access ai android api apple attack authentication backdoor breach business ceo china cisa cisco ciso cloud compliance control credentials crypto cve cyber cyberattack cybercrime cybersecurity data data-breach defense detection email exploit finance flaw framework fraud google governance government group hacker hacking healthcare identity infrastructure injection intelligence Internet jobs law leak linux malicious malware microsoft monitoring network open-source password phishing privacy ransomware remote-code-execution resilience risk russia scam service software strategy supply-chain technology theft threat tool unclassified update usa vulnerability windows zero-day
-
Zutrittskontrolle als Governance- und Cybersecurity-Priorität
First seen on datensicherheit.de Jump to article: www.datensicherheit.de/zutrittskontrolle-governance-cybersecurity-prioritaet also interesting: Top cyber threats to your AI systems and infrastructure The cybercrime industry continues to challenge CISOs in 2026 CISO’s predictions for 2026 The Cyber Express Weekly Roundup: AI Security Controls, Major Patch Releases, Public Sector Audits, and Emerging Online Scams
-
ISMG Editors: AI Is Supercharging Attackers
Also: CIOs Rethink Data in AI Rollouts, ShinyHunters Hits Biotech. In this week’s panel, four ISMG editors discussed new research showing how AI is making cyberthreat actors more capable, why the technology is forcing CIOs to rethink data platforms they spent years modernizing and a string of attacks in the biotech sector. First seen on…
-
Practice Management Firm Notifies 3.8M of 2025 Breach
Ohio-Based Unlimited Technology Systems Serves Thousands of Medical Practices. Practice management and financial software firm Unlimited Technology Systems is notifying 3.8 million people of an October 2025 data theft. The third-party vendor hack currently ranks as the largest health data breach reported to federal regulators so far in 2026. First seen on govinfosecurity.com Jump to…
-
Horizon3 Raises $250M to Prove What Attackers Can Exploit
Startup Says Autonomous Testing Can Demonstrate Business Impact Without Disruption. San Francisco-based Horizon3 raised a $250 million Series E funding round at a $2 billion valuation to expand autonomous testing across infrastructure, identity and web applications as AI gives attackers new ways to discover, exploit and traverse enterprise weaknesses at machine speed. First seen on…
-
AI Sandbox Failures Expose Need for Continuous Monitoring
Recent AI Incidents Show Sandbox Security Cannot Be Assumed. The fallout from the Hugging Face security incident continues with more artificial intelligence labs revealing that their models and agents either accessed the internet or escaped isolated test environments to hack into other companies. Frontier model labs can’t take sandbox containment as a given. First seen…
-
KI als Produktivitätstreiber: Beschäftigte gewinnen bis zu acht Stunden pro Woche
Tags: aiFirst seen on datensicherheit.de Jump to article: www.datensicherheit.de/ki-produktivitatstreiber-zeitgewinn-mitarbeiter also interesting: Companies Look to AI to Tame the Chaos of Event Security, Operations OpenAI Pitches GPT-5 as Faster, Smarter, More Accurate Exabeam Promotes Pete Harteveld To CEO For AI SecOps Push IT-Teams müssen Ordnung ins Chaos bringen Zu viele Tools, zu wenig Sicherheit
-
China Opens Cybersecurity Review of Palo Alto Networks Products
China has opened a cybersecurity review of Palo Alto Networks products, raising potential risks for critical infrastructure customers and foreign vendors. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cybersecurity/news-china-palo-alto-networks-cybersecurity-review/ also interesting: Security teams should act now to counter Chinese threat, says CISA Cybersecurity Snapshot: Study Raises Open Source Security Red Flags, as Cyber Agencies Offer…
-
Hackers Target Blackstone, CME and Other Wall Street Firms in Phone-Based Scam
Hackers targeted major financial firms with help-desk vishing and real-time MFA interception. Here’s how the campaign worked and how to respond. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-unc6671-financial-firms-vishing-extortion/ also interesting: 6 hot cybersecurity trends SMS Pools and what the US Secret Service Really Found Around New York TDL 008 – Defending the Frontline: Ransomware,…
-
Snowflake Hacker Pleads Guilty After Breaches Exposed Data of at Least 100 Million People
A hacker tied to the 2024 Snowflake customer breaches pleaded guilty after attacks exposed data tied to at least 100 million people. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-snowflake-hacker-guilty-data-breach/ also interesting: UK’s Advanced Faces 6M Pound Find After LockBit Attack American steel giant Nucor confirms data breach in May attack Nippon Steel Solutions suffered…
-
How AI Agents Widen the Enterprise Blast Radius
AWS’s Matt Girdharry and Varonis’ Matt Radolec on Data Security, Machine-Speed Risk. Agentic AI can act at machine speed across data, APIs and cloud services, expanding enterprise risk beyond traditional controls. AWS’ Matt Girdharry and Varonis’ Matt Radolec explain why AI governance, least privilege and runtime visibility now matter more than ever for security teams.…
-
AI Phishing Now Frighteningly Normal, Hard to Detect
StrongestLayer’s Alan LeFort on Personalization, Evasion and First-Seen Attacks. AI-generated phishing no longer looks unusual or obviously malicious, lending legacy filters ineffective. StrongestLayer CEO Alan LeFort explains how personalization, trusted infrastructure and evasion techniques are making first-seen attacks harder to detect. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/ai-phishing-now-frighteningly-normal-hard-to-detect-a-32466 also interesting: 5 key ways attack…
-
Metabase SQLi zero-day exploited in customer data-theft attacks
A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/framework-tally-disclose-metabase-data-theft-attacks/ also interesting: Cybersecurity Snapshot: Prompt Injection and Data Disclosure Top OWASP’s List of Cyber Risks for GenAI LLM Apps Top 7 zero-day…
-
Financial Services Under Fire From Rebranded Extortionists
What’s in a Name? Vishing-Savvy BlackFile Rebrands as Redact, Pink, Helix, Falcon. Data theft extortion group BlackFile claimed retire in May. Threat researchers at Google said telemetry and attack infrastructure shows that the group has carried on using a variety of new brand names and shifted its focus to targeting financial services. First seen on…
-
Security researchers scanned the Polish web and found courts, hospitals, and airports at risk of hacks
Researchers found common points of failure, like software used to organize and display web content, could have allowed hackers to run riot through government websites. First seen on techcrunch.com Jump to article: techcrunch.com/2026/08/07/security-researchers-scanned-the-polish-web-and-found-courts-hospitals-and-airports-at-risk-of-hacks/ also interesting: CISO success story: How LA County trains (and retrains) workers to fight phishing Critical infrastructure under attack: Flaws becoming weapon…
-
Experts say healthcare faces cybersecurity crisis: ‘These are patient safety issues’
Regulatory failures, funding constraints and industry consolidation have created serious hacking risks. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/healthcare-cybersecurity-crisis-def-con/827378/ also interesting: Cybersecurity Snapshot: Top Advice for Detecting and Preventing AI Attacks, and for Securing AI Systems 9 top bug bounty programs launched in 2025 9 top bug bounty programs launched in 2025 TDL 027…
-
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
A recent wave of cyber attacks targeting financial services, private equity, and professional services is attributed to a data extortion group known as UNC6671.”UNC6671 continues to rely on voice phishing (vishing) to target enterprise employees, posing as IT help desk staff facilitating mandatory, urgent security migrations. Significantly, the threat actor often contacts employees via their…
-
ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets
ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and cached credentials.The macOS-focused infection chain is designed to deliver a shell script that profiles the host and then fetches a macOS malware payload that’s compatible with the computer’s CPU architecture.”…
-
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems.”These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them deliver a powerful RAT and infostealer payload,”…
-
Unlimited Technology Systems breach impacts 3.8 million people
Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/unlimited-technology-systems-breach-impacts-38-million-people/ also interesting: How organizations can secure their AI code 5 things to know about ransomware threats in 2025 Top 10 Cybersecurity Predictions…
-
China-Linked Surveillance Platform Spans at Least 117 Servers, Targets Routers
LightSpy, a China-linked surveillance platform, has grown into an operation using at least 117 servers with verified router infections. At Black Hat USA, Arctic Wolf researchers Dmitry Bestuzhev and Dmitry Melikov said LightSpy has been identified in more than 13 countries, growing well beyond the spyware, active since at least 2018 and publicly documented in…
-
CVE-2026-16812: Critical Command Injection in Arista VeloCloud Orchestrator
First seen on resecurity.com Jump to article: www.resecurity.com/blog/article/cve-2026-16812-critical-command-injection-in-arista-velocloud-orchestrator also interesting: Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257) Cybersecurity Snapshot: Refresh Your Akira Defenses Now, CISA Says, as OWASP Revamps Its App Sec Top 10 Risks Cisco issues emergency patches for critical firewall vulnerabilities CISA Warns of Two Fortinet FortiSandbox Flaws Exploited…
-
Cybersecurity, Then & Now: A Visual Look at 20 Years of Change
Tags: cybersecuritySince 2006, Dark Reading has been at the forefront of covering cybersecurity. The more things change, the more they stay the same. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/cybersecurity-then-now also interesting: CISA Adds Sitecore CMS Code Execution Vulnerability to Exploited List Russian APT28 compromised Western logistics and IT firms to track aid to Ukraine…
-
Kimi K3 Bypasses Cyber Test With Answer From GitHub
Test Flaw Allowed Moonshot AI’s Model to Reach the Internet. Moonshot AI’s open-weight model Kimi K3 jumped its sandbox during a test of its cybersecurity abilities to locate an already worked-out solution on GitHub – behavior perfectly normal for coders but that raises red flags for artificial intelligence models. First seen on govinfosecurity.com Jump to…
-
Why ‘America First’ in AI Shouldn’t Mean ‘America Only’
Former US Cyber Director on Cooperation, AI Supply Chains and National Security. U.S. leadership in AI requires more than protecting domestic technology. Former U.S. National Cyber Director Chris Inglis says national security will depend on outperforming competitors, strengthening global supply chains and working with allies against shared AI risks. First seen on govinfosecurity.com Jump to…
-
US cyber ambassador nominee Cassady confirmed in Senate
Tags: cyberNTIA official Adam Cassady becomes the second person confirmed to be the State Department’s ambassador-at-large for cyber policy. First seen on therecord.media Jump to article: therecord.media/adam-cassady-confirmed-senate-cyber-ambassador also interesting: Why SMEs can no longer afford to ignore cyber risk Windows Defender Application Control Bypassed Through Browser Exploit Techniques Your Mobile Apps May Not Be as Secure…
-
Water utilities group partners with DEF CON offshoot for Water Watch Center
The National Rural Water Association and a group of cybersecurity experts have formed a program to help cash-strapped utilities face the increase in threats to their systems. First seen on therecord.media Jump to article: therecord.media/water-watch-center-utilities-def-con-franklin-nrwa also interesting: Ransomware goes postal: US healthcare firms receive fake extortion letters Attack time frames are shrinking rapidly. Here’s how…
-
AI Agents, Supply Chain Attacks, and Critical Flaws Define the Week in August 2026
Weekly summary of Cybersecurity Insider newsletters for August 2026, including Def Con and Black Hat conference coverage First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/weekly-roundup/ai-agents-supply-chain-attacks-and-critical-flaws-define-the-week-in-august-2026/ also interesting: AI, Quantum, and the New Threat Frontier: What Will Define Cybersecurity in 2026? 13 ways attackers use generative AI to exploit your systems Operation Epic Fury: Why exposure…
-
WordPress XSS2Shell Flaw Turns Simple Login Bug Into Full Server Takeover
WordPress XSS2Shell flaw enables admin takeover and remote code execution. Users should update to patched versions. Researchers at Pwn just published a report on a vulnerability chain they’re calling XSS2Shell, and the entry point is quite simple: type a username that doesn’t exist, and WordPress echoes it back with a tiny formatting flaw baked into…
-
More than half of AI-generated patches are broken
Research finds your AI generated security patch is more likely to fail than fully fix a vulnerability. It might even introduce brand new flaws to exploit along the way. First seen on cyberscoop.com Jump to article: cyberscoop.com/ai-code-patching-security-risks/ also interesting: Top 7 zero-day exploitation trends of 2024 Cybersecurity Snapshot: CISA’s Best Cyber Advice on Securing Cloud,…
-
AI-Generated Patches Fail Half the Time
Tags: aiA study of more than 6,000 patches found that even working patches can introduce new bugs, break something else, or are open to bypass. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/ai-generated-patches-fail-half-time also interesting: Kommentar von Dr. Christoph Matras, FPS – Data Scraping und Urheberrecht beim Training von KI-Modellen ESET World 2025: Cybersecurity Giant Expands…
-
New N-able Zero Day Puts MSPs on Defensive
Second Hotfix Issued for RMM Technology Widely Used by Managed Security Providers. Software developer N-able issued a second hotfix this week after more zero-day exploits against its remote management and monitoring tool. Successful attacks facilitate full account takeover. Hotfix 2 is required, even if you already applied the earlier hotfix, the company said. First seen…
-
Hackers Impersonate IT Support to Breach Leading Financial Companies
Hackers used fake IT help desks to steal MFA credentials, targeting over 200 firms, including major financial companies. A hacking campaign operating under names including Redact, Pink, Falcon, and Helix has built credential-stealing websites targeting employees at Blackstone, Bridgewater Associates, Apollo Global Management, Bain Capital, KKR, TPG, CME Group, Clearlake Capital, and Moody’s, among dozens…
-
Beware cut-price AI services that read your every word
f someone offered you 90% off the official price to access Claude, the powerful AI model from Anthropic, would you be tempted? It turns out that around 900 people were, and they may be regretting their decision. First seen on fortra.com Jump to article: www.fortra.com/blog/beware-cut-price-ai-services-read-your-every-word also interesting: 9 VPN alternatives for securing remote network access…
-
Military device manufacturer discloses cyber incident to SEC
IEH Corporation, which produces specialized products used in military satellites, missiles and fighter jets, said it discovered a cyberattack on Tuesday and immediately tried to contain it. First seen on therecord.media Jump to article: therecord.media/military-device-manufacturer-discloses-cyber-incident also interesting: Operation 999: Ransomware tabletop tests cyber execs’ response Oil Giant Halliburton Confirms Cyber Incident, Details Scarce Cyberangriff auf…
-
New Mexico judge orders Meta to pay $567 million in kids online safety case
Tags: unclassifiedThe money will be used to create a fund to mitigate social media harms, including by carving out $420 million for treatment for New Mexico youth who have been hurt on the platforms. First seen on therecord.media Jump to article: therecord.media/new-mexico-judge-orders-meta-567-million-kids-safety also interesting: Hewlett Packard’s Autonomy woes deepen Alarmo: Doom geht auch auf Nintendos Wecker…
-
Hackers grow more willing to destroy, not just disrupt, OT systems
Experts said the alarming trend has further stressed infrastructure providers that are already struggling with strong passwords, comprehensive logging and other basics. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/critical-infrastructure-destructive-cyberattacks-black-hat/827260/ also interesting: Cybersecurity Snapshot: U.S. Gov’t Urges Adoption of Memory-Safe Languages and Warns About Iran Cyber Threat Cybersecurity Snapshot: CISA Analyzes Malware Used in SharePoint…
-
Critical flaws allow hackers to exploit zero-touch provisioning process in TP-Link Omada
Attacks can cause widespread damage to trusted devices and data.; First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/critical-flaws-allow-hackers-to-exploit-zero-touch-provisioning-process-in/827306/ also interesting: Chinese Volt Typhoon hackers exploited Versa zero-day to breach ISPs, MSPs Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM Credentials China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats Hackers…
-
1Password Research Finds AI-Generated Vulnerability Patches Often Leave Bugs Behind
1Password’s Off-by-1 Labs has released research showing that large language models frequently produce vulnerability patches that look plausible but fail to fix the underlying flaw. The study, titled Frontier Models’ Vulnerability Patches are Often F.L.A.W.E.D., evaluated two cyber-capable reasoning models against six recently disclosed vulnerabilities in open-source software. Researchers generated 6,080 patches across the test..…
-
Cogent Launches VR-1 Cyber Reasoning Model for Enterprise Attack Paths
Cogent Security has introduced Cogent VR-1, a frontier reasoning model trained to investigate enterprise environments and prove whether multi-step attack paths are reachable. The model starts with a foothold and an objective, then maps the surrounding environment and connects weaknesses across systems. Cogent said VR-1 can work across cloud infrastructure, identity systems and internal tools,..…
-
AI Generated Code Risks: Why Business Owners Should Never Trust Software That Simply Works
AI can now generate working software in minutes. Ask Claude, GitHub Copilot, ChatGPT, or another AI coding tool to create an API, authentication flow, admin…Read More First seen on securityboulevard.com Jump to article: https://securityboulevard.com/2026/08/ai-generated-code-risks-why-business-owners-should-never-trust-software-that-simply-works/ also interesting: CISOs no closer to containing shadow AI’s skyrocketing data risks Top 10 MCP vulnerabilities: The hidden risks of AI…
-
ThreatLabz 2026 Report: Frontier AI and Enterprise Readiness
Tags: access, ai, attack, authentication, breach, cisa, ciso, control, credentials, cyberattack, data, data-breach, endpoint, exploit, flaw, governance, identity, Internet, kev, login, malicious, privacy, radius, resilience, strategy, switch, threat, update, vpn, vulnerability, zero-trustThe BreachIt was 9:14 AM when the CISO’s VPN connection momentarily dropped, something that normally wouldn’t cause any concern. What he couldn’t see was that attackers had already exploited a pre-authentication flaw in the VPN appliance itself, gaining access before any login ever occurred. From there, they extracted stored credentials, forged an identity as his…
-
ThreatLabz 2026 Report: Frontier AI and Enterprise Readiness
Tags: access, ai, attack, authentication, breach, cisa, ciso, control, credentials, cyberattack, data, data-breach, endpoint, exploit, flaw, governance, identity, Internet, kev, login, malicious, privacy, radius, resilience, strategy, switch, threat, update, vpn, vulnerability, zero-trustThe BreachIt was 9:14 AM when the CISO’s VPN connection momentarily dropped, something that normally wouldn’t cause any concern. What he couldn’t see was that attackers had already exploited a pre-authentication flaw in the VPN appliance itself, gaining access before any login ever occurred. From there, they extracted stored credentials, forged an identity as his…
-
Mapping One Control Set to Multiple Frameworks – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/mapping-one-control-set-to-multiple-frameworks-kovrr/ also interesting: 12 most innovative launches at RSA 2025 From Risk to ROI: How Security Maturity Drives Business Value Equifax Europe CISO: Notorious breach spurred cybersecurity transformation The need for a board-level definition of cyber…
-
Will Enterprise Prospects Accept a Pentest Report From a Boutique Firm?
Tags: penetration-testingA pentest report from a boutique firm gets accepted or rejected based on what is actually in the report, not the size of the company that produced it. The honest answer to whether it will pass review has nothing to do with employee headcount. The post Will Enterprise Prospects Accept a Pentest Report From a…
-
Will Enterprise Prospects Accept a Pentest Report From a Boutique Firm?
Tags: penetration-testingA pentest report from a boutique firm gets accepted or rejected based on what is actually in the report, not the size of the company that produced it. The honest answer to whether it will pass review has nothing to do with employee headcount. The post Will Enterprise Prospects Accept a Pentest Report From a…
-
Is the Cyber Industry Too Big?
Tags: cyberI have been attending Black Hat for more than 20 years. The first time I went, perhaps 5,000 people came to Caesars Palace, and what passed for an exhibit area was a row of tables and modest stands lining the hallways outside the briefing rooms. A vendor might have a sign, a laptop, a few..…
-
BSidesSF 2026 Sandboxes, Seccomp And Syscalls: Chasing Isolation In Kubernetes
Tags: kubernetesPresenter: Mark Manning Our thanks to Security BSides San Francisco for publishing their Creators, Authors and Presenter’s outstanding BSidesSF 2026 content on the Organizations’ YouTube Channel. Permalink First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/bsidessf-2026-sandboxes-seccomp-and-syscalls-chasing-isolation-in-kubernetes/ also interesting: Five ways to tighten up Kubernetes security When Why to Hand Over the Keys to Your Kubernetes Infrastructure…
-
Top 10 Breaches of the Week
Security Boulevard’s weekly after-action roundup looks at the breaches and security incidents that mattered most over the past two weeks. This edition spans large healthcare exposures, attacks on government and financial infrastructure, a fast-moving software supply-chain compromise, and incidents where the final scope is still being established. #1: Unlimited Technology Systems: 3.8 million healthcare records..…
-
Déjà Vu? Meta’s AI Escapes Testing Lab in Hacking Joyride
In the span of three weeks, OpenAI, Anthropic, and Meta have all disclosed AI agent sandbox escape events affecting real organizations. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/meta-ai-escapes-lab-hacking-joyride also interesting: Microsoft moves to disrupt hacking-as-a-service scheme that’s bypassing AI safety measures OpenAI Readies Rollout of New Cyber Model as Industry Shifts to Defense Reuters: OpenAI…