Tag: cyber
-
Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself
An agent running Anthropic’s Claude Mythos 5 spent 34 hours trying to get a malware dropper merged into a real open-source project during a cyber evaluation by the UK’s AI Security Institute.When a bystander publicly warned that the code was malicious, the agent denied it, force-pushed a rewritten branch history to erase the evidence, and…
-
Agentic AI: The New Frontier of Cyber Risk
Agentic AI is going to reshape how work gets done, and the organizations that win will be the ones that capture the efficiency while closing the exposure. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/agentic-ai-the-new-frontier-of-cyber-risk/
-
Assessing Third-Party AI Vendor Risk: A Guide – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/assessing-third-party-ai-vendor-risk-a-guide-kovrr/
-
Ransomware Hackers Are Hiding Malware Command Servers Inside Ethereum Smart Contracts
Ransomware operators are now abusing Ethereum smart contracts as stealthy command”‘and”‘control resolvers, with a Gentlemen ransomware affiliate using the EtherRAT backdoor to pull rotating C2 domains directly from the blockchain instead of hardcoding them in the malware. The toolkit shows a clear progression: scheduled tasks that bootstrap PowerShell, privileged account creation (“support2” with Supp0rt2@2026!). LSASS…
-
7-Zip Default Setting Lets Extracted Files Bypass Windows SmartScreen
7-Zip’s default configuration allows files extracted from internet-delivered archives to shed the Mark of the Web (MotW), meaning Windows SmartScreen never runs its reputation check and unsigned payloads can execute without a “Windows protected your PC” warning. That behavior, long treated as a red-team trick, is now formally recognized and tracked in multiple 7-Zip vulnerabilities,…
-
Django Flaws Let Attackers Trigger RCE, SSRF, DoS, and XSS Attacks
The Django project has released security updates, specifically Django 6.0.8 and Django 5.2.17, to address four vulnerabilities that could lead to server-side request forgery (SSRF), arbitrary file writes with potential for remote code execution (RCE), denial-of-service (DoS), and stored cross-site scripting (XSS) attacks. An advisory posted by Natalia Bidart on August 4, 2026, urges all…
-
Burnham Government Could Signal Tougher UK Cyber and AI Regs
Attorney Jonathan Armstrong on Labour’s Likely Shift to Sovereignty, Data Security. Andy Burnham’s arrival as U.K. prime minister on July 20 could accelerate Labour’s push for tougher AI, cyber and data rules. Attorney Jonathan Armstrong says to expect: closer EU alignment over AI, stronger government procurement standards and even greater scrutiny of big tech firms.…
-
Black Hat 2026: CrowdStrike Threat Hunting Report Findings
CrowdStrike’s 2026 Threat Hunting Report highlights how AI, identity attacks, and software supply chain threats are reshaping cyber risk. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/black-hat-2026-crowdstrike-threat-hunting-report-findings/
-
Airlock Digital Unveils Agentic AI Control Governance to Extend Preventative Endpoint Security
Atlanta, GA, August 4th, 2026, CyberNewswire Airlock Digital announces Agentic AI Control & Governance, extending its preventative endpoint security solution with visibility into trusted AI agent behavior and governance over what trusted agents are allowed to do on endpoints. Airlock Digital, a leader in preventative endpoint security, today announced Agentic AI Control & Governance at…
-
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication (MFA) and seize control of user accounts.”Greatness supports AiTM [adversary-in-the-middle] credential and First seen on thehackernews.com…
-
Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams
Las Vegas, United States, August 4th, 2026, CyberNewswire As AI-assisted attackers compress exploitation timelines to hours, Mallory turns live adversary intelligence into prioritized, policy-governed action across the tools security teams already run Mallory, the AI-native Threat and Exposure Management platform, today introduced a unified context and intelligence layer for security teams. The architecture has three…
-
AI makes costly spearphishing attacks easier, cyber insurer says
Impersonation campaigns led to more than 85% of the losses that Resilience dealt with in the first half of the year, a dramatic increase from two years ago. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-spearphishing-cyber-insurance-claims/826732/
-
How to Change Cybersecurity Data Into Risk Metrics – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/how-to-change-cybersecurity-data-into-risk-metrics-kovrr/
-
Underwriters Making Better Cyber Risk Decisions – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/underwriters-making-better-cyber-risk-decisions-kovrr/
-
Who Owns AI Risk Governance? Roles Guide – Kovrr
Articles related to cyber risk quantification, cyber risk management, and cyber resilience. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/who-owns-ai-risk-governance-roles-guide-kovrr/
-
Six Flowise Vulnerabilities Enable Remote Code Execution on AI Workflow Servers
Six newly disclosed vulnerabilities in Flowise, a popular open”‘source platform for building AI agents and LLM workflows, allow unauthenticated and low”‘privileged attackers to achieve remote code execution (RCE) on self”‘hosted and cloud AI workflow servers running vulnerable versions. These flaws collectively expose organizations to full server compromise, data exfiltration, and AI pipeline manipulation if instances…
-
Arctic Wolf stellt Cyberresilience-Angebot mit Garantieleistungen von bis zu drei Millionen US-Dollar vor
Arctic Wolf hat heute <> vorgestellt. Das Cyberresilience-Paket aus Produkten und Services soll Unternehmen dabei unterstützen, Cyberrisiken zu reduzieren, sich besser auf Vorfälle vorzubereiten und nach einem Angriff schneller wieder handlungsfähig zu werden. Zugleich sollen die Auswirkungen auf den Geschäftsbetrieb möglichst gering bleiben. Das Angebot verbindet Security-Operations zur Verringerung der Angriffswahrscheinlichkeit mit […] First seen…
-
Black Hat 2026: Improving CISO to Board Cyber Risk Reporting
A Pulse Security report finds that effective board cyber risk reporting depends more on governance than presentations. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/cybersecurity/black-hat-2026-improving-ciso-to-board-cyber-risk-reporting/
-
DarkSword Server Combines iPhone Exploits With Fake Apple ID Login Page
Tags: apple, credentials, cyber, data-breach, exploit, google, group, intelligence, iphone, login, risk, threatDarkSword’s leaked iOS exploit chain is now powering a fast”‘moving server cluster that marries one”‘click Safari exploitation with a convincing fake Apple ID login page, putting millions of iPhone users at risk of seamless device compromise and credential theft. Originally disclosed by Google Threat Intelligence Group, iVerify, and Lookout, the kit was later leaked to…
-
Fake Xeno Roblox Cheats Deliver Java RAT That Steals Discord and Gaming Accounts
Fake Roblox cheat tools are once again being weaponized, with a newly observed campaign distributing a sophisticated Java-based remote access trojan (RAT) disguised as an “undetected” version of the popular Xeno script executor. Security researchers warn that the operation specifically targets gamers through Discord communities and underground forums, leveraging trust in widely used cheat utilities…
-
Escape joins Anthropic’s Cyber Verification Program to advance AI-powered offensive security
Good news doesn’t arrive alone. This month we joined not one frontier AI program but two! Yesterday we shared that Escape joined OpenAI’s Trusted Access for Cyber. Today we’re a verified member of Anthropic’s Cyber Verification Program. Both programs solve the same First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/escape-joins-anthropics-cyber-verification-program-to-advance-ai-powered-offensive-security/
-
Shai-Hulud Supply Chain Attack Compromises Keyv and Hundreds of npm Packages
Attackers have compromised the GitHub account of a Keyv maintainer, a widely used JavaScript key-value storage library, to distribute credential-stealing malware via npm packages. This ongoing supply chain attack, known as the Shai-Hulud campaign, has affected Keyv and several related caching libraries, with a combined monthly installation reach in the billions. Aikido Security reported that…
-
Nvidia-backed Open Secure AI Alliance puts AI security and sovereignty in focus for Middle East
Tags: ai, control, cyber, data, government, infrastructure, intelligence, middle-east, nvidia, risk, toolIndustry coalition aims to develop open tools for securing artificial intelligence systems, a model that could resonate strongly in the UAE and Saudi Arabia as governments and enterprises seek greater control over AI infrastructure, data and cyber risk First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366646515/Nvidia-backed-open-secure-AI-alliance-puts-AI-security-and-sovereignty-in-focus-for-Middle-East
-
OWASP Introduces Subtractive Security Top 10 to Eliminate Attack Paths and Reduce Cyber Risk
OWASP has launched the Subtractive Security Top 10 project, a security engineering initiative that shifts the focus from adding more detection controls to removing the architectural conditions that enable cyberattacks. The project, led by Christopher Frenz, promotes a straightforward premise: attackers can only exploit attack paths that exist. Instead of relying primarily on monitoring, alerting,…
-
OpenAI Shuts Down ChatGPT Accounts Powering a Cambodia-Based Scam Factory
OpenAI has shut down a coordinated network of ChatGPT accounts that powered a Cambodia-based scam factory running multi-vector fraud and trafficking-linked operations, and has shared indicators with industry peers and authorities to make the network’s reconstitution significantly harder. Earlier in 2026, OpenAI’s threat intelligence team disrupted a scam syndicate that weaponized ChatGPT to drive investment,…
-
CISA Adds Exploited N-able N-central Flaw Enabling Remote Admin Takeover to KEV
Tags: authentication, cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, kev, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2026-18577, an actively exploited authentication bypass vulnerability in N-able N-central, to its Known Exploited Vulnerabilities (KEV) Catalog. This vulnerability allows unauthenticated attackers to bypass authentication and potentially take over administrative accounts on vulnerable N-central servers. CISA added this flaw to the KEV Catalog on August…
-
China Is Training Military AI With Knowledge Extracted From American Models
China’s artificial intelligence ecosystem is rapidly advancing through a controversial technique known as model distillation, with mounting evidence suggesting that military-linked entities are extracting high-value capabilities from leading American AI systems. Distillation, or “knowledge distillation,” refers to training a smaller AI model using outputs generated by a more advanced “teacher” model. While widely used across…
-
Russian Access Broker Sells Network Access to Ransomware Gangs While Spying on Ukraine
Tags: access, cyber, data-breach, defense, exploit, intelligence, network, ransomware, russia, ukraineAn exposed server linked to a Russian”‘speaking initial access broker (IAB) has revealed a sprawling operation that simultaneously fuels ransomware intrusions worldwide and supports Russian state-aligned intelligence collection against Ukrainian defense and aerospace targets. The artefacts show a mature, high”‘volume access brokerage pipeline that industrialises exploitation of internet”‘facing appliances, pivots to full Active Directory compromise,…
-
18 Malicious npm Packages Deploy Cross-Platform RAT Against Alibaba Developers
18 malicious npm packages have been used in a tightly coordinated software supply chain attack to deliver a cross”‘platform RAT that specifically targets developers working with Alibaba’s internal Aone tooling and @ali-scoped packages. The operation came to light after researchers analyzed a seemingly simple malicious npm package, lib-mtop, which acted as a downloader and exposed…