The surveillance-technology company has faced criticism over the risks of police abuse of its AI-enabled camera system.

Read more →

CRM provider Beacon has revealed that a compromised AWS access key was the likely root cause of the breach of 1500 UK charities’ data

Read more →

Hardware wallet manufacturer Trezor disclosed a data breach affecting nearly 14,000 of its customers after ShipMonk, its shipping provider and logistics partner, got hacked. […]

Read more →

Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, with wider migration goals extending through 2028

Read more →

President Trump signed a National Security Presidential Memorandum on August 12 allowing vetted private companies to run offensive cyber operations against foreign threat actors, under the control and oversight of the US government. The post White House authorizes private US companies to hack foreign criminal networks appeared first on Help Net Security.

Read more →

Academic researchers from the CISPA Helmholtz Center for Information Security and KU Leuven have demonstrated that commercially available out-of-order RISC-V processors, specifically the SiFive P550 and T-Head Xuantie C910/C920, are vulnerable to all major Spectre variants.

Read more →

Syncro has launched a native Model Context Protocol (MCP) server that connects live operational data from its platform with AI assistants including Claude, ChatGPT and Microsoft Copilot, giving MSP technicians a new way to access and act on ticketing, billing, customer and endpoint data. Syncro connects live MSP data to AI assistants The MCP server…

Read more →

AI coding tools can introduce unvetted or hallucinated open source dependencies faster than traditional security reviews can keep pace. ActiveState explains why organizations should govern packages at the point of selection, before they enter the development pipeline. […]

Read more →

Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it

Read more →

SelectHub has announced the launch of DataGrout, its specialized AI research lab introducing an LLM inference optimization platform and AI governance solution for enterprises. DataGrout’s mission is to drive token reduction for agentic workflows, chatbots and AI tools, while equipping IT and FinOps leadership with a policy-driven, auditable LLM payload and cost monitoring system to…

Read more →

A new White House memo signed by U.S. President Donald Trump instructs the National Coordination Center (NCC) to establish a program that would allow private security companies to apply for approval to hack foreign cybercrime organizations. […]

Read more →

Autonomous AI agents built on open-source frameworks breached Taiwanese government systems, compromised credentials, and probed a nuclear safety agency in a multi-day cyberattack that researchers say signals a new phase in AI-enabled operations. The campaign unfolded over four days in early July, during which multiple AI agents operated in parallel to map networks, identify vulnerabilities,…

Read more →

Frontier Technologies and MSP Hub Technologies have formed a strategic alliance combining Frontier’s federal contracting and CMMC capabilities with MSP Hub’s Microsoft licensing, cloud, and managed services operations for government and regulated customers. Managed services and federal contracting expertise in one model This partnership will deliver a fully integrated model that combines Frontier’s federal contracting…

Read more →

A10 Networks has announced the general availability of the A10 AI Gateway, a centralized, intelligent control plane that gives organizations unified routing, cost management, and governance across every AI agent, application and large language model (LLM) they use. As AI adoption accelerates, developers are increasingly building agents and embedding AI into applications and business systems,…

Read more →

For the past year, the ransomware conversation has centered on concentration: a handful of dominant RaaS operations controlling most of the damage, and a shrinking pool of active groups fighting over the same territory. The State of Ransomware Q2 2026 report from Check Point Research shows that picture starting to shift. The leaders are still winning, but…

Read more →

Job seekers are editing their career back-stories as employers pump AI terms into job descriptions.

Read more →

The White House has authorized government-directed offensive cyber operations against transnational groups, prompting warnings over escalation and attribution risks

Read more →

The Trump administration is opening the door for vetted US companies to conduct cyber operations against foreign cybercriminal organizations under federal supervision, giving the private sector a more direct role in disrupting cyber-enabled crime. A presidential memorandum issued on August 12 directs the National Coordination Center to create a program authorizing participating companies to conduct…

Read more →

Researchers at XM Cyber found that a standard domain user with no Microsoft SCCM privileges can chain multiple flaws to reach remote code execution, although the attack does require network access to the SCCM environment. Enterprises use Microsoft System Center Configuration Manager (SCCM) to deploy operating systems, manage patches, distribute software, and monitor compliance across…

Read more →

Researchers at XM Cyber found that a standard domain user with no Microsoft SCCM privileges can chain multiple flaws to reach remote code execution, although the attack does require network access to the SCCM environment. Enterprises use Microsoft System Center Configuration Manager (SCCM) to deploy operating systems, manage patches, distribute software, and monitor compliance across…

Read more →

WhatsApp has begun rolling out a new optional “Scam Alert” feature, which uses a local machine learning model to warn users when scammers are targeting them. […]

Read more →

President Donald Trump signed a national security memorandum Wednesday that lays the groundwork for private sector companies to take a larger role in helping law enforcement carry out offensive hacking operations against transnational criminal organizations. The White House said sustained fraud and other cyber-enabled campaigns from transnational criminal organizations (TCOs) warranted the memo, and cited…

Read more →

Researchers at Group-IB have discovered a new NFC relay malware family, purpose-built to capture live card data via NFC and forward it in real time to attackers. They dubbed it “WindRelay.” NFC (Near Field Communication) is wireless technology that allows devices such as smartphones, payment cards, and payment terminals to communicate when they’re very close…

Read more →

Searchlight Cyber has launched its Preemptive Threat Exposure Management (PTEM) platform, combining exposure visibility with real-world attacker intelligence to help organizations prioritize and reduce the exposures most likely to be exploited. Security for the real-time era For decades, security teams have relied on a critical advantage: time. Organizations could identify vulnerabilities, investigate threats and respond…

Read more →

A massive 153GB archive stolen during the LiteLLM supply chain attack exposes credentials and other sensitive data linked to thousands of corporate domains, including AWS, Samsung, Cisco, and Salesforce. Hudson Rock says it obtained and analyzed the archive, which contains 433,909 files, and attributed 118,829 CI runner dumps to 2,488 corporate domains. “We are leveraging…

Read more →

Cisco Talos recently identified an undocumented phishing framework, internally branded “JWR” by its developer, built to convincingly impersonate checkout and login pages across major payment and shopping platforms.  The client engine of the JWR phishing framework is a real-time, operator-driven system that, rather than merely logging form submissions like a static credential-stealing page, keeps an AES-CTR encrypted WebSocket open to the threat actor…

Read more →

Researchers discovered hackers-for-hire performing cyber espionage and financially motivated heists from the same Web panel.

Read more →

A group of big tech firms is fighting to stop roughly 3,000 youth safety lawsuits from moving forward, and they just lost a critical procedural battle in court. The lawsuits, brought by attorneys general and families, allege that Meta, Google, ByteDance’s TikTok, and Snap knew their products were addictive to children and teens and harmful…

Read more →

Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort

Read more →

One page, every number that matters. This infographic distills July 2026’s 188 confirmed cyber attacks into a fast visual read — who’s behind them, how they broke in, what they targeted, and where in the world it happened.

Read more →

July 2026 saw 188 confirmed cyber attacks across 69 countries, with financially motivated Cyber Crime driving three in four incidents. Malware remained attackers’ weapon of choice, exposed public-facing applications were the most common way in, and Information & Communication infrastructure absorbed the heaviest share of targeting. Here’s the full breakdown of who attacked, how, and…

Read more →

Our favorite antivirus software protects your PC, laptop, and mobile devices from malware without costing a fortune.

Read more →

Attackers are exploiting SharePoint flaw CVE-2026-55040 after a public PoC was released, allowing unauthenticated users to impersonate administrators. Attackers started exploiting CVE-2026-55040 (CVSS score of 9.1), a critical SharePoint authentication bypass patched in July, within days of Rapid7 releasing a public proof-of-concept on August 12. The vulnerability allows an unauthenticated attacker impersonate any SharePoint user…

Read more →

LevelBlue has been named SentinelOne’s premier remediation partner for Wayfinder Frontier AI Services, expanding the companies’ relationship as organizations grapple with a growing challenge: finding vulnerabilities with AI is becoming faster, but fixing those vulnerabilities at scale remains difficult. For MSPs and other security service providers, the partnership reflects a broader opportunity emerging around AI-driven…

Read more →

The ICO has issued a formal reprimand to ACRO after patching and security monitoring failures led to a breach

Read more →

Schneider Electric has launched a new generation of its APC Smart-UPS designed to support multiple battery chemistries, giving channel partners a more flexible platform for helping customers modernize backup power across distributed IT and edge environments.  Standardized platform across every battery type The new Smart-UPS runs on valve-regulated lead-acid (VRLA) or lithium-ion batteries and supports…

Read more →

Cyber defenders need to shake off traditional best practices and switch from reactive patching to building inherently resilient systems in the face of AI-accelerated vulnerability discovery, according to a senior security manager at Microsoft. David Weston, group manager in the Windows team at Microsoft, told delegates at Black Hat USA that traditional approaches to vulnerability…

Read more →

Ingram Micro is expanding the AI capabilities of its Xvantage platform with an Integration Hub and Model Context Protocol (MCP) Server designed to make it easier for channel partners to connect AI assistants with business data, workflows, and existing IT systems. The distributor says hundreds of partners worldwide are already using the Xvantage Integration (XI)…

Read more →

Microsoft says China-linked Storm-1175 is using a new ransomware called StormEncryptor, replacing Medusa in its latest attacks. Microsoft says China-linked, financially motivated threat actor Storm-1175 has begun using a new ransomware strain called StormEncryptor. The group previously relied on Medusa ransomware. StormEncryptor is written in C++ and encrypts files and adds the .encrypted extension, then…

Read more →

MSPs’ access to credentials across dozens or even hundreds of customer environments can turn a single compromised login into a multi-client security incident, putting credential management, technician access and offboarding practices under growing scrutiny. Chris Skipworth, CEO of MSP-focused password management provider Passpack, spoke with Channel Insider about where credential security breaks down inside MSPs,…

Read more →

For operations leaders, plant managers, and IT decision-makers in growing organizations, the hardest part of expansion is that business growth IT needs change faster than…

Read more →

Insta360 has launched its new X6 flagship in Australia, pairing larger image sensors and 10-bit Dolby Vision recording with an on-camera AI editor designed to turn spherical…

Read more →

Lazarus targets defense professionals with fake Lockheed Martin jobs, exploiting a Windows zero-day to deploy backdoors and evade security controls. Check Point Research has uncovered a new wave of Operation Dream Job, the long-running North Korean campaign that lures defense and aerospace professionals with convincing fake job offers. This iteration is more dangerous than previous…

Read more →

The trust framework underlying Belgium’s electronic ID system was fully compromised by severe vulnerabilities in a key browser extension, showcasing bigger problems with extensions in general.

Read more →

Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from weak authentication. It was patched by Microsoft as part of its July 2026 Patch Tuesday…

Read more →

In this Help Net Security video, Christine Gadsby, VP and Chief Security Advisor at BlackBerry, explains why corporate investigations go wrong before the forensic team arrives. The first hours matter more than leaders assume. Access gets granted, conversations start, and decisions get made that later affect chain of custody, privilege, and how regulators judge the…

Read more →

DDoS attacks grew in scale during the first half of 2026, bringing larger traffic floods, shorter attack durations, and increasingly automated campaigns. Cloudflare’s H1 2026 DDoS Threat Report shows threat actors relying on multi-vector techniques and large-scale network-layer attacks to disrupt online services across multiple industries. L3/4 attack-size distribution (bitrate), H1 2026 (Source: Cloudflare) Network-layer…

Read more →

Wireshark 4.6.8 fixes 28 security bugs in the protocol analyzer, and nine of them fire when someone opens a saved capture file. Those nine sit in file parsers, the code that reads a capture off disk before any dissection begins: pcapng, Endace ERF, Tektronix K12xx, BUSMASTER, Catapult DCT2000, Gammu DCT3, 3gpp phone logs, TTX Logger,…

Read more →

I will show you what to do if your password is found on the dark web. Our online security is more important than ever in today’s digital age. With cybercrime on the rise and data breaches becoming increasingly common, it’s crucial to stay vigilant about protecting your personal information.  One of the most alarming situations…

Read more →

ChatGPT, Claude and Gemini unwittingly respond like China’s censored chatbots when asked some sensitive questions—and researchers say companies haven’t done much to fix it.

Read more →

42% have experienced mental health impacts due to their job

Read more →

Inaugural Wiz awards recognize top Australian partners for excellence in cloud and AI security

Read more →

DXC Workplace Services helps organisations improve employee productivity and experience without adding new tools or operational complexity. The offering combines DXC’s deep…

Read more →

Alphabet’s top scientist discussed the proposed new entity with heads of other AI labs and Trump administration officials including Treasury Secretary Scott Bessent.

Read more →

Lovable, the Swedish-based AI software creation platform company, today announced an acceleration of its product, infrastructure, and team development efforts — and a noteworthy round of Series C funding totaling $400 million. The company said in its statement that it is looking to augment its platform, which it boasts is already used by almost two-thirds…

Read more →

As expected following last July’s largest Patch Tuesday release, the new normal has arrived with 398 CVEs being addressed in August.

Read more →

Would you like access to Anthropic’s Claude at 90% off the normal price? All you have to do is redirect your traffic to a mysterious service called “Poison Claude”. Only problem is that it’s run by fraudsters… Meanwhile, a phishing-as-a-service platform called “Greatness” has come up with something rather nasty: a phishing attack that doesn’t…

Read more →

An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals. […]

Read more →

A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time. […]

Read more →

When you build a new application or capability on Amazon Web Services (AWS), you want to focus on what you’re building. Getting a service running almost always begins with AWS Identity and Access Management (IAM). Many AWS services that act on your behalf need an IAM role, an identity the service assumes to access your…

Read more →

The ransomware payload ultimately failed to deploy due to insufficient virtual memory.

Read more →

The Digital Economy and Society Minister is seeking cabinet approval for compulsory multi-factor authentication across all government systems.

Read more →

The incident at Uber Freight, the logistics arm of the ride-sharing giant, comes after the Helix group listed the company on its data leak site on August 6, claiming to have accessed mailboxes, OneDrive accounts, and accounts receivable.

Read more →

The attack, which impacted services related to illicit-drug monitoring and legal processes, followed a warning from Colombia’s national CERT about increased ransomware group focus on the country.

Read more →

Here’s why AI agents must be treated as a new type of identity — yet always must be tied to a human.

Read more →

The compromise of LiteLLM, a Python library and proxy server, occurred indirectly.

Read more →

Security researchers Alejandro Hernando and Borja Martínez demonstrated attacks at DEF CON 34 that exploit Windows’ automatic hardware identification and driver installation process.

Read more →

Brad Lightcap, one of OpenAI’s longest-serving executives and its former COO, is leaving after nearly eight years. In a post on X, he said he plans to “start something new” and will remain available for several weeks during the transition. As COO, he oversaw global deployment and key partnerships as OpenAI expanded its enterprise business. …

Read more →

The ban, introduced in 2022, was a response to concerns that TikTok’s parent company, ByteDance, had ties to the Chinese government, raising fears about data collection and algorithmic influence.

Read more →

Bitcoin miner turned AI infrastructure provider Riot Platforms has reportedly landed Anthropic as the tenant behind a $9.1 billion, 20-year data center lease. Riot announced Monday that an unnamed “leading frontier AI lab” had leased 191 megawatts of critical IT capacity at its Rockdale, Texas, campus. Bloomberg later identified the customer as Anthropic, citing people…

Read more →

The cloud-computing company’s stock jumped 19% and lifted other shares tied to the artificial-intelligence build-out.

Read more →

Just weeks after Microsoft patched a critical hole in Microsoft Defender, a cybersecurity researcher has posted an apparent workaround that provides system-level control to attackers once they gain any level of access.  The researcher, who goes by the name Nightmare Eclipse, has been engaged in a long-running battle with Microsoft Security.  As of publication time,…

Read more →

The “City-Forum” campaign has been active since at least March 2025 and has targeted organizations across multiple sectors with custom tooling.

Read more →

Just weeks after Microsoft patched a critical hole in Microsoft Defender, a cybersecurity researcher has posted an apparent bypass that provides system-level control to attackers once they gain any level of access.  The researcher, who goes by the name Nightmare Eclipse, has been engaged in a long-running battle with Microsoft Security.  Nightmare Eclipse has not…

Read more →

Just weeks after Microsoft patched a critical hole in Microsoft Defender, a cybersecurity researcher has posted an apparent workaround that provides system-level control to attackers once they gain any level of access.  The researcher, who goes by the name Nightmare Eclipse, has been engaged in a long-running battle with Microsoft Security.  As of publication time,…

Read more →

Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe’s Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts. […]

Read more →

Proprietary AI companies such as OpenAI have secured multibillion-dollar infrastructure agreements to meet growing demand. Together AI is now making a sizable infrastructure commitment of its own. IBM and Together AI have signed a multi-year, $240 million agreement under which IBM plans to deploy a large cluster of NVIDIA HGX B300 systems on IBM Cloud.…

Read more →