Uncategorized

Manchester Airports Breach Impacts 8.7M 2026-08-28 at 15:00 By 8.7 million customers’ data was accessed in an airport breach, most information being emails and Wi-Fi sign ups. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

China-Made ZBT Routers Ship With Two Implants Giving Unauthenticated Attackers Root Access 2026-08-28 at 14:28 By VulnCheck has disclosed two previously undocumented factory implants in firmware for routers built by Shenzhen Zhibotong Electronics (ZBT), each of which gives an unauthenticated remote attacker the ability to run commands as root on affected devices. The implants, named

Three CVSS 10.0 ServiceNow Flaws Could Let Unauthenticated Attackers Execute Code and SQL 2026-08-28 at 14:20 By ServiceNow has released patches for four security flaws impacting the ServiceNow AI Platform, three of them rated 10.0 on the CVSS scoring system and exploitable, in certain circumstances, by an unauthenticated attacker. The company said it deployed a

NASA set to launch next-generation telescope to unlock universe’s deepest mysteries 2026-08-28 at 13:28 By FOX Weather The mission aims to uncover more information about some of the universe’s greatest mysteries, including dark energy. This article is an excerpt from Latest Technology News | New York Post View Original Source

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server 2026-08-28 at 12:45 By cPanel has released patches for a security flaw affecting domain parking and addon domain functionality in cPanel and WebHost Manager (WHM), which could allow code execution as the root user. The vulnerability, assigned the CVE identifier

PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions 2026-08-28 at 11:25 By PaperCut has alerted customers that bad actors are actively exploiting a vulnerability impacting all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. The company has released an emergency patch for v25 and v26 to

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations 2026-08-28 at 11:20 By Cybersecurity researchers have flagged a fresh set of campaigns targeting government and diplomatic organizations in Romania, Spain, and Türkiye between late September 2025 and early April 2026. These campaigns, per Recorded Future Insikt Group, have led to the deployment of a previously

US judge rules Pentagon blacklisting of Anthropic unlawful 2026-08-28 at 09:10 By Reuters A US judge on Thursday blocked the Pentagon’s blacklisting of Anthropic, the latest turn in the Claude maker’s high-stakes fight with the military over AI safety on the battlefield. This article is an excerpt from Latest Technology News | New York Post View Original Source

Report Finds AI Security Fails to Match AI Usage 2026-08-28 at 07:00 By A report by Guardrail Technologies analyzed how S&P 500 companies document their AI usage alongside their AI cybersecurity measures.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face 2026-08-28 at 00:01 By OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior as early as late May. The incident,

Mosquito killer retailing for $988 swears to battle rising California West Nile threat 2026-08-27 at 23:59 By Christopher Edwards Earlier this month, the second Californian this year died from West Nile Virus. This article is an excerpt from Latest Technology News | New York Post View Original Source

LAX Security Guard Found With 24 Pounds of Fentanyl, Facing Charges 2026-08-27 at 20:00 By A security guard was allegedly caught with fentanyl in the LAX restroom.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Learn How to Build Security Operations Ready for AI-Powered Attacks 2026-08-27 at 19:57 By Security teams have spent years trying to detect threats faster. AI is changing the harder part: how much time defenders have left to act. Advanced AI models can now help attackers discover vulnerabilities, generate exploit code, and move through weaknesses faster

Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks 2026-08-27 at 19:57 By The Australian Federal Police (AFP) has charged two Western Australian men with a combined total of 14 offences over their alleged role in TeamPCP, the cybercrime group behind the March 2026 compromise of the open-source security scanners Trivy and Checkmarx

DOJ, NASA, Others Among Victims of Chinese State-Sponsored Hack 2026-08-27 at 19:00 By The DOJ and other federal entities were targeted by a Chinese state-sponsored actor. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE 2026-08-27 at 18:13 By Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories 2026-08-27 at 18:12 By A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into a machine. The rest of the week gets stranger: botnets borrowing

Parents rip Meta’s attempt to curb children from its social media sites after historic $18B settlement: ‘Not enough’ 2026-08-27 at 17:14 By David Landsel, Faran Krentcil Tech giant Meta agreed to a historic $18B payout to 47 U.S. states on Wednesday — as part of an effort to settle claims that social media has harmed

Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers 2026-08-27 at 16:39 By Cybersecurity researchers have disclosed details of a vulnerability in Amazon Kiro, an artificial intelligence (AI)-powered, agentic integrated development environment (IDE), that could facilitate data exfiltration via prompt injection and Kiro Powers. The security flaw, which does not have a CVE

12.9M Exposed by Carhartt Data Breach 2026-08-27 at 15:03 By More than 50 gigabytes of documents were reportedly stolen. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source