Tag: threat
-
Uppsala Security Becomes First Blockchain Intelligence Company to Join Cyber Threat Alliance
SIngapore, Singapore, August 5th, 2026, CyberNewswire Uppsala Security, a Singapore-based blockchain intelligence and crypto forensics company, announced today that it has joined the Cyber Threat Alliance (CTA) as an Affiliate Member, becoming the first blockchain intelligence company to join the alliance. CTA is a nonprofit organization that brings cybersecurity organizations together to share actionable threat…
-
Hackers Smuggle Post-Exploitation Toolkit Into Oracle Database Via Classic SQL Injection Flaw
A SQL injection vulnerability that many organisations might consider a decades-old, well-understood threat has been used as the entry point for a far more sophisticated attack, after threat actors were caught planting a custom-built, database-resident toolkit inside an Oracle database. Security firm Huntress said it was alerted to suspicious activity on an endpoint hosting an…
-
Is Your AI Infrastructure Quantum-Ready? Evaluating Threat Detection and Access Control
Is your AI infrastructure quantum-ready? Discover how to defend against Harvest Now, Decrypt Later threats and secure your Model Context Protocol deployments. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/is-your-ai-infrastructure-quantum-ready-evaluating-threat-detection-and-access-control/
-
Uppsala Security Becomes First Blockchain Intelligence Company to Join Cyber Threat Alliance
SIngapore, Singapore, 5th August 2026, CyberNewswire First seen on hackread.com Jump to article: hackread.com/uppsala-security-becomes-first-blockchain-intelligence-company-to-join-cyber-threat-alliance/
-
Prompt Injection Remains Biggest LLM Risk, Despite Limited Incidents
Prompt injection remains the most dangerous security threat to LLMs, according to OWASP’s latest Top 10 LLM Applications list First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/prompt-injection-llm-risk/
-
News alert: Mallory links threat intelligence to governed response as exploit timelines shrink
Las Vegas, United States, August 4th, 2026, CyberNewswire Mallory, the AI-native Threat and Exposure Management platform, today introduced a unified context and intelligence layer for security teams. The architecture has three parts: a context graph that correlates attack… (more”¦) First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/news-alert-mallory-links-threat-intelligence-to-governed-response-as-exploit-timelines-shrink/
-
Zimperium Launches Deep Insights for Automated Mobile Forensics
Zimperium has announced Deep Insights, a mobile security product that combines real-time Mobile Threat Defense with automated mobile forensics. Deep Insights automates forensic analysis and reconstructs the sequence of events around a mobile incident. Zimperium said it correlates configuration changes, application activity, permission shifts and suspicious network traffic to build a step-by-step attack timeline. The..…
-
Open Secure AI Alliance Proposes AI Agent Security Rules
SAFE framework seeks incident sharing after AI agent security breaches. The Open Secure AI Alliance has proposed a cybersecurity information-sharing framework for AI agents following recent security incidents involving OpenAI and Anthropic models. The SAFE guidelines would require members to report AI security incidents, share threat intelligence and preserve evidence to help reduce systemic risks…
-
Black Hat 2026: CrowdStrike Threat Hunting Report Findings
CrowdStrike’s 2026 Threat Hunting Report highlights how AI, identity attacks, and software supply chain threats are reshaping cyber risk. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/black-hat-2026-crowdstrike-threat-hunting-report-findings/
-
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication (MFA) and seize control of user accounts.”Greatness supports AiTM [adversary-in-the-middle] credential and First seen on thehackernews.com…
-
Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams
Las Vegas, United States, August 4th, 2026, CyberNewswire As AI-assisted attackers compress exploitation timelines to hours, Mallory turns live adversary intelligence into prioritized, policy-governed action across the tools security teams already run Mallory, the AI-native Threat and Exposure Management platform, today introduced a unified context and intelligence layer for security teams. The architecture has three…
-
Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams
Las Vegas, United States, 4th August 2026, CyberNewswire First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/mallory-unifies-threat-intelligence-exposure-context-and-response-into-one-architecture-for-security-teams/
-
Salt Debuts First AWS WAF Managed Ruleset for AI Agent and API Protection
Tags: access, ai, api, attack, ceo, credentials, detection, email, endpoint, exploit, intelligence, marketplace, threat, waf, xssThe WAF gap no one is talking about Your WAF is doing its job. It’s blocking SQLi, XSS, and the usual suspects. But here’s the problem: it wasn’t built for APIs, and it definitely wasn’t built for AI agents. APIs now power nearly every digital experience. And AI agents, the automated systems that access your…
-
AI widely used to exploit critical flaws, disrupt supply chains
A report confirms the growing use of AI across a broad spectrum of threat groups. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/ai-exploit-critical-flaws-disrupt-supply-chains/826915/
-
Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams
Las Vegas, United States, 4th August 2026, CyberNewswire First seen on hackread.com Jump to article: hackread.com/mallory-unifies-threat-intelligence-exposure-context-and-response-into-one-architecture-for-security-teams/
-
Landmark Deal Would Officially Add Laser Weapons to US Army Arsenal
Tags: threatFacing a growing drone threat, the Pentagon is poised to sign a first-of-its-kind contract for “Enduring High Energy Lasers””, and make directed energy weapons an official part of the Army’s kit. First seen on wired.com Jump to article: www.wired.com/story/landmark-deal-would-officially-add-laser-weapons-to-us-army-arsenal/
-
INC Ransomware is Calling Victims Pressure Tactics Post SonicWall Zero-Day Exploit
INC Ransomware exploits SonicWall SMA 1000 flaws, using calls and emails to pressure victims during extortion campaigns targeting global organizations. Resecurity disclosed that INC Ransomware has emerged as the dominant threat actor exploiting the recently disclosed SonicWall Secure Mobile Access (SMA) 1000 vulnerabilities. According to the company’s research, the group has accelerated its operations since…
-
AI developers targeted via trojanized GitHub repositories
Cybercriminals are cloning popular GitHub repositories for AI tools and developer resources to distribute an infostealer, according to Netskope Threat Labs. (Source: Netskope) … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/04/developers-github-fake-ai-tools-infostealer/
-
DarkSword Server Combines iPhone Exploits With Fake Apple ID Login Page
Tags: apple, credentials, cyber, data-breach, exploit, google, group, intelligence, iphone, login, risk, threatDarkSword’s leaked iOS exploit chain is now powering a fast”‘moving server cluster that marries one”‘click Safari exploitation with a convincing fake Apple ID login page, putting millions of iPhone users at risk of seamless device compromise and credential theft. Originally disclosed by Google Threat Intelligence Group, iVerify, and Lookout, the kit was later leaked to…
-
OpenAI Shuts Down ChatGPT Accounts Powering a Cambodia-Based Scam Factory
OpenAI has shut down a coordinated network of ChatGPT accounts that powered a Cambodia-based scam factory running multi-vector fraud and trafficking-linked operations, and has shared indicators with industry peers and authorities to make the network’s reconstitution significantly harder. Earlier in 2026, OpenAI’s threat intelligence team disrupted a scam syndicate that weaponized ChatGPT to drive investment,…
-
Payment fraud a ‘fully fledged’ transnational security threat, says think tank
Authorised payment fraud has moved way beyond being a consumer protection issue, says the Royal United Services Institute First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366646916/Payment-fraud-a-fully-fledged-transnational-security-threat-says-think-tank
-
When AI Agents Meet Real Infrastructure: Hype, Human Error or a Genuine New Threat?
Just days after OpenAI disclosed that one of its security research agents had escaped a testing sandbox by exploiting a previously unknown vulnerability, Anthropic revealed that its own AI models had compromised three real organisations during a cybersecurity evaluation after a configuration error inadvertently gave them internet access. The similarities between the two incidents have…
-
Cloud and SaaS Environments Now Top Targets for Attackers
Cloud and SaaS are now the preferred operating environments for threat actors, amid a continued shift to identity attacks First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cloud-saas-targets-attackers/
-
SIEM Limitations: The External Signals Your’re Missing
Nisos SIEM Limitations: The External Signals Your’re Missing If you run an insider threat program, your Security Information and Event Management platform (SIEM) is probably doing its job… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/08/siem-limitations-the-external-signals-yourre-missing/
-
Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware
Midnight Blizzard, the Russian threat actor tied to the country’s foreign intelligence service, has spent months targeting users of public Wi-Fi networks at places like … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/08/04/midnight-blizzard-hotel-wi-fi-networks-hacking/
-
“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI
Talos has collected prompt logs from threat actor endpoints running various applications, such as Claude Code, CodeX, Cursor, or Gemini. This blog is an analysis of the ways we’ve seen bad actors leveraging cloud-based AI. First seen on blog.talosintelligence.com Jump to article: blog.talosintelligence.com/keep-going-bro-youve-got-this-a-data-driven-look-at-how-adversaries-are-weaponizing-ai/