Uncategorized

Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access 2026-08-04 at 16:11 By Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom software updates, business document reviews, and system maintenance utilities to stealthily deploy Remote Monitoring and Management (RMM) programs like ConnectWise […]

Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent 2026-08-04 at 15:33 By Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python repository. Pillar Security showed that a public GitHub issue could manipulate a triage agent into triggering a privileged code-fixing agent. The researchers said the […]

When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted 2026-08-04 at 15:33 By The cybersecurity industry has spent decades assuming that offensive capability scales with technical expertise. That assumption is starting to break. Security teams have long estimated risk by ranking attacker sophistication. Nation-state actors sat at one end. Organized criminal […]

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT 2026-08-04 at 14:14 By A new Russian loader-as-a-service (LaaS) codenamed DOUBLECUP has been using ClickFix lures as a way to stage malware-laced PNG images in victims’ browser cache and ultimately deliver CountLoader and a previously undocumented remote access trojan called DeviceManager. “The first […]

New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root 2026-08-04 at 13:36 By cPanel has patched a flaw that let an authenticated hosting customer execute SQL in the database’s root context, crossing the privilege boundary between a cPanel account and the server’s administrative database identity. It shipped in a targeted security […]

CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises 2026-08-04 at 12:25 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild. The vulnerability, tracked as CVE-2026-18577 (CVSS score: […]

Browser Security in the Age of Mythos: How AI Is Driving a Surge in Browser Risk Exposure 2026-08-04 at 10:00 By The patch tsunami is here, and browsers are absorbing the worst of it. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users 2026-08-03 at 22:28 By Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments. One of […]

New California law will change the internet forever as ‘digital fingerprints’ added 2026-08-03 at 21:28 By Marissa Matozzo The goal is to make the internet a little less of a Wild West. This article is an excerpt from Latest Technology News | New York Post View Original Source

NASA opens first major new wind tunnel in over 40 years in Virginia 2026-08-03 at 20:00 By Fox News NASA opened its first major new wind tunnel in more than 40 years Friday, marking a milestone for future aviation and space-exploration research. This article is an excerpt from Latest Technology News | New York Post View […]

Elon Musk’s SpaceX aims to shake off AI spending fears, stock slump in first-ever earnings report 2026-08-03 at 19:56 By Thomas Barrabi SpaceX, which has lost more than $500 billion in market value since its debut in June, will announce its second-quarter results after the bell alongside chipmaker AMD. Tech stocks have been under pressure […]

Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts 2026-08-03 at 19:24 By Malware running as an ordinary user on a Windows machine can sign into a victim’s passkey-protected accounts without a fingerprint, a PIN, or anything at all appearing on the victim’s screen. Unit 42 detailed three attack paths against Chrome’s Google Password […]

INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws 2026-08-03 at 19:15 By The INC Ransomware operation has emerged as the “dominant threat actor” exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances. In a report published over the weekend, Resecurity said it observed the INC […]

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks 2026-08-03 at 17:03 By This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than […]

The health-threatening AI tech banned in EU this week — while US remains unregulated 2026-08-03 at 15:59 By Patrice Peck From heightened stress responses to subtle manipulation, experts say AI’s hidden health risks are only beginning to emerge. This article is an excerpt from Latest Technology News | New York Post View Original Source

FOMO in the SOC: Where AI Platforms like Claude Actually Fit 2026-08-03 at 14:30 By AI is moving incredibly fast, and every security leader is feeling the pressure to keep up. AI platforms like Claude, Codex and Cursor are already helping security teams write detections, investigate alerts, summarize incidents, and automate repetitive work. The conversation […]

PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web 2026-08-03 at 14:27 By The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web. The data included names, organisations and work email addresses belonging to police officers, police staff, criminal […]

Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS 2026-08-03 at 13:49 By An unknown Chinese-threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit. Attack surface management platform Censys said it identified the threat actor running more than […]

N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete 2026-08-03 at 12:14 By N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers. Its first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 […]

Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code 2026-08-03 at 12:14 By Three high-severity security flaws have been disclosed in Hugging Face’s Diffusers library that could allow crafted model repositories to stealthily execute arbitrary code on machines that load it, opening the artificial intelligence (AI) supply chain to security risk. “These vulnerabilities […]