Tag: cybersecurity
-
CISA Flags Multiple PaperCut NG/MF Flaws Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical vulnerabilities related to PaperCut NG/MF to its Known Exploited Vulnerabilities (KEV) catalog, warning that these flaws are being actively exploited. The vulnerabilities, identified as CVE-2026-81578 and CVE-2026-82078, can be combined to enable unauthenticated attackers to modify server configurations and execute arbitrary Java bytecode…
-
Texas a Test Ground for White House Water Cybersecurity Push
Watershed 250 Promises Free Cyber Resources for Small Water Utilities. Texas Gov. Greg Abbott and White House National Cyber Director Sean Cairncross Monday announced the launch of Project Watershed 250, connecting Texas water utilities with free cyber defense resources in a pilot program the Trump administration hopes to scale nationwide. First seen on govinfosecurity.com Jump…
-
‘Watershed 250’ test program in Texas looks to private sector for water cybersecurity help
The six-month program will be overseen by the Office of the National Cyber Director and Texas Cyber Command to “find out what works.” First seen on cyberscoop.com Jump to article: cyberscoop.com/watershed-250-texas-water-cybersecurity-pilot/
-
PCI DSS 4.0 Audits: Continuum GRC Cybersecurity Assessments 2026
PCI DSS 4.0 compliance audits demand a fundamental shift from periodic checkbox exercises to continuous, risk-based cybersecurity assessments. Organizations preparing for 2026 assessments must address new requirements around targeted risk analyses, multi-factor authentication expansion, and automated security monitoring that directly impact how cardholder data environments are protected and validated. Key Takeaways: PCI DSS 4.0 introduces”¦…
-
Pharmaceutical giant McKesson warns of ‘service degradation’ following cyberattack
The pharmaceutical and healthcare technology company McKesson informed regulators it is in the early stages of investigating a cybersecurity incident involving an unnamed third-party application. First seen on therecord.media Jump to article: therecord.media/mckesson-cyberattack-ransomware-pharma
-
ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions
The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed Chinese adware application, running the malware under a trusted process to slip past users who add such software to their antivirus exclusions.Russian cybersecurity vendor Kaspersky said the attackers built the disguise around QN Wallpaper, a genuine Chinese…
-
ShinyHunters claims it stole 284 million patient records from McKesson
Healthcare company McKesson disclosed a cybersecurity incident in which hackers got into third-party applications and stole data. McKesson is a major U.S. healthcare company … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/31/healthcare-company-mckesson-data-breach/
-
Cyber Assessment Framework (CAF) Version 4.0
What is the Cyber Assessment Framework? The Cyber Assessment Framework (CAF) is a cybersecurity and resilience framework developed by the UK National Cyber Security Centre (NCSC). It helps organizations assess how effectively they manage cyber risks to their essential functions and services. CAF 4.0 is primarily relevant to organizations in critical sectors such as energy,……
-
Managed Security – Controlware kombiniert MDR und VMS für mehr Cybersecurity
Tags: cybersecurityFirst seen on security-insider.de Jump to article: www.security-insider.de/controlware-kombiniert-mdr-und-vms-fuer-mehr-cybersecurity-a-85108d31d9caa91b4afc6dff4c2bb84b/
-
OpenAI Warns Astra AI Model May Develop Zero-Day Exploits and Launch Autonomous Cyberattacks
Tags: ai, cyber, cyberattack, cybersecurity, exploit, intelligence, openai, update, vulnerability, zero-dayOpenAI has issued a warning regarding Astra, an upcoming artificial intelligence model, which may be close to a threshold of cybersecurity capabilities that would allow it to independently discover zero-day vulnerabilities and conduct complex cyberattacks against highly secured systems. In a security update dated August 7, 2026, the company noted that early testing and assessments…
-
Simple Router DNS Tweak Blocks Malware and Phishing Across All Connected Devices
A recent router-level DNS change is gaining attention as a method to reduce exposure to phishing pages and malware across all devices connected to a home network. Cybersecurity expert Luis Catacora has recommended replacing a router’s default DNS resolvers with Cloudflare’s malware-filtering addresses: 1.1.1.2 as the primary resolver and 1.0.0.2 as the secondary. Simple Router…
-
95.02% Success Rate! NSFOCUS AI Tops the CyberGym Global Leaderboard
In the CyberGym Level 1 global leaderboard, an authoritative benchmark for cybersecurity large models, NSFOCUS AI, NSFOCUS’s self-developed intelligent security agent captured the top global ranking in this round with a 95.02% vulnerability-reproduction success rate. Built on Zhipu’s GLM-5.3 large language model, NSFOCUS AI distills NSFOCUS’s accumulated offensive-and-defensive expertise into computable workflows, systematically unlocking GLM-5.3’s……
-
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following reports that a Chinese-speaking threat actor weaponized the vulnerability to target a nuclear research body in the Philippines.The vulnerability, tracked as CVE-2023-49105 (CVSS score: 9.8), is a case of First…
-
Exploited RCE Flaws and Infrastructure Attacks Define this Cybersecurity Week in August 2026
Weekly summary of Cybersecurity Insider newsletters for August 2026. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/weekly-roundup/exploited-rce-flaws-and-infrastructure-attacks-define-this-cybersecurity-week-in-august-2026/
-
19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code
Cybersecurity researchers have discovered a cluster of 18 Google Chrome and one Microsoft Edge extensions that were published over the last six months and harbored wallet secret stealing and cryptocurrency draining capabilities.The extensions, per Socket security researcher Karlo Zanki, share similarities in code and tradecraft, with evidence indicating that the campaign may have been active…
-
Cato-CrowdStrike Partnership Is ‘Massive’ Win For Reducing Security Complexity, Improving Efficacy: Solution Provider CTO
Cato Networks’ recently expanded partnership with CrowdStrike brings together two of the industry’s most highly effective cybersecurity platforms with huge promise for reducing complexity for customers, a top partner of the two vendors tells CRN. First seen on crn.com Jump to article: www.crn.com/news/security/2026/cato-crowdstrike-partnership-is-massive-win-for-reducing-security-complexity-improving-efficacy-solution-provider-cto
-
Identity-Based Attacks Drive 85% of Education Ransomware, Sophos Finds
Identity-based cyberattacks accounted for 85% of ransomware attacks experienced by education organizations over the past year, according to a new Sophos survey. The findings show ransomware attackers turning more often to identity abuse for initial access. The State of Ransomware in Education 2026 report draws on responses from 226 IT and cybersecurity leaders at lower..…
-
U.S. CISA adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog
Tags: authentication, cisa, cve, cybersecurity, exploit, flaw, infrastructure, kev, linux, vulnerabilityU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ownCloud, Linux Kernel, and JFrog Artifactory flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)addedthe following vulnerabilities to itsKnown Exploited Vulnerabilities (KEV) catalog: CVE-2023-49105 (CVSS score of 9.8) is an improper-authentication flaw in ownCloud Server’s WebDAV functionality. An unauthenticated attacker who…
-
AI Governance Has a Control Problem, Not a Policy Problem
Tags: access, ai, business, control, credentials, cybersecurity, data, finance, governance, identity, least-privilege, risk, technology, toolWe’re getting good at writing policies about how AI should be used. Responsible AI principles. Acceptable-use policies. AI risk frameworks. Approval processes. Governance committees. All of these have a place. But there is a harder question that I think organisations need to start asking: What evidence proves those controls actually work? Because AI is changing…
-
Over 8,300 Gitea servers vulnerable to code execution attacks
Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/over-8-300-gitea-servers-vulnerable-to-code-execution-attacks/
-
Palo Alto Networks Researchers Say First Wave of AI-Enabled Attacks Has Begun
Cybersecurity researchers from Palo Alto Networks this week reported that it became apparent that the latest generation of AI models would be able to discover thousands of vulnerabilities in applications. A wave of attacks that are leveraging AI to exploit those vulnerabilities is now underway. Sam Rubin, senior vice president of the Unit 42 cybersecurity..…
-
700 AI Agents Linked to Hugging Face Security Breach
Around 700 AI agents created by OpenAI participated in the breach of Hugging Face during a cybersecurity evaluation, according to an independent investigation that has revealed the scale of the incident. METR and Redwood Research published the findings after being brought in to independently investigate the July incident and examine the agents’ behaviour, reasoning, and…
-
The Cyber Express Weekly Roundup: Exploited Entra ID Flaw, AI Agent Risks, and Global Cybercrime Crackdown
Tags: ai, cloud, cyber, cybercrime, cybersecurity, exploit, flaw, identity, infrastructure, international, law, risk, technologyThis weekly roundup highlights a broad range of cybersecurity and technology developments affecting cloud identity infrastructure, social media platforms, businesses, digital assets, and international law enforcement. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/weekly-roundup-microsoft-entra-id-ai-risks/
-
U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog
Tags: cisa, citrix, cve, cybersecurity, exploit, flaw, infrastructure, kev, linux, microsoft, sql, vulnerabilityU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2015-3246 is a race condition in Red Hat libuser that could let…
-
APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations
Cybersecurity researchers have flagged a fresh set of campaigns targeting government and diplomatic organizations in Romania, Spain, and Türkiye between late September 2025 and early April 2026.These campaigns, per Recorded Future Insikt Group, have led to the deployment of a previously undocumented backdoor dubbed HOOKEDGE, a lightweight Windows batch script that’s distributed via First seen…
-
How Security Buyers Actually Buy: The Committee, The Triggers, and The Quiet Veto
Most cybersecurity vendors sell to the CISO and lose the deal to a security engineer they never spoke to. Security purchases are committee decisions with an asymmetric structure: many people can kill a deal, few can approve one. Here is how it actually works. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/how-security-buyers-actually-buy-the-committee-the-triggers-and-the-quiet-veto/
-
Cyber Talk -12 Lacework: When the Right Market Isn’t Enough
In cybersecurity, choosing the right market matters enormously, but Lacework is a reminder that even a company that identifies the right market, builds meaningful technology, assembles a strong team, and raises enormous amounts of capital may still fail to become the company that ultimately defines the category. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/cyber-talk-12-lacework-when-the-right-market-isnt-enough/
-
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior as early as late May.The incident, the company said, took place during cybersecurity evaluations of several OpenAI models, and that it was mainly fueled by…
-
Salt Typhoon Is Already Inside Encryption Doesn’t Solve the Problem
Tags: access, advisory, ai, api, china, cisa, cloud, communications, control, credentials, cyber, cybersecurity, data, defense, detection, encryption, endpoint, exploit, government, identity, infrastructure, intelligence, Internet, microsoft, network, resilience, risk, router, saas, service, software, strategy, switch, technology, theft, threat, tool<div cla COMMUNICATIONS SECURITY BRIEFING What Volt Typhoon and Salt Typhoon reveal about the next front in communications security, and why hardened transport is the missing layer Volt Typhoon and Salt Typhoon mark a deliberate shift in how state-sponsored cyber campaigns operate. Rather than chasing endpoints or applications, these actors have gone after the infrastructure…
-
Salt Typhoon Is Already Inside Encryption Doesn’t Solve the Problem
Tags: access, advisory, ai, api, china, cisa, cloud, communications, control, credentials, cyber, cybersecurity, data, defense, detection, encryption, endpoint, exploit, government, identity, infrastructure, intelligence, Internet, microsoft, network, resilience, risk, router, saas, service, software, strategy, switch, technology, theft, threat, tool<div cla COMMUNICATIONS SECURITY BRIEFING What Volt Typhoon and Salt Typhoon reveal about the next front in communications security, and why hardened transport is the missing layer Volt Typhoon and Salt Typhoon mark a deliberate shift in how state-sponsored cyber campaigns operate. Rather than chasing endpoints or applications, these actors have gone after the infrastructure…