Month: August 2026

In this interview with Help Net Security, Dr. Yaakov Stein, VP CTO of Allot, discusses what post-quantum readiness looks like inside a mobile network. The discussion covers which operator traffic stays sensitive for years, including subscriber identity mappings, billing records and call metadata, and which becomes worthless within hours. It walks through the order of…

Read more →

Security Engineer, PSO Google | USA | On-site – View job details As a Security Engineer, you will provide technical guidance to customers adopting Google Cloud Platform, helping them navigate their cloud journey with the Professional Services team. The role includes advising on secure foundational cloud implementations, automated provisioning of infrastructure and applications, and cloud-ready…

Read more →

A federal lawsuit alleges the e-commerce giant raised the price floor in some auctions after bids had been entered, costing advertisers billions.

Read more →

Email security starts with proper authentication, and DMARC is a key part of protecting your domain from spoofing, phishing, and unauthorized email use. However, creating the correct DMARC DNS record manually can be confusing. The best DMARC record generator simplifies the process by helping you configure the right policy, reporting options, and authentication settings. With…

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

Growing ecosystem of Engage Preferred Services Partners gives Australian organisations greater access to validated Fortinet implementation expertise.

Read more →

New release brings AI threat detection and real-time security coaching to Gmail; early data shows an average of 1 in 666 emails intercepted were dangerous threats

Read more →

L to R Andrew Dzurak, Diraq Founder and CEO and Jarrod Nink, Managing Director, Australia, Equinix Diraq’s system will be the first silicon spin quantum computer to run in a…

Read more →

The 2026 PAX Aus Indie Showcase has crowned 12 inventive Australian games spanning cartridge restoration, co-op murder mysteries, corporate mutants, rainbow pixies and the rise…

Read more →

MSPs are being asked to deliver networking and security as a more unified service, but many still manage the two through separate vendors, consoles, billing models, and technical teams. NETGEAR Enterprise is betting that convergence can eliminate some of that complexity. Through its integration of networking, SASE, Zero Trust, and cloud management, the company says…

Read more →

Introduction On Monday 2026-08-31, I used a link from a malicious Brazilian Portuguese email to infect a Windows host in my lab. This was a Guildma (Astaroth) malware infection. The link from the email is geofenced for Brazil, meaning that it would only deliver the malware if I checked it from a Brazil-based IP address. Otherwise,…

Read more →

Cloud waste has been sliding gently downwards for 5 years. This year it turned around. Fitzroy IT’s Tim Jenkinson and Daniel Robinson have the details, and the answers to your…

Read more →

The attacker gained unauthorized access to Coder’s Cloudflare infrastructure and added attacker-controlled IP addresses to the pool serving Coder’s module registry. These servers hosted modified registry artifacts containing malicious code designed to discover credentials and …

Read more →

Cadence uses JetBrains TeamCity to orchestrate cloud workloads, and the affected server, api.cadence.jetbrains.com, remained vulnerable to CVE-2026-63077 despite having been intended for patching. Threat actors exploited the vulnerability beginning on August 8 to gain unauthor…

Read more →

Moving beyond “AI theater” with measurable KPIs: Security teams must distinguish between genuine value and “productivity theater.” Success requires defining concrete KPIs—such as cost improvement, risk reduction, and speed—to measure true ROI, rather than deploying AI tools without a clear strategic purpose. Mitigate new autonomous risks: The shift to an agentic SOC introduces distinct threats,…

Read more →

Analysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliates

Read more →

Australia has spent the past two years assembling one of the more ambitious digital identity stacks anywhere.

Read more →

News Highlights

Read more →

Rice is one of those foods that ought to be ridiculously simple to cook, yet somehow has an uncanny ability to emerge crunchy, soggy, gluggy, burnt to the bottom of the…

Read more →

BNEI BRAK, Israel, Aug. 31, 2026, CyberNewswire — Lunar Cyber today announced Token Exposure Monitoring, a new capability designed to identify, attribute and validate Non-Human Identities (NHI) and machine credentials inside infostealer logs, connect them to the affected organization, and determine which exposures require action. The rapid adoption of AI development tools, cloud platforms and…

Read more →

International Women in Cyber Day, recognized globally on September 1, highlights the strategic impact of women driving innovation, resilience, and security across the…

Read more →

Nvidia will supply the chips to the Texas data center and hold the lease, again using its financial might to boost a customer.

Read more →

US-listed cloud security giant Akamai Technologies has charted a massive regional milestone, revealing its Asia-Pacific and Japan APJ revenue officially crossed the US$1…

Read more →

PHILADELPHIA, Aug. 24, 2026, CyberNewswire — Security Risk Advisors (SRA), the authors of the free VECTR platform, announce today another great free platform launch: SCALR AI. Security teams can get SCALR AI for free, delivered through the Azure Marketplace. SCALR AI is an agentive workbench that automates time-consuming security work and ships with fully functional incident…

Read more →

Email is still where most attacks begin. Phishing, business email compromise, fake invoices, and malware-laced attachments usually land in the inbox first. If you run on…

Read more →

McKesson said its business and distribution centers remain operational in the wake of a cyberattack it disclosed Friday that resulted in data theft and temporary service interruptions. Attackers gained access to some of the health care vendor’s third-party applications and stole data associated with a subset of customers in the company’s oncology, multispecialty and medical-surgical…

Read more →

Plus, the company giving bonuses for “human” skills and the plan for Venezuela’s oil.

Read more →

A threat actor used a variety of infostealers to collect session information and access Claude accounts belonging to an unknown number of users.

Read more →

The Cronos blockchain network has resumed trading activity after a price-manipulation attack on the Tectonic cryptocurrency lending platform allowed an attacker to borrow $74 million. […]

Read more →

Broadcom’s acquisition of VMware has changed VMware’s licensing, product portfolio, and partner ecosystem, prompting managed service providers (MSPs) to reassess the cost and long-term fit of VMware environments. For MSPs considering a migration, Azure Virtual Machines, Google Compute Engine, Nutanix AHV, Scale Computing, and Red Hat OpenShift Virtualization are five leading VMware alternatives to consider…

Read more →

The ClickFix-style campaign features a sophisticated, multistage attack chain that includes reverse tunnels into victim organizations’ networks.

Read more →

Microsoft on Friday reported that a glitch is causing Windows to tell users that Microsoft Defender Antivirus is turned off when it is in fact fully functional, a bug that the vendor says it is working to fix. Consultants say that this advisory raises a major concern in that it will train users to ignore…

Read more →

Microsoft on Friday reported that a glitch is causing Windows to tell users that Microsoft Defender Antivirus is turned off when it is in fact fully functional, a bug that the vendor says it is working to fix. Consultants say that this advisory raises a major concern in that it will train users to ignore…

Read more →

One of my internet-exposed inference honeypots was discovered, relabeled with sought-after model names, and incorporated into infrastructure apparently used to provide “free” LLM backends. It then received a real coding-agent session — history, filesystem output, working paths, and the agent’s local tool manifest. The honeypot did not request or cause any tool execution; what the…

Read more →

ValleyRAT hides behind legitimate adware, using DLL sideloading to evade detection, steal data and give Silver Fox control of infected systems. ValleyRAT doesn’t always need to disguise itself as a cracked game or a fake browser update. It can also hide behind something much more ordinary: an application that looks like adware and appears to…

Read more →

Anthropic is alerting users that threat actors are deploying commodity infostealer malware to hijack active, authenticated browser sessions, giving hackers unauthorized access to paid Claude accounts. According to customer notices sent by the Claude Team, attackers are not guessing passwords or exploiting vulnerabilities in Anthropic’s infrastructure. Instead, general-purpose malware running locally on victims’ machines extracts…

Read more →

When customers keep pointing you to a solution that overlaps with parts of your own offering, you have a choice to make. This post is about the choice we made with Upwind, and why we’d make it again. AWS Security Hub Extended exists because customers told us what was working for them in enterprise security…

Read more →

A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into running malicious PowerShell commands in Windows Terminal. […]

Read more →

Fire Ant targets routers and authentication systems to spy, steal credentials and evade detection.

Read more →

The Trump administration rolled out a six-month test program in Texas on Monday that will draw on volunteer expertise and technology from cyber and artificial intelligence companies to protect the water sector. “Project Watershed 250” is the first of the state-based, industry-centric pilot projects to cross the finish line that the Office of the National…

Read more →

Labor Day deals are already making this a great time to buy a streaming device, and these prices are hard to beat.

Read more →

The commission, along with more than 20 states, will allege the e-commerce giant reaped billions by manipulating ad prices on its retail platform.

Read more →

Import a supported Google Play book, and Gemini Notebook will use it as a source of information to generate reports, quizzes, podcasts, and more.

Read more →

OpenAI sounds a solemn and dire alarm, but we’re woefully unprepared for what’s coming.

Read more →

OpenAI’s Hugging Face attack postmortem shows agents don’t care about rules — they need strong controls.

Read more →

Here’s what to know about the glitch, and the only action you can take for now.

Read more →

Threat actors with ties to the Democratic People’s Republic of Korea (aka DPRK or North Korea) have been observed seeking job opportunities beyond the information technology (IT) sector, with recent investigations identifying suspected workers employed in sales and marketing and the medical profession. The ongoing insider threat is part of what has been described as…

Read more →

AWS IAM Identity Center integrates with external identity provider (IdP) to provide customers with a centralized authentication and authorization solution for AWS resources across AWS Organizations. AWS continues to invest into IAM Identity Center with a growing number of AWS services that natively integrate with IAM Identity Center. As your AWS organization scales, maintaining visibility…

Read more →

No longer limited to the Mac, Perplexity’s Personal Computer for Windows AI can complete complex tasks on your PC with little or no input from you.

Read more →

Microsoft is investigating a widespread service issue causing authentication issues and email delays and failures for Exchange Online customers. […]

Read more →

ChatGPT Work is experiencing a partial outage, and users across multiple subscription plans may be unable to start or continue tasks. […]

Read more →

Scammers are turning Indeed’s trusted name into a malware delivery vehicle, and the bait is something job seekers desperately want: an interview. Security researchers have uncovered a campaign in which fake recruiters direct Indeed applicants to Android applications that supposedly help them complete an interview. Instead, Malwarebytes found that the applications acted as Trojan droppers,…

Read more →

AI-powered phishing makes old warning signs obsolete, forcing security training to focus on verification.

Read more →

Sony’s excellent noise-canceling headphones just hit an all-time low price ahead of Labor Day.

Read more →

When you think of AI, and Nvidia’s GPUs often come to mind because they have been so much a part of the ongoing AI revolution. But at the recent Hot Chips show in California, an alternative future appears to be taking shape as corporate concerns continue to grow about cost, energy use and AI slowdowns.…

Read more →

The modern SOC is getting better at closing alerts. It is still bad at remembering them. Alerts are multiplying. Innovation has been focused on machines that can triage, correlate, and recommend a response at a much elevated scale. The queue indeed is moving faster than ever. Alert in, verdict out, case closed. Attackers do not…

Read more →

In the AI era, the industry needs to move away from passwords and focus more on identity-centric security.

Read more →

Apple CEO Tim Cook becomes chairman of the company board tomorrow, with John Ternus taking over the top job in Cupertino. Both men followed in the footsteps of visionary Apple co-founder Steve Jobs, and both have found they must build their own definition of success. The past is a guide, but not a template Think back to 2011 when…

Read more →

The researchers discovered Fire Ant’s new tactic after finding an active GRE (Generic Routing Encapsulation) tunnel interface on a Cisco IOS XR router that could not be explained by a running configuration or commit history. […]

Read more →

Healthcare and pharmaceutical-distribution giant McKesson has disclosed a cybersecurity incident involving unauthorized access to third-party applications and the theft of data. McKesson Corporation is an American healthcare company that distributes pharmaceuticals and provides medical supplies, health information technology, and care management tools. McKesson says it discovered the cybersecurity incident on August 25, 2026, and that…

Read more →

Read more →

Attackers are disguising automated scanning as traffic from AI crawlers operated by OpenAI, Anthropic, Google, Perplexity and other companies while searching websites for exposed credentials and configuration files, according to GreyNoise. (Source: GreyNoise) “Every program that visits a website announces itself in one line of the request. Chrome says it is Chrome. Googlebot says it…

Read more →

The threat actor targeting internet-facing PaperCut Application Servers is covertly installing legitimate remote access software on them, PaperCut Software shared in the most recent update on the ongoing attack campaign. PaperCut zero-days exploited to deploy remote access tools The vendor first warned of in-the-wild compromises on August 27, 2026, when it urged customers using the…

Read more →

Software companies are increasingly treating embedded payments as a growth strategy rather than a back-office function, creating a new advisory opportunity for channel partners that can help customers increase adoption, improve margins and select the right payment providers. Ben Weiner, global head of partner channel at Nuvei, told Channel Insider that payment optimization is becoming…

Read more →

AI accountability is becoming a business imperative as organizations face growing pressure to explain what AI systems expose, influence and decide

Read more →

Anthropic reportedly came close to making a major bet on AI chips… then changed course. The Claude maker discussed acquiring AI chip startup MatX for about $7 billion, according to Reuters, which cited people familiar with the discussions. The talks are no longer active as an acquisition, with one person saying they have shifted toward…

Read more →

File servers remain a critical part of many IT environments, but managing access securely can become complex as permissions accumulate. tenfold Software outlines five best practices for simplifying file server administration and maintaining least-privilege access. […]

Read more →

The boring parts caused most of the trouble. A router shipped ready to listen. A fake check turned the user into the installer. Trusted systems collected traffic and passwords, then cleaned the logs. Old bugs formed new attack chains. Even an AI agent decided its assigned task was optional. Elsewhere, fake apps, helpful support calls,…

Read more →

Research by: hasherezade Key Points Since early 2025, Check Point Research has been tracking JSCeal, a sophisticated cryptocurrency-focused stealer with broader credential-theft, surveillance, and traffic-interception capabilities, delivered as compiled V8 bytecode (JSC files). The payloads are protected with javascript-obfuscator, using multiple techniques including RC4-protected strings, control-flow flattening, proxy functions, and operation wrappers. Our goal was to recover…

Read more →

Anthropic is writing another eye-popping check. The Claude developer agreed to spend roughly $45 billion over six years to lease cloud computing power from London-based infrastructure startup Nscale, Bloomberg first reported on Wednesday. The deal secures Anthropic around 460 megawatts of power capacity from the first building at Nscale’s flagship Monarch data center campus in…

Read more →

Read more →

Berlin’s city administration has confirmed that cybercriminals are attempting to extort the city after the Rhysida ransomware gang listed it on their data leak site. […]

Read more →

OpenAI and more than 100 technology, cybersecurity, financial, and infrastructure organizations are calling for a global push to strengthen cyber defenses before increasingly capable AI systems make it easier to launch and scale attacks. In an open letter, the companies warned that AI-enabled attacks could become more widespread and sophisticated within months, putting hospitals, water…

Read more →

The latest Android 17 update adds broad support for Encrypted Client Hello, among other changes. Here’s how they work.

Read more →

Read more →

Tencent’s newest AI model did more than emerge from the company’s development process. Tencent says the model actually helped with parts of that process. The company released Hy4 preview on Aug. 28, calling it its most capable model yet for software engineering, office work and scientific research. Hy4 has 770 billion total parameters, 49 billion…

Read more →

Read more →

For the latest discoveries in cyber research for the week of 31st August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Manchester Airports Group, the UK operator of Manchester, London Stansted, and East Midlands airports, has disclosed a cyberattack that exposed data belonging to about 8.7 million customers. The compromised information includes contact details,…

Read more →

Also, the challenges facing Apple’s new CEO

Read more →

As enterprises push generative and agentic AI projects beyond experimentation, the challenge is shifting from proving the technology works to getting it into production fast enough to deliver measurable business value. For systems integrators and other channel partners, that is changing the enterprise AI implementation playbook. OSF Digital EVP and Global Head of Strategy Sean…

Read more →

The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed Chinese adware application, running the malware under a trusted process to slip past users who add such software to their antivirus exclusions. Russian cybersecurity vendor Kaspersky said the attackers built the disguise around QN Wallpaper, a genuine…

Read more →

The AWS Management Console now loads inside a network with no path to the public internet. Console Private Access became generally available on August 28 for virtual private clouds, the isolated networks customers run inside AWS, that have no internet connectivity at all. Authentication flows, the JavaScript, CSS, and images that draw the page, console-only…

Read more →

Healthcare company McKesson disclosed a cybersecurity incident in which hackers got into third-party applications and stole data. McKesson is a major U.S. healthcare company that distributes pharmaceuticals, medical supplies and other healthcare products to pharmacies, hospitals and clinics. According to the SEC filing, the intrusion was detected on August 25, 2026. The company said the…

Read more →

From scanning Gmail to catching ugly loan terms, ChatGPT Work has become my practical small-business assistant. Here’s how agentic AI delivers real productivity gains for me.

Read more →

Threat actors associated with Aurora (aka Aur0ra) ransomware have been observed using SpaceX’s artificial intelligence (AI)-powered coding assistant Cursor to break into target networks, according to findings from CloudSEK and Gambit Security. The two independent analyses are based on exposed infrastructure associated with the Russian-speaking cybercrime group, leading to the discovery of its

Read more →

Claude Code reads files, runs shell commands, invokes MCP tools, and acts through the credentials available on a developer’s machine. Anthropic’s new Compliance API endpoints give security teams their clearest view yet into that activity. They also expose a larger problem: activity logs alone cannot tell you whether an agent’s access is legitimate. AI has…

Read more →

Anthropic has started locking users out of their Claude accounts due to their login sessions having been compromised through infostealer malware. “The malware identified in this campaign so far include Vidar, Lumma (LummaC2), StealC, RedLine and Acreed on Windows, and Atomic Stealer (AMOS) on a small number of Macs,” the company said in emails sent…

Read more →

A coalition led by OpenAI is warning that AI will sharply accelerate the speed and scale of cyberattacks, leaving enterprises with a narrowing window to fix long-standing security weaknesses before they are exploited. “In the coming months, AI-enabled cyber attacks will become far more widespread and sophisticated as models around the world become increasingly capable,”…

Read more →

Fire Ant hijacked Cisco routers, stole credentials and altered logs to hide its tracks, using trusted infrastructure to reach high-value networks. Chinese-linked cyber espionage group Fire Ant has spent the past year quietly graduating from hacking individual computers to hacking the infrastructure that connects them. Sygnia’s new report traces how the group expanded from compromising…

Read more →

When you’re working with Microsoft Copilot to create a business document, you might find yourself torn between two opposing instincts. Part of you is itching to edit its output right away, while another part wants to keep prompting the AI assistant to refine the generated text. Turns out you can do both. The Pages feature…

Read more →

Microsoft has confirmed that mouse settings are being reverted on Windows 11 systems after installing the KB5120998 August 2026 non-security preview update. […]

Read more →

“Anything that can go wrong will go wrong.” Policymakers alarmed by the recent incidents of autonomous AI agents breaking through guardrails to hack other companies seem to have Murphy’s Law on the mind – and who can blame them? When agents’ behavior becomes unpredictable, it’s easy to imagine any number of scenarios where they’re running…

Read more →

Attackers have turned previously legitimate browser extensions into malware after acquiring them from legitimate publishers, potentially allowing malicious updates to reach users who had installed the software when it was still safe, researchers at Socket have found. The campaign involved 19 extensions for Google Chrome and Microsoft Edge. Five had originally been developed by legitimate…

Read more →

Russian state hackers are trying to interfere with AI-assisted malware analysis in Ukraine by deliberately setting off AI safety mechanisms, ESET has found. The technique, named GuardBreaker by ESET, appeared in a malicious VBS script tied to UAC-0099, a Russia-aligned group previously observed conducting initial-access operations and handing validated targets to the GRU-linked Sandworm hackers.…

Read more →

Read more →

To help the company reach new heights, John Ternus must take it beyond the supply chain mastery of Tim Cook, who built it into a $5 trillion colossus.

Read more →

Two Nigerian men extradited to the U.S. on Thursday have been charged with involvement in sextortion schemes that resulted in the deaths of two minor victims in Mississippi and North Carolina. […]

Read more →

Infostealers can steal active Claude sessions, bypass 2FA and drain paid usage. Anthropic is revoking access and refunding unauthorized charges. Anthropic confirmed that several infostealer malware can hijack an active Claude login session and let attackers burn through your usage without ever touching your password. “Our investigation is ongoing. Our findings to date suggest that…

Read more →

Password managers have expanded well beyond saving credentials, and that becomes clear when comparing 1Password with Dashlane. 1Password places greater emphasis on usability and developer integration, while Dashlane’s Omnix platform adds credential risk monitoring and phishing protection. Those differences make the products better suited to different business environments.   I evaluated each platform based on usability,…

Read more →

A China-nexus cyber espionage actor tracked as Fire Ant has expanded a long-running campaign beyond VMware hypervisors to compromise Cisco IOS XR routers, Terminal Access Controller Access-Control System (TACACS) servers, and Linux management hosts used to route, authenticate, and manage high-value networks. Sygnia, the incident response firm that investigated the intrusion, said the actor

Read more →