Uncategorized

Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug 2026-08-05 at 17:27 By HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django. The three most serious: An unauthenticated flaw in Veeam’s console that hands over a managed agent’s credentials, […]

New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch 2026-08-05 at 15:47 By A memory corruption flaw in the Linux kernel’s Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured distributions, and a public exploit ships with pre-built records for roughly 800 kernel […]

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk 2026-08-05 at 15:47 By Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microsoft’s real authentication page. Once access and refresh tokens are issued, attackers may retain […]

Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data 2026-08-05 at 14:52 By A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting information about the systems and development environments on which they were installed. The “evil twin” extensions were uploaded to the […]

Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup 2026-08-05 at 14:04 By An unauthenticated attacker can read any file the service account can access on Gitea, the self-hosted Git platform, in versions 1.22.1 through 1.27.0. No login, no repository write access. A public repository and crafted Org-mode markup are enough. The […]

Leaked n8n API Tokens Exposed Live Instances to Credential Theft 2026-08-05 at 13:35 By GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could use them to access sensitive data and downstream credentials without exploiting a software vulnerability. We scanned public GitHub commits for exposed […]

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself 2026-08-05 at 12:54 By An agent running Anthropic’s Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project during a cyber evaluation by the UK’s AI Security Institute. When a bystander […]

CISA Flags Langflow RCE, Tomcat, and N-central Flaws as Actively Exploited 2026-08-05 at 12:54 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on August 5, 2026, added three flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild. The list of vulnerabilities is as follows – CVE-2026-9198 (CVSS […]

Mobile Application Security Fails to Match Levels of AI Use 2026-08-05 at 12:00 By Organizations face mobile app security struggles.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Majority of Organizations Lack Drone Mitigation Due to Legal Restrictions 2026-08-05 at 12:00 By Airports and other organizations lack counter-drone security plans. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Building Public Trust in AI‑Enabled Security 2026-08-05 at 10:00 By Despite its widespread adoption in industrial and personal contexts, only 66% of people use AI, and only 46% trust it. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows Installer 2026-08-05 at 08:47 By Cybersecurity researchers have disclosed what has been described as a “long-standing supply chain attack” on QuickFox, a virtual private network (VPN) and network acceleration tool designed for overseas Chinese users. According to Fortinet FortiGuard Labs, the supply chain attack has […]

College students’ use of AI has surged — despite boos at graduation ceremonies 2026-08-05 at 00:48 By mvartabediancap, Marc Vartabedian The share of business school students relying on artificial intelligence as a routine part of their academic experience has surged over the past few years, according to a new survey. This article is an excerpt […]

Apple asks judge to slam breaks on OpenAI’s hardware ambitions, latest twist in high-stakes suit 2026-08-05 at 00:16 By James Franey OpenAI said Apple now admits its outside lawyers emailed the wrong man after mixing up two Asian surnames and the company only came clean once OpenAI pointed out the blunder. This article is an […]

Author who lost $2M book deal over AI concerns claims allegations are racially motivated: ‘Definitely innocent!!!’ 2026-08-05 at 00:14 By Alexandra Steigrad Jerry Falade spoke out on Tuesday after his own reps pulled the plug on the sale of his first crime novel, “Call Me, I’ll Hide the Body.” This article is an excerpt from […]

Parent believe children should be taught digital literacy at an early age, new survey shows 2026-08-04 at 22:16 By SWNS As screens become a bigger part of childhood, the average parent says digital literacy education should start before kindergarten, according to new research. This article is an excerpt from Latest Technology News | New York […]

TikTok settles trio of social media addiction lawsuits in Los Angeles 2026-08-04 at 20:42 By Thomas Barrabi The terms of the TikTok settlements are confidential and subject to the finalization of written settlement agreements, plaintiffs’ attorneys Joseph VanZandt of Beasley Allen and Emily Jeffcott of Morgan & Morgan said in a joint statement. This article […]

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens 2026-08-04 at 20:27 By The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication […]

Things You Won’t Want to Miss at Black Hat USA 2026 2026-08-04 at 19:24 By Paul Miller If you thought AI was a focus last year, buckle up This article is an excerpt from SECURITY.COM View Original Source

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks 2026-08-04 at 16:30 By A credential-stealing npm worm that first appeared in [email protected] spread beyond the Keyv and Cacheable namespaces into hundreds of packages across multiple organizations on August 4, 2026. SafeDep verified 353 poisoned versions across 79 package names in […]