Incogni is taking 58% off annual plans with our code this month only, dropping the Standard plan to $6.79 per month.
Global Security News
Three-quarters of Ransomware Attacks Target Mid-Market Firms
Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit
Global Security News
The Crucial Moment That Companies Miss After They Oust a CEO
Global Security News
OpenAI tightens defenses after AI agents breach research environment
Following the OpenAI-Hugging Face incident, in which an agentic collective autonomously penetrated OpenAI’s research infrastructure and another company’s production infrastructure by chaining together multiple weaknesses, OpenAI began strengthening its safety requirements. The weaknesses included previously unknown vulnerabilities and credentials leaked online. OpenAI President Greg Brockman said ChatGPT Work identified 13 security issues on his personal…
Global Security News
A $21 Billion ‘Kids in Chips’ Startup Is Scooping Up Nvidia Talent
Etched, founded by Harvard dropouts, has its own in-office data center and has signed quant-trading firm Jane Street as its first customer.
Global Security News
Mirage2FA Hijacks Companies’ Microsoft 365 Sessions, with Over 4K Victims in the US
Mirage2FA is an active phishing-as-a-service toolkit built to steal Microsoft 365 credentials and authenticated sessions through Adversary-in-the-Middle (AiTM) attacks. ANY.RUN research shows that 63.7% of identified victims are in the US, with Technologies, Manufacturing, and Education among the most targeted industries. The operation has generated thousands of compromise events between 2024 and 2026, including stolen…
Global Security News
Microsoft confirms outage affecting search in Microsoft 365 apps
Microsoft says some users are experiencing issues searching in Microsoft 365 apps, including Outlook on the web, Outlook desktop, SharePoint Online, and OneDrive. […]
Global Security News
Finally, smart blinds that actually match my home’s decor – here’s why they’re worth it
The SelectBlinds window treatments come in dozens of styles and designs, so you don’t have to sacrifice aesthetics for convenience.
Global Security News
SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
SafePal has disclosed that an authorization flaw in an order-tracking plug-in exposed the names, email addresses, shipping addresses, phone numbers, and purchase details of approximately 39,798 customers. The hardware wallet maker said all affected customers were notified individually by email on August 16 from security@safepal.com, with the subject line “[Important] Your SafePal Order
Global Security News
Hacker claims millions of records stolen from corporate Azure tenants
A threat actor known as “TheHatman” claims to have obtained millions of employee records from the Azure environments of several Fortune 500 companies, including McDonald’s, Vodafone, Kyndryl, and Tata Consultancy Services (TCS), according to Hudson Rock. Over the past week, the threat actor has posted a string of large internal employee directories on cybercrime forums,…
Global Security News
INIU SnapGo Air power bank brings 10,000mAh, 25W wireless charging and a three-year promise
INIU’s SnapGo Air squeezes a 10,000mAh battery into a remarkably slim magnetic power bank, adds new-generation Qi2.2 25W wireless charging, up to 45W charging over USB-C, and…
Global Security News
Augmenting Threat Intel Analysis with Agents – Sai Kiran Uppu, Chris Wallis, Ramin Farassat – ASW #396
Global Security News
What you say during a cyber breach can — and will — be used against you
The first 24 hours after a cyber incident are messy. Teams are moving fast, and a lot gets said on Slack or email that can come back later. People are scrambling to contain the issue, figure out what happened and keep things moving. In the process, they create a record that doesn’t always age well.…
Global Security News
GitLab Patches Critical Unauthenticated GraphQL Vulnerability
GitLab patched a critical GraphQL flaw that let unauthenticated attackers remotely modify or delete public projects on self-managed servers. GitLab pushed out an emergency patch this week to address a critical flaw, tracked as CVE-2026-19478 (CVSS score of 9.4), that could let an attacker with zero credentials remotely modify or delete public projects and user…
Global Security News
AI can find zero-days but still can’t reliably write secure code
In recent months, LLMs have gone from flooding open-source projects and bug bounty programs with questionable security reports that wasted developers’ time, to routinely finding zero-day flaws that humans and traditional security audit tools had missed for years — a rapid evolution in cyber capabilities that scares even their own creators. But despite these advances…
Global Security News
UK Legal Regulator Raises AI Misuse Concerns
Global Security News
Microsoft starts removing WMIC tool used by cybercriminals
Microsoft announced that it removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 24H2 and 25H2, as well as from Windows 11 beta builds released this week. […]
Global Security News
GitHub restores services after nearly 8-hour outage disrupts Actions, APIs, PRs and Copilot
GitHub has restored services after a nearly eight-hour outage disrupted several of its core developer tools, including Actions, pull requests, APIs, Git operations, Webhooks, and Copilot, impacting software development workflows across its platform. “This incident has been resolved. Thank you for your patience and understanding as we addressed this issue,” the company wrote on its status…
Global Security News
U.S. CISA adds a Ray-Project Ray flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Ray-Project Ray vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Progress LoadMaster vulnerability, tracked as CVE-2025-62593 (CVSS score of 9.4), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2025-62593 is a critical remote code execution (RCE) vulnerability in Ray,…
Global Security News
Hatz AI CEO: AI Strategy Could Become ‘Existential’ for MSPs
As small and midsize businesses rapidly adopt artificial intelligence on their own, MSPs are under increasing pressure to move beyond AI experimentation and to build formal strategies to help customers deploy, secure, and manage the technology. Hatz AI CEO Jimmy Hatzell told Channel Insider that customer demand has accelerated dramatically in 2026, leaving providers to…
Global Security News
Synthesized builds Test Data Agent to validate AI agents with production-like data
Synthesized has announced its Test Data Agent, a new agentic infrastructure capability being developed to create and provision the realistic data, business context, and system states enterprises need to validate AI agents safely before production deployment. The Test Data Agent integrates with agent development, evaluation, testing, and orchestration frameworks, providing production-faithful environments for determining whether…
Global Security News
New Mirai-Based Evooo1Bot Botnet Targets Linux Devices
Evooo1Bot is a Mirai-based Linux botnet that hijacks routers and IoT devices for DDoS attacks, credential theft and criminal proxy services. Fortinet’s FortiGuard Labs disclosed Evooo1Bot in mid-August, a previously undocumented Linux botnet that’s been active since July 2026. The bot borrows Mirai‘s DDoS engine but adds encrypted command-and-control communications, an SSH brute-force scanner, a…
Global Security News
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. Ray is an open-source, Python-native distributed computing framework designed to scale artificial intelligence and machine learning workloads. As of writing, the GitHub project has more than
Global Security News
Google’s open-source HEIR lets AI work with data it can’t see
Google’s researchers and engineers developed the Homomorphic Encryption Intermediate Representation (HEIR) compiler project, an open-source compiler toolchain and development platform for homomorphic encryption. It can convert pre-trained AI models designed to operate on unencrypted data into models that process encrypted inputs. The platform helps application developers, compiler engineers, hardware designers, and cryptography researchers develop privacy-focused…
Global Security News
A hollowed out data layer is making CISOs fly blind into AI attacks
The security industry is currently transitioning to an era where both offense and defense are AI-led, and every SOC operates at machine speed. However, what most CISOs have not yet reckoned with is that the AI defenders they are about to deploy will inherit a data foundation that two years of ingestion cost pressure has…
Global Security News
Attackers turn to AI for help identifying files worth stealing
AI tools are being used by cyber attackers to write malicious code, build tools that harvest credentials, search compromised networks, identify valuable business information, manage technical infrastructure and generate commands during intrusions. Gambit Security researchers examined three unrelated threat actors that show how AI can support different stages of a cyberattack. Across the cases, attackers…
Global Security News
Cybersecurity jobs available right now: August 18, 2026
CISO ADI Global Distribution | USA | Hybrid – View job details As a CISO, you will develop and lead ADI’s global security strategy to protect information assets, digital platforms, critical operations, and AI-enabled environments. Advise executives and the Board on cyber risk, resilience, regulatory compliance, and security posture while leading incident response, threat and…
Global Security News
Weekly Update 517: Cyber Ransoms
The current ransomware situation is a bit of a kludge (deep breath): a lot of ransomware (which often doesn’t even involve “ware”, it’s just extortion) is carried out by kids who successfully make a truckload of money but can’t spend it without getting caught and the companies they breach rapidly get piled onto by class…
Global Security News
Why Digital Due Diligence Is Becoming as Routine as a Background Check
In this post, I will show you why digital due diligence is becoming as routine as a background check. Global scam losses keep climbing year after year, and the reason isn’t that people have gotten careless. It’s that the tools available to threat actors have advanced faster than the tools available to everyone else. That…
Global Security News
Data Scientist Olivia Chen and the Unglamorous Art of Making AI Actually Work
Global Security News
ISC Stormcast For Tuesday, August 18th, 2026 https://isc.sans.edu/podcastdetail/10056, (Tue, Aug 18th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Global Security News
HPE appoints Anthony Sanelli to lead Compute in South Pacific
HPE today announced the permanent appointment of Anthony Sanelli as General Manager, Compute, HPE South Pacific.
Global Security News
AI inference is getting cheaper, but your agents are getting more expensive
The good news is that large language model (LLM) token costs are coming down. The conundrum: The overall cost of AI workloads is going up. Gartner research predicts that, while token costs will fall by 95% by 2030, inference costs for agentic workflows will increase more than fivefold over the next two years. This is…
Global Security News
OpenAI president’s blog pushing agentic AI most notable for what it did not say
OpenAI president Greg Brockman on Sunday warned enterprise CISOs that they need to more aggressively embrace agents if they want to survive upcoming cyberattacks. Brockman said in a blog post that it has become “increasingly clear” that company systems are hiding “significant flaws, and defenders need to find and fix them before attackers do.” He…
Global Security News
Fujitsu and DigiCert to automate digital certificate renewals as lifespans shrinks for A/NZ businesses
New partnership helps local customers navigate escalating operational and security risks with confidence by automating digital certificate lifecycle management
Global Security News
OpenAI president’s blog pushing agentic AI most notable for what it did not say
OpenAI president Greg Brockman on Sunday warned enterprise CISOs that they need to more aggressively embrace agents if they want to survive upcoming cyberattacks. Brockman said in a blog post that it has become “increasingly clear” that company systems are hiding “significant flaws, and defenders need to find and fix them before attackers do.” He…
Global Security News
Polymarket Bot in 2026: What Automation Can Do, and What Still Needs Your Hands
In this post, I will discuss about the Polymarket Bot in 2026 and what automation can do, and what still needs your hands. People search for a Polymarket bot expecting something that trades prediction markets for them while they sleep. What exists is more useful and less magical than that. Here is an honest account…
Global Security News
One job title, pay from $78,750 to $219,500: Pointer Index exposes the three very different worlds of the Account Executive
Account Executive may be the most ambiguous job title in Australian and New Zealand go-to-market hiring sales, marketing and customer roles, with median advertised pay varying…
Global Security News
Cowbell Appoints Ellen Brookes as Claims Specialist in Australia
Experienced cyber claims leader strengthens Cowbell’s local expertise as the company expands across Australia
Global Security News
Seeing Machines Launches Physical AI Platform to Power the Next Generation of Humanoid Robots
New platform builds on proven automotive leadership to enable safe, intuitive human-machine interaction
Global Security News
Stop paying for smartphone storage you don’t need – here’s a better approach
How to stop wasting money on storage: Think in dollars, not gigabytes.
Global Security News
Chinese AI model GLM-5.3 shows advanced bug-finding capabilities
GLM-5.3 reportedly outperforms models like Fable 5 and GPT-5.6 Sol on the CyberGym benchmark, showing an advanced ability to identify vulnerabilities and even construct exploitation chains.
Global Security News
SafePal warns of data breach affecting nearly 40,000 customers
The breach, which occurred between March 2, 2025, and April 11, 2026, exposed customer names, email addresses, shipping addresses, and phone numbers.
Global Security News
New PATCHCORD backdoor targets Afghan telecom and South Asian infrastructure
The PATCHCORD backdoor employs a stealthy persistence mechanism by hijacking browser shortcuts for Edge, Chrome, and Firefox, ensuring the malware runs before the intended application launches.
Global Security News
Anthropic details new AI model, raises risk assessment for internal system tampering
Anthropic has raised the risk level for its Threat Model 2 from “very low” to “low,” citing recent cybersecurity incidents involving its models.
Global Security News
Encrypted messaging provider Threema hit by large-scale DDoS attacks
The attacks, which began Tuesday evening and continued into Wednesday, targeted both Threema and its Swiss colocation partner, Nine.
Global Security News
How Wall Street Sussed Out That Situational Awareness Was On the Ropes
From whispers of an Anthropic stake sale to strange options moves, traders sensed trouble and swung into action.
Global Security News
Linen House shows why managing complexity is the real competitive advantage in Australian retail
Homewares retailer Linen House and NetSuite solution provider Annexa reveal how building a connected operational foundation is helping retailers adapt and grow.
Global Security News
How to shorten podcast and lecture recordings without making speech sound rushed
A 90-minute lecture contains a surprising amount of nothing. Slides load, microphones get adjusted, questions go unheard, and speakers wait for the room to settle. Podcasts…
Global Security News
Video Call Exploit Chains Two Flaws in Unisoc Modems
Researchers found that by combining two vulnerabilities, they could take over an Android device by delivering a payload and getting the victim to answer their phone.
Global Security News
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data. The flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score…
Global Security News
Details emerge on BlackFile’s recent attacks on financial companies
A cybercrime group responsible for a string of recent attacks against private equity firms, law firms and financial rating agencies remains active and continued to target new victims as of late last week, according to researchers. BlackFile, which Google Threat Intelligence Group tracks as UNC6671 and associates more broadly with The Com, has been active…
Global Security News
SafePal Warns of Phishing Risk After Data Exposure Hits Nearly 40,000 Customers
Nearly 40,000 SafePal customers had their personal and order information exposed after a security flaw allowed unauthorized access to the cryptocurrency wallet provider’s order-tracking system. SafePal said an authorization flaw in a plug-in connected to customer orders allowed outsiders, under certain conditions, to access another customer’s information. The incident affected approximately 39,798 customers who placed…
Global Security News
Irregular says ‘human oversight’ responsible for AI sandbox escape incidents
A company that runs AI testing labs involved in a series of breaches carried out by Anthropic and OpenAI’s cyber-focused models said the incident happened in part because they “unintentionally” provided the models with access to the internet. In a blog posted Friday, Irregular said it partners with frontier labs to “stress test” AI models…
Global Security News
‘MessiahGPT’ AI Service Promises Ransomware, Phishing Kits, and Malware
Criminal AI tools are increasingly resembling commercial software. Trellix researchers found MessiahGPT openly advertised on BreachForums as an unrestricted AI service for generating ransomware, phishing kits, malware, and social-engineering material. The platform has its own website and Telegram community, although researchers could not independently verify the operator’s claims about the model or its capabilities. The…
Global Security News
Apple Patches iOS and macOS, (Mon, Aug 17th)
Apple today released updates for iOS/iPadOS (26 and 18) and macOS 26. This update fixes 108 vulnerabilities and comes about two weeks after the much smaller macOS update that addressed the single screen-sharing vulnerability. This vulnerability did not affect iOS/iPadOS. None of the vulnerabilities has been exploited so far. There are a few WebKit vulnerabilities, but no standalone…
Global Security News
‘Turf War’ Between Claude Agents Leads to Self-Replicating Malware
Three testing models with the same goal but different directives engaged in “increasingly aggressive” territorial attacks on one another, according to Anthropic.
Global Security News
Nozomi, Sophos Integrate OT Security Data in Sophos Fusion
Nozomi Networks and Sophos are integrating Nozomi’s OT security intelligence into Sophos Fusion, giving security teams a unified view of threats across IT and operational technology environments. The partnership connects OT telemetry, asset intelligence, and threat data from Nozomi Networks Vantage with Sophos’ broader cybersecurity platform to support faster detection, investigation, and response. Nozomi Vantage…
Global Security News
Unreleased Claude Model Makes Breakthrough on 167-Year-Old Math Problem
Anthropic says one of its unreleased Claude models stumbled into a mathematical breakthrough while trying to solve a problem that has baffled researchers since 1859. The company said an internal research version of Claude was asked to “take a real stab” at the Riemann hypothesis, one of the Clay Mathematics Institute’s Millennium Prize Problems that…
Global Security News
SonicWall Launches Simplified Endpoint Protection
SonicWall has launched SonicWall Endpoint Security, a unified endpoint protection platform designed to help managed service providers (MSPs) deliver enterprise-grade security to small and midsize business customers without adding operational complexity. The offering combines threat protection, automated response, and ransomware recovery, with service tiers built around how MSPs package and manage endpoint security. SonicWall automates…
Global Security News
Ping YOUniverse 2026: Four livestreams to watch
Here’s your opportunity to watch the keynotes and top presentations from Ping YOUniverse at no cost.
Global Security News
Identity at AI speed: What to look forward to at Ping YOUniverse 2026
Here’s a look forward to the Ping YOUniverse conference to be held in Austin, Texas, Sept. 1-2.
Global Security News
Hacker claims 3.6 million Azure account records stolen from major companies
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials. […]
Global Security News
Critical SAP Commerce Cloud flaw exploited days after patch
Attackers moved quickly to exploit a critical SAP Commerce Cloud bug following its patch.
Global Security News
What Is the EU’s ‘Chat Control’? How the Rules Affect Privacy and Encryption
AI infrastructure demand is putting more pressure on China’s chip supply chain, and SMIC is preparing to add capacity as orders run ahead of earlier forecasts. SMIC is weighing additional equipment at existing fabs, accelerating new production lines, and raising prices on some constrained capacity after utilization reached 93.7% in the second quarter. Demand is…
Global Security News
Adam Shostack Talks Hugging Face & PHANTOM-B
World-class threat modeler Adam Shostack shared he was “blown away” by OpenAI’s revelations about the Hugging Face attack, and explains why his new threat model for LLMs is both “lightweight yet still usable.”
Global Security News
Clop PTC Windchill Campaign Expands Across Enterprise Environments
A widening Clop extortion campaign has drawn several global enterprises into fresh security scrutiny. Philips confirmed a compromise involving one enterprise server. GE and Shell are investigating related claims as attention turns to activity involving PTC Windchill and FlexPLM environments. Ransom-ISAC has tied attacks against internet-exposed deployments to Clop affiliates. MSPs, MSSPs, and systems integrators…
Global Security News
Pokémon Center data breach exposes customer info, cancels some orders
Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after hackers stole customer personal and order information from third-party logistics provider CEVA Logistics. […]
Global Security News
Philips and GE Investigate Clop Ransomware Data Theft Claims
Philips and General Electric (GE) are investigating incidents after the Clop ransomware group claimed to have stolen data from both companies. The companies are among 43 organizations recently listed on Clop’s data leak site. These incidents may be connected to attacks targeting internet-exposed PTC Windchill and PTC FlexPLM systems through CVE-2026-12569. “Cl0p’s playbook hasn’t been…
Global Security News
Pre-IPO Pressure Mounts as OpenAI Sees Second Senior Exit in Single Week
OpenAI has lost two senior executives in 48 hours as the company prepares for a closely watched public offering. Chief Revenue Officer Denise Dresser is leaving less than a year after joining the company, OpenAI confirmed Thursday. Her departure follows longtime executive Brad Lightcap, who announced Tuesday that he was leaving to pursue a new…
Global Security News
SpaceX Completes $60 Billion Acquisition of AI Coding Startup Cursor
SpaceX has added a powerful new weapon to its AI arsenal: Cursor, the coding startup that turned chatbot prompts into working software. The tech giant completed its $60 billion acquisition of AI coding startup Cursor on Friday, marking one of the largest acquisitions of an AI startup. The deal, structured as an all-stock transaction, began…
Global Security News
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake’s public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials. The issue was present in .github/workflows/jira_issue.yml, which ran when a
Global Security News
Business adoption of AI agents tripled this year – as measurable ROI emerges
Industries are finding the strategies that work best for their business needs, according to Salesforce’s latest Agentic Enterprise Index.
Global Security News
News alert: OpenMatter Network spotlights AI verification at Belgrade Blockchain Week
Melbourne, Fla., August 17, 2026, CyberNewswire — Continuing its effort to build global awareness of the need to move computing from assumption-based trust to cryptographic proof, OpenMatter Network today announced that Head of Operations and Partnerships Chris Biele will play a prominent role at Belgrade Blockchain Week 2026, where he will lead sessions focused on secure…
Global Security News
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites. The vulnerability, tracked as CVE-2026-15748, is rated 9.8 out of 10.0 on the CVSS scoring system. It was discovered and reported by a security…
Global Security News
French Tax Authority Data Breach Exposes Information of 678,000 People
Sensitive tax and property information belonging to hundreds of thousands of people has been exposed in a breach of France’s tax administration. The French Ministry of the Economy and Finance confirmed that an attacker gained unauthorized access to systems operated by the General Directorate of Public Finances (DGFiP) and extracted data concerning 678,000 individuals and…
Global Security News
SafePal Says 39,798 Customers Hit by Data Breach
SafePal says a breach exposed personal data of 39,798 customers, but not wallet credentials, private keys, seed phrases, or payment information. SafePal disclosed a data breach affecting about 39,798 customers after hackers exploited a vulnerability in its order-tracking plugin. The flaw exposed information linked to orders placed between March 2, 2025, and April 11, 2026,…
Global Security News
Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used by Iranian nation-state hackers in attacks targeting entities in Israel. Russian cybersecurity company Kaspersky said its ongoing monitoring of the threat activity cluster since December 2025 has led to the discovery of previously unreported components that expand the
Global Security News
Updates to your AWS Sign-In experience
Amazon Web Services (AWS) is gradually introducing updates to the AWS Sign-In and sign-up experience to a limited number of customers. We’re sharing these changes so you will know what to expect as we gradually make the updated experience available to more customers. These updates include new options for creating and accessing AWS accounts. To…
Global Security News
AI-enriched Linux 7.2 delivers cache-aware scheduling – here’s everything new
The latest stable kernel also brings filesystem and I/O improvements, and substantial new support across AMD, Intel, Apple, Nvidia, USB4, and laptop hardware.
Global Security News
You can turn an old Android into a Raspberry Pi alternative – but know this first
With AI-driven RAM shortages pushing Raspberry Pi prices sky high, here’s how to repurpose your old handset into a portable powerhouse for your projects.
Global Security News
Google wants you to use its phones less and its AI more – but who’s buying it?
Google is leveraging our poor relationship to technology to sell its new phones – the same relationship it had a hand in creating.
Global Security News
LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most Affected
The SANDCLOCK LiteLLM supply-chain attack exposed credentials across 2,038 repositories, affecting technology, finance, healthcare, retail and more. Resecurity (USA) estimated the most affected sectors by the “SANDCLOCK” backdoor, which was planted as a result of the code repository compromise. According to cybersecurity experts, LiteLLM / TeamPCP Supply-Chain Attack will have long-lasting consequences. By compromising a…
Global Security News
I turned an old Android phone into a server for my LAN – here’s how and why
Got an old Android phone or tablet lying around? Turn it into a test server for experiments and development – it’s simpler than you think.
Global Security News
Infostealers Compromise 7.4M Hosts and Steal 1.7B Credentials and Identity Data
Cybercrime accelerated in early 2026 as infostealers harvested 1.7 billion credentials and ransomware operations affected 6,256 victims in six months worldwide.
Global Security News
UNISOC Modem Flaw Enables Remote Code Execution via Video Calls
Global Security News
Linux Botnet Evooo1Bot Expands Mirai Capabilities Well Beyond DDoS
The botnet adds exploitation modules, credential theft, and reverse SOCKS relays to turn compromised devices into persistent attacker infrastructure.
Global Security News
From DMZ Escape to Full Network Access: How Hackers Could Use Hermes AI as an Autonomous Cyber Weapon
The Hacker Went Offline. The AI Agent Kept Working: How Hermes Could Change Post-Exploitation A hacker does not necessarily need to sit in front of a compromised computer anymore. They can potentially give an autonomous AI agent a goal, provide it with access to an environment, remove the human approval step for risky actions, and…
Global Security News
US confounds Apple’s memory supply challenge
US Commerce Secretary Howard Lutnick is “not in favor” of Apple’s plan to alleviate the impact of rapid memory price inflation by purchasing RAM made in China for use in devices sold there. Trade by US firms with the biggest Chinese memory manufacturers, CXMT and Yangtze Memory Technologies, is restricted. Apple must secure a license before it can…
Global Security News
Hacking Back Is Back: White House to Enable Cyber Privateers
In an Aug. 12 National Security Presidential Memorandum, President Donald Trump set out guidance for more private-sector action in global cyber battles. Here’s the rest of the story.
Global Security News
Detecting cloud ransomware in Azure with Tenable One’s cloud detection and response capabilities
Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Global Security News
Why regulated industries can’t afford to skip data privacy for their AI projects
Security teams in heavily regulated industries can’t afford to make data privacy a “nice-to-have” option.
Global Security News
Meet Instant Attack Verification: Agentic AI for Tier-1 and Tier-2 SOC investigation
An AI analyst that triages, investigates, and verifies attacks at machine speed — and where it meets the Cisco Data Fabric.
Global Security News
LiteLLM Supply-Chain Attack Exposed Credentials Across 2,500 Organizations
A March supply-chain attack involving malicious versions of the LiteLLM Python package may have exposed credentials belonging to more than 2,500 organizations and hundreds of thousands of CI/CD pipelines, according to security researchers. Attackers published two compromised versions of LiteLLM, a widely used AI gateway, after obtaining access to the project’s PyPI account. The malicious…
Global Security News
Microsoft confirms GitHub is down worldwide
GitHub is down for some users as a widespread outage is causing errors across the website, API, Actions, Pull Requests, and several other services. […]
Global Security News
Apple Screen Sharing Security, (Mon, Aug 17th)
About 20 years ago, with macOS 10.5 (Leopard), Apple introduced screen sharing. Apple did not invent a new protocol for screen sharing. Instead, it used the established VNC protocol. VNC is a pretty simple, unencrypted protocol using TCP port 5900. Historically, the protocol used a simple global password for authentication. Apple adapted the protocol for its…
Global Security News
France’s tax authority admits hackers made off with data on 678,000 individuals
France’s tax authority has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems, saying the intrusion exposed data on 678,000 individuals and professionals. The incident came to light after an alleged attacker using the alias “ZeroBytes” took credit on a cybercrime forum and listed a stolen database for…
Global Security News
The AI Exchange: Innovators in Payment Security Featuring GM Sectec
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about how they are adopting and implementing artificial intelligence (AI) into their organizations.
Global Security News
An “invisible” car? Researcher uses machine learning to hide vehicles from Flock cameras
A cybersecurity expert has demonstrated how computer-generated patterns can successfully prevent surveillance cameras from detecting vehicles – such as the controversial AI-powered Flock licence plate readers that are becoming increasingly common on American streets. Read more in my article on the Hot for Security blog.
Global Security News
Certighost and the Privilege Hiding in Your Certificate Authority
CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been. […]