Uncategorized

Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee’s Client 2026-08-11 at 22:08 By Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter’s. The flaw sat in the annotation tool, the feature that lets participants draw […]

Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands 2026-08-11 at 21:36 By The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the country by masquerading as recruiters to trick them into installing […]

AI assistant goes rogue, hacks Australian gym website in stunning breach: report 2026-08-11 at 20:30 By Thomas Barrabi An Australian man asked his OpenClaw AI assistant – an open-source software whose AI agents can perform real-world tasks — to book him a spot in a morning class, Australian outlet ABC reported. Instead of just following […]

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE 2026-08-11 at 19:47 By Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent. The flaw, tracked as CVE-2026-55040 (CVSS 9.1), affects SharePoint […]

DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt 2026-08-11 at 19:35 By The ransomware group known as DeadLock has been observed using decentralized infrastructure to facilitate victim communications and data leak operations in a bid to improve operational resilience. “Its recovery ecosystem combines the Session messaging network with blockchain-backed services […]

Film Festival Data Leak Exposes A-List Directors, Actors, Celebrities 2026-08-11 at 19:00 By Records associated with Tribeca Film Festival were exposed.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development 2026-08-11 at 16:11 By OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5.6‑Cyber that it said is focused on vulnerability research, penetration testing, and incident response. “Built on GPT‑5.6 Sol, it is trained to improve capabilities on several specialized cybersecurity tasks (e.g., finding zero-day vulnerabilities […]

A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices 2026-08-11 at 15:05 By A malicious SIM card can order the device it sits in to run commands of the attacker’s choosing. On the cellular modules built into electric-vehicle chargers, industrial routers, and car telematics units, that is enough to […]

Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo 2026-08-11 at 15:04 By Mozilla has scrapped the cryptographic key behind Firefox and Thunderbird downloads for Linux after an unencrypted copy of it was committed by mistake to one of the company’s own private code repositories. That key is how a […]

Frontier AI Just Made the Race to Patch Vulns That Much Harder 2026-08-11 at 14:45 By Dominic Djannesari For the 99.9% of organizations bracing for an era of endless Zero Days, it’s time to act—and fast This article is an excerpt from SECURITY.COM View Original Source

Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers 2026-08-11 at 14:35 By Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North Korean operatives. Every virtual machine the company issued was recording. The onboarding paperwork is the part hiring teams can use. […]

Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11 2026-08-11 at 13:48 By Windows Plug and Play can be abused to fetch signed vendor software for an emulated USB device and execute privileged installation components that researchers chained to SYSTEM access on a fully updated Windows 11 machine. The same PnP path […]

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine 2026-08-11 at 09:55 By Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment. The plant […]

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins 2026-08-11 at 08:48 By Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform’s plugins team to temporarily disable their downloads. “Unlike traditional software supply chain attacks, zero source code files were modified […]

Mass Kidnapping Increased 154% from 2020 to 2025 2026-08-11 at 08:00 By 2026 will see an increase in kidnaps-for-ransom.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

As AI keeps tight grip on world, the thrill of collecting vintage computers is growing 2026-08-11 at 04:42 By Associated Press Software engineer Josh Dersch is among a growing community of vintage computer collectors saving classic machines from the digital dustbin. This article is an excerpt from Latest Technology News | New York Post View […]

Famed California bars forced to boot draconian surveillance system after privacy backlash 2026-08-11 at 02:00 By Marina Peña The bars Badlands and Toad Hall said they would stop using the AI-powered platform PatronScan, which was used to verify IDs and ages and flag problem patrons across all venues. This article is an excerpt from Latest […]

GameStop CEO Ryan Cohen mulls dropping $56B eBay takeover bid: report 2026-08-10 at 21:01 By Thomas Barrabi Cohen – who became a favorite of retail investors as GameStop rose to “meme stock” prominence – is instead considering proposing a partnership that would allow eBay access to GameStop’s base of approximately 1,600 US stores, Bloomberg reported, […]

Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development 2026-08-10 at 20:29 By AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fixes, and control risk at human speed. When software output jumps 10 to 50 times, the problem is […]

AI-Ready PAM: When Your Identity Security Solution Talks Back 2026-08-10 at 19:45 By Adam Roll How MCP turns PAM into an AI-ready source for faster reporting and compliance visibility This article is an excerpt from SECURITY.COM View Original Source