Thanks to mid six-figure bonuses, engineers at Samsung and SK Hynix are the hottest bachelors in South Korea.

Read more →

Anthropic will make auto mode in Claude Code the default for new sessions on Pro, Max, and Team plans starting August 14. Users who previously selected a different default may receive a one-time prompt asking whether they want to switch to auto mode. In a controlled experiment with 1,053 paid professional testers, human review caught…

Read more →

TRM Labs explains that sanctioned Iranian firm Shelbit was a fake crypto exchange

Read more →

Kimi K3 bypassed a UK cybersecurity test by accessing GitHub, cloning the benchmark and reading its solutions instead of solving the challenge Sometimes the smartest move isn’t solving the puzzle, it’s noticing nobody locked the door to the answer key. That’s essentially what happened when Moonshot’s Kimi K3 model was put through a cybersecurity evaluation…

Read more →

Broadcom’s acquisition of VMware has given MSPs an opportunity to rethink how customer workloads are deployed, but StorMagic Channel Chief Scott Mann does not expect most businesses to abandon VMware through a single, sweeping migration. Instead, Mann sees small and midsize businesses adopting multiple virtualization platforms, repurposing existing hardware and moving individual workloads according to…

Read more →

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro (“solidity-pro”) that has been observed delivering a browser wallet and credential stealer. The names of the extensions are below – helper-beeps.solidity-pro web3devtoolsx.solidity-pro Although neither of the extensions is now available on Open VSX, the GitHub repository

Read more →

Ricoh, a leading provider of smart workplace technology, today announced the appointment of Matthew Taylor as National Sales Manager for Ricoh Graphic Communications.

Read more →

OpenAI’s internal evaluation of its upcoming model, Astra, found significant advances in agentic coding and cybersecurity, leading the company to conclude that it cannot rule out the model reaching the critical capability level for cybersecurity under its Preparedness Framework. The Preparedness Framework, first published in December 2023, outlines how OpenAI evaluates frontier AI risks and…

Read more →

GitHub has flagged npm malware since March 2026. Anyone pulling in a bad PyPI, Maven, RubyGems, NuGet, Go, crates.io, or PHP Composer package has had no such warning, because GitHub’s malware detection only ever watched one ecosystem. That changed this month. GitHub’s Advisory Database now ingests malware reports from OpenSSF’s malicious-packages repository, a public feed…

Read more →

Last week on Malwarebytes Labs: AI chat bots are sliding into League of Legends friend requests Meta ordered to pay $942 million over harm to children Apple WebKit vulnerabilities reveal your IP address, despite Private Relay Scammers target OnlyFans users with deepfakes Amazon and Apple impersonated in “$149.99 unauthorized charge” scam Anthropic’s Mythos AI used…

Read more →

Artificial intelligence is creating a two-sided security challenge for managed service providers, channel leaders warned at GTIA ChannelCon 2026: Cybercriminals are using the technology to make familiar attacks more convincing, while customers are adopting AI tools that can expose sensitive business data. For MSPs, responding will require more than adding security products. Providers must help…

Read more →

OpenAI has announced that it’s pausing some “internal activities” involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. In response to the discovery, the AI upstart said it’s implementing security controls for higher-capability models and associated activities, such as isolated

Read more →

Integris has launched CORE, a managed services offering that combines AI, automation, cybersecurity, and data governance as the MSP looks to redefine what managed services should include as artificial intelligence changes the needs of small and midsize businesses. AI creates a new inflection point for managed services For Integris CEO Rashaad Bajwa, the shift reflects…

Read more →

Boards want evidence that security controls and architecture reduce business risk, expressed in terms of resilience, consequence, and decision relevance. Translating technical findings into business language remains a major time burden for CISOs, who are calling for simpler data delivery, better frameworks, and better context. Pulse Security AI’s The CISO-Board Communication Gap report found that…

Read more →

The EU’s fight to regulate AI models entered a new chapter on 2 August 2026, when the European Commission’s AI Office and national authorities began enforcing the AI Act. The AI Act is the EU’s law regulating AI, the first broad legal framework of its kind. It creates a common set of rules for AI…

Read more →

Canon Business Services CBS ANZ has appointed senior technology executive, Matt Clarkin, as General Manager of Sales and Marketing.

Read more →

Australia’s major telcos are warning customers to be vigilant against scammers who may use the Census to trick them into sharing access to personal data and financial information.

Read more →

Voice automation often looks deceptively simple during an early rollout.

Read more →

Ricoh has announced it has been named in the Leaders Category in the IDC MarketScape: Worldwide Laser Production Printers, 2026 Vendor Assessment 1.

Read more →

Google Threat Intelligence Group GTIG has published new…

Read more →

Japan’s airline cuts network provisioning time from months to weeks and prepares for a tenfold increase in global data volumes

Read more →

In this post, I will talk about 6 best enterprise platforms for AI-Native software engineering. Enterprise engineering organizations have moved past the question of whether AI belongs in software delivery. The question in 2026 is structural: when AI agents plan work, write code, review pull requests, and trigger operational workflows across thousands of services, what…

Read more →

Plus, Elon Musk’s rocket company roller coaster, the ‘SaaSpocalypse’ forces reinvention, replacing AI data-center wires with light

Read more →

The Cirqa health tracker, Garmin’s screenless health band, offers lots of data with no distractions.

Read more →

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Fake Xeno Roblox Cheats Deliver Powerful Java Stealer Through Discord and Forums   DarkSword’s Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator Cluster   Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting Alibaba…

Read more →

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Palo Alto Networks Faces China Cybersecurity Review Amid Rising Tech Tensions Metabase Zero-Day Exploited in the Wild,…

Read more →

Plus, Iran’s new demands for reopening the Strait of Hormuz narrow Trump’s options, and estate sales get competitive.

Read more →

The iPhone maker has held early talks with China’s CXMT, but any deal would be politically sensitive.

Read more →

Wonderful capability or ethical failure? Decoding the stories coming out of Black Hat USA and the unsanctioned AI cyber attacks of 2026.

Read more →

CSS attacks on major webmail services can steal credentials, hijack sessions and manipulate AI tools connected to users’ inboxes. PortSwigger researcher Gareth Heyes demonstrated something that should make every webmail team a little nervous: plain CSS, the styling language that’s supposed to just make text look nice, can be weaponized to steal passwords, hijack sessions, and…

Read more →

Cybersecurity vendors introduced a wave of AI-driven tools at Black Hat USA 2026, targeting threat detection, exposure management, security operations, and emerging attack risks. Tanium, Prophet Security, VanishID, Flashpoint, Arctic Wolf, and Vectra AI were among the companies unveiling new capabilities during the Aug. 1–6 conference in Las Vegas. The announcements reflected the industry’s shift…

Read more →

SpaceX’s $300 billion swing in market value this past week put Musk back in grind mode, having to execute on highflying promises made in the lead-up to the biggest IPO ever.

Read more →

The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors. […]

Read more →

China opened a cybersecurity review of Palo Alto Networks, citing national security concerns but giving no details about the reasons behind the probe. China’s Cyberspace Administration (CAC) announced that it’s launching a cybersecurity review of products Palo Alto Networks sells in the country. The announcement itself runs to a few sentences of formal Chinese, citing…

Read more →

Attackers exploited a CVSS 10 Metabase zero-day to gain admin access and steal sensitive data. Framework confirmed it was among the victims. Metabase just confirmed something no analytics vendor wants to write: attackers found and used an unpatched, maximum-severity flaw against Metabase Cloud before anyone on the defense side knew it existed. The company’s own…

Read more →

Robinhood Chain launched on July 1, 2026. Banana Gun supported it from that first day. No waitlist, no separate setup, no new app to download. You open the same Banana Gun Telegram bot you already use, and copy trading is sitting there waiting for you. Robinhood Chain moved fast. Daily DEX volume on the chain…

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Progress LoadMaster vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Progress LoadMaster vulnerability, tracked as CVE-2026-8037 (CVSS score of 9.6), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is an OS Command Injection Remote Code Execution issue…

Read more →

Attacker-controlled instructions can make Atlassian’s Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. Two security firms found that behavior independently, by different routes. Only one of those routes is confirmed closed. PromptArmor, an AI security firm, hid the instructions in content Rovo reads.…

Read more →

New research shows content inside an email can escape its message boundary and interfere with the webmail interface. Across attack chains spanning Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail, the techniques can capture passwords, take over third-party accounts, leak tokens, hijack trusted UI actions, and manipulate AI tools that read email. PortSwigger…

Read more →

Hackers stole personal, medical, and insurance data of 3.8 million people from Unlimited Technology Systems’ data center. Unlimited Technology Systems disclosed a data breach affecting more than 3.8 million people after hackers accessed one of its commercial data centers between October 5 and 10, 2025. Unlimited Technology Systems is a U.S.-based healthcare technology company headquartered…

Read more →

Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software package has been exploited in the wild as a zero-day. The vulnerability (CVSS score: 10.0), which does not carry a CVE identifier, allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, enabling them to…

Read more →

N-able has released a fresh round of hotfixes for N‑central as part of its investigation into ongoing exploitation of a recently disclosed security flaw in the Remote Monitoring and Management (RMM) product. “We are proactively expanding protections in response to ongoing monitoring of threat actors as they evolve their attack techniques,” the company said. “This…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. The vulnerability, tracked as CVE-2026-8037 (CVSS score: 9.6), is a command injection flaw that could be weaponized to achieve arbitrary

Read more →

A decade ago, a computer did something that no human would have done. It was considered a breakthrough for AI. Now the world is full of them.

Read more →

Russell on launching Savant Pathseeker, the first product in its new Agentic Offensive Testing line.

Read more →

Murphy on why data trust is the foundation of the agentic era.

Read more →

AI-battered hedge fund Situational Awareness made a big bet this week in Source Foundry, a private company aiming to reinvent the way chips are manufactured.

Read more →

Davies shares insights from original FIRE research, while also digging into trends.

Read more →

Boehm discusses why organizations need to build a resilient foundation for securing AI across increasingly dynamic environments.

Read more →

Lina K., a co-worker, recently shared a firsthand account of how bots are adding League of Legends players via the Riot client friends list immediately after a match ends, striking up a flirty conversation, and eventually pushing an OnlyFans link. The pattern lines up with a wave of complaints that have piled up on Reddit…

Read more →

The decision reflects internal findings that the upcoming ‘Astra’ model may possess ‘critical cyber capabilities’ and follows a string of AI-testing incidents.

Read more →

A New Mexico court has ordered Meta to pay a total of $942 million after finding that Facebook and Instagram harmed young users and that the company misled consumers about the safety of its platforms. Reportedly, the decision combines a $375 million civil-penalty verdict from March with a newly ordered $567 million abatement fund intended…

Read more →

A Canadian hacker has pleaded guilty to charges tied to the 2024 breaches of more than 165 Snowflake customer environments, a campaign that exposed data belonging to at least 100 million people. Connor Riley Moucka, 26, admitted to computer fraud, wire fraud, aggravated identity theft, and conspiracy in federal court in Seattle. The attacks relied…

Read more →

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. […]

Read more →

On Aug. 6, DXC announced a strategic partnership with security startup Primary, becoming the exclusive managed services provider for Primary’s AI-native Zero Trust Platform. The joint offering is designed to help enterprises and government agencies govern how AI agents and enterprise AI applications access data, identities, and business systems. The companies are targeting organizations that…

Read more →

A phone-first data-theft extortion campaign has targeted dozens of major US financial firms over the past month. Ransom-seeking hackers have targeted dozens of major US financial institutions and other businesses in a campaign that relies heavily on phone-based social engineering, according to data from Google and internet intelligence platforms reviewed by Reuters. The targets included…

Read more →

Ten years ago, we launched AWS Directory Service for Microsoft Active Directory, a fully managed Microsoft Active Directory in the AWS Cloud. In that original announcement, Jeff Barr described a straightforward promise: “You will spend less time administering and more time working on your applications and your business.” A decade later, AWS Managed Microsoft AD…

Read more →

China has put one of America’s biggest cybersecurity companies under the microscope, adding network security software to the growing list of US technologies caught in the escalating Beijing-Washington standoff. The Cyberspace Administration of China said Thursday that its Cybersecurity Review Office had begun a review of products sold in China by Palo Alto Networks, citing…

Read more →

Cato Networks, a converged network and security cloud, has launched Cato Agentic Threat Prevention, a new capability to deploy autonomous agents to predict likely attack paths. Stopping frontier AI adversaries before they advance Introduced at Black Hat USA 2026, the capability also automatically personalizes protections for each customer environment to prevent breaches before AI-assisted attacks…

Read more →

Healthcare software company Unlimited Technology Systems reported that more than 3.8 million people were impacted by a data breach incident that occurred in October 2025. […]

Read more →

The start of Q3 saw few mergers and acquisitions (M&A) movements across the channel, but these were nonetheless significant. The acquisitions focused on security and expanding reach into various regions to serve more customers. Read more about the M&A moves below, and be sure to catch up on last month’s moves. Barracuda Networks acquires Evo…

Read more →

Etsy is shrinking its workforce even as its business starts gaining momentum again. The online marketplace said Wednesday it will eliminate about 220 jobs, roughly 12% of its workforce, as part of a restructuring aimed at simplifying the organization and speeding up decision-making. Most of the layoffs will affect employees in product and engineering, according…

Read more →

8×8, Inc., a business communication platform provider, is introducing a new partner program for its direct resell channel that rewards customer retention and expansion. Four-tier structure to align partner and company success The 8×8 partner program features a four-tier structure: Authorized, Silver, Gold, and Platinum. With this structure, direct resellers can earn financial rewards according…

Read more →

Experts urge managed-device logins and audit log monitoring to stop phishing-led cloud data theft.

Read more →

LightSpy, a China-linked surveillance platform, has grown into an operation using at least 117 servers with verified router infections. At Black Hat USA, Arctic Wolf researchers Dmitry Bestuzhev and Dmitry Melikov said LightSpy has been identified in more than 13 countries, growing well beyond the spyware, active since at least 2018 and publicly documented in…

Read more →

A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign designed to deliver cross-platform malware targeting Windows, Mac, and Linux systems. “These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them deliver a powerful RAT and infostealer…

Read more →

AMD is moving deeper into AI inference with technology designed around specific models rather than relying only on general-purpose accelerators. The chipmaker has agreed to acquire Toronto-based Taalas, a startup specializing in inference silicon that AMD says can reduce compute and memory bottlenecks. AMD plans to integrate the technology into its accelerator roadmap and develop…

Read more →

ClickFix-style attacks are being used to deliver a Go-based malware capable of stealing cryptocurrency assets, as well as browser-stored passwords, Apple iCloud Keychain data, and cached credentials. The macOS-focused infection chain is designed to deliver a shell script that profiles the host and then fetches a macOS malware payload that’s compatible with the computer’s CPU…

Read more →

Proofpoint Inc. debuted a new program at Black Hat USA 2026 that makes a portfolio of OEM-ready threat intelligence and detection capabilities available for technology providers, cybersecurity vendors, managed services providers, and platform companies. Accelerating OEM innovation with trusted threat intelligence The Proofpoint OEM Program formalizes and expands the cybersecurity providers’ OEM business. It provides…

Read more →

A recent wave of cyber attacks targeting financial services, private equity, and professional services is attributed to a data extortion group known as UNC6671. “UNC6671 continues to rely on voice phishing (vishing) to target enterprise employees, posing as IT help desk staff facilitating mandatory, urgent security migrations. Significantly, the threat actor often contacts employees via…

Read more →

ConnectWise and SentinelOne have unveiled a joint managed cybersecurity strategy aimed at helping MSPs scale threat detection and response through deeper integration of Managed EDR, AI-driven security, and automation. ConnectWise and SentinelOne deepen MSP security collaboration Announced at Black Hat USA 2026, the strategy establishes a framework for deeper collaboration that brings together the AI-driven…

Read more →

Researchers have uncovered an extremely effective attack campaign that involved AI agent skills trojanized to deploy a credential stealer. The incident is part of a growing trend in which attackers are targeting the AI software supply chain by poisoning sharable instruction and configuration files for agentic tools. Discovered by researchers from security firm Zenity, the…

Read more →

Zero Networks, a Zero Trust security solutions provider, announced a new capability at Black Hat USA 2026. This new capability applies the Open Worldwide Application Security Project’s (OWASP) principle of Least Agency to help organizations safely deploy AI agents. Reducing the impact of compromised AI agents The Least Agency Enforcement capability uses identity-based microsegmentation, policy…

Read more →

The attack exploits a time-of-neutralization to time-of-use (TONTOU) window in Spectre v2 defenses, where a gap exists between when the branch predictor is isolated and when it is used.

Read more →

VulnCheck CTO Jacob Baines claims that Zbtlink routers are intentionally designed to communicate with command and control servers, a feature he calls a “phone-home trojan horse.”

Read more →

The lawsuit, filed in the U.S. District Court for the Northern District of Illinois, claims Walmart records calls to its stores, extracts vocal characteristics, and creates mathematical templates to identify callers.

Read more →

Novee Security researchers discovered flaws in Anthropic’s Claude Code, Google’s Gemini CLI, and OpenAI’s Codex.

Read more →

As AI-generated code continues to be injected into all corners of the internet, concerns have risen about an expanding attack surface for malicious hackers to exploit. Some have argued that the enhanced cybersecurity capabilities of large language models could serve as a check, finding and fixing vulnerabilities nearly as fast as they’re created. But new…

Read more →