counter-drone security plans. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Building Public Trust in AI‑Enabled Security 2026-08-05 at 10:00 By Despite its widespread adoption in industrial and personal contexts, only 66% of people use AI, and only 46% trust it. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer 2026-08-05 at 08:47 By Cybersecurity researchers have disclosed what has been described as a “long-standing supply chain attack” on QuickFox, a virtual private network (VPN) and network acceleration tool designed for overseas Chinese users. According to Fortinet FortiGuard Labs, the supply chain attack has

College students’ use of AI has surged — despite boos at graduation ceremonies 2026-08-05 at 00:48 By mvartabediancap, Marc Vartabedian The share of business school students relying on artificial intelligence as a routine part of their academic experience has surged over the past few years, according to a new survey. This article is an excerpt