In this post, I will show you why digital due diligence is becoming as routine as a background check. Global scam losses keep climbing year after year, and the reason isn’t that people have gotten careless. It’s that the tools available to threat actors have advanced faster than the tools available to everyone else. That…
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
HPE today announced the permanent appointment of Anthony Sanelli as General Manager, Compute, HPE South Pacific.
The good news is that large language model (LLM) token costs are coming down. The conundrum: The overall cost of AI workloads is going up. Gartner research predicts that, while token costs will fall by 95% by 2030, inference costs for agentic workflows will increase more than fivefold over the next two years. This is…
OpenAI president Greg Brockman on Sunday warned enterprise CISOs that they need to more aggressively embrace agents if they want to survive upcoming cyberattacks. Brockman said in a blog post that it has become “increasingly clear” that company systems are hiding “significant flaws, and defenders need to find and fix them before attackers do.” He…
New partnership helps local customers navigate escalating operational and security risks with confidence by automating digital certificate lifecycle management
OpenAI president Greg Brockman on Sunday warned enterprise CISOs that they need to more aggressively embrace agents if they want to survive upcoming cyberattacks. Brockman said in a blog post that it has become “increasingly clear” that company systems are hiding “significant flaws, and defenders need to find and fix them before attackers do.” He…
In this post, I will discuss about the Polymarket Bot in 2026 and what automation can do, and what still needs your hands. People search for a Polymarket bot expecting something that trades prediction markets for them while they sleep. What exists is more useful and less magical than that. Here is an honest account…
Account Executive may be the most ambiguous job title in Australian and New Zealand go-to-market hiring sales, marketing and customer roles, with median advertised pay varying…
Experienced cyber claims leader strengthens Cowbell’s local expertise as the company expands across Australia
New platform builds on proven automotive leadership to enable safe, intuitive human-machine interaction
How to stop wasting money on storage: Think in dollars, not gigabytes.
GLM-5.3 reportedly outperforms models like Fable 5 and GPT-5.6 Sol on the CyberGym benchmark, showing an advanced ability to identify vulnerabilities and even construct exploitation chains.
The breach, which occurred between March 2, 2025, and April 11, 2026, exposed customer names, email addresses, shipping addresses, and phone numbers.
The PATCHCORD backdoor employs a stealthy persistence mechanism by hijacking browser shortcuts for Edge, Chrome, and Firefox, ensuring the malware runs before the intended application launches.
Anthropic has raised the risk level for its Threat Model 2 from “very low” to “low,” citing recent cybersecurity incidents involving its models.
The attacks, which began Tuesday evening and continued into Wednesday, targeted both Threema and its Swiss colocation partner, Nine.
From whispers of an Anthropic stake sale to strange options moves, traders sensed trouble and swung into action.
Homewares retailer Linen House and NetSuite solution provider Annexa reveal how building a connected operational foundation is helping retailers adapt and grow.
A 90-minute lecture contains a surprising amount of nothing. Slides load, microphones get adjusted, questions go unheard, and speakers wait for the room to settle. Podcasts…
Researchers found that by combining two vulnerabilities, they could take over an Android device by delivering a payload and getting the victim to answer their phone.
GitLab has released security updates to address a critical vulnerability impacting its Community Edition (CE) and Enterprise Edition (EE) software that, under certain conditions, could allow an unauthenticated attacker to remotely modify or delete public projects and user data. The flaw, tracked as CVE-2026-19478, has been rated Critical by GitLab and assigned a CVSS score…
A cybercrime group responsible for a string of recent attacks against private equity firms, law firms and financial rating agencies remains active and continued to target new victims as of late last week, according to researchers. BlackFile, which Google Threat Intelligence Group tracks as UNC6671 and associates more broadly with The Com, has been active…
Nearly 40,000 SafePal customers had their personal and order information exposed after a security flaw allowed unauthorized access to the cryptocurrency wallet provider’s order-tracking system. SafePal said an authorization flaw in a plug-in connected to customer orders allowed outsiders, under certain conditions, to access another customer’s information. The incident affected approximately 39,798 customers who placed…
A company that runs AI testing labs involved in a series of breaches carried out by Anthropic and OpenAI’s cyber-focused models said the incident happened in part because they “unintentionally” provided the models with access to the internet. In a blog posted Friday, Irregular said it partners with frontier labs to “stress test” AI models…
Criminal AI tools are increasingly resembling commercial software. Trellix researchers found MessiahGPT openly advertised on BreachForums as an unrestricted AI service for generating ransomware, phishing kits, malware, and social-engineering material. The platform has its own website and Telegram community, although researchers could not independently verify the operator’s claims about the model or its capabilities. The…
Apple today released updates for iOS/iPadOS (26 and 18) and macOS 26. This update fixes 108 vulnerabilities and comes about two weeks after the much smaller macOS update that addressed the single screen-sharing vulnerability. This vulnerability did not affect iOS/iPadOS. None of the vulnerabilities has been exploited so far. There are a few WebKit vulnerabilities, but no standalone…
Three testing models with the same goal but different directives engaged in “increasingly aggressive” territorial attacks on one another, according to Anthropic.
Nozomi Networks and Sophos are integrating Nozomi’s OT security intelligence into Sophos Fusion, giving security teams a unified view of threats across IT and operational technology environments. The partnership connects OT telemetry, asset intelligence, and threat data from Nozomi Networks Vantage with Sophos’ broader cybersecurity platform to support faster detection, investigation, and response. Nozomi Vantage…
Anthropic says one of its unreleased Claude models stumbled into a mathematical breakthrough while trying to solve a problem that has baffled researchers since 1859. The company said an internal research version of Claude was asked to “take a real stab” at the Riemann hypothesis, one of the Clay Mathematics Institute’s Millennium Prize Problems that…
SonicWall has launched SonicWall Endpoint Security, a unified endpoint protection platform designed to help managed service providers (MSPs) deliver enterprise-grade security to small and midsize business customers without adding operational complexity. The offering combines threat protection, automated response, and ransomware recovery, with service tiers built around how MSPs package and manage endpoint security. SonicWall automates…
Here’s your opportunity to watch the keynotes and top presentations from Ping YOUniverse at no cost.
Here’s a look forward to the Ping YOUniverse conference to be held in Austin, Texas, Sept. 1-2.
A threat actor is selling employee databases allegedly stolen from the Microsoft Azure infrastructure of multiple Fortune 500 companies after gaining access using compromised credentials. […]
Attackers moved quickly to exploit a critical SAP Commerce Cloud bug following its patch.
AI infrastructure demand is putting more pressure on China’s chip supply chain, and SMIC is preparing to add capacity as orders run ahead of earlier forecasts. SMIC is weighing additional equipment at existing fabs, accelerating new production lines, and raising prices on some constrained capacity after utilization reached 93.7% in the second quarter. Demand is…
World-class threat modeler Adam Shostack shared he was “blown away” by OpenAI’s revelations about the Hugging Face attack, and explains why his new threat model for LLMs is both “lightweight yet still usable.”
A widening Clop extortion campaign has drawn several global enterprises into fresh security scrutiny. Philips confirmed a compromise involving one enterprise server. GE and Shell are investigating related claims as attention turns to activity involving PTC Windchill and FlexPLM environments. Ransom-ISAC has tied attacks against internet-exposed deployments to Clop affiliates. MSPs, MSSPs, and systems integrators…
Pokémon Center is notifying customers in the United Kingdom and Germany that it suffered a third-party data breach after hackers stole customer personal and order information from third-party logistics provider CEVA Logistics. […]
Philips and General Electric (GE) are investigating incidents after the Clop ransomware group claimed to have stolen data from both companies. The companies are among 43 organizations recently listed on Clop’s data leak site. These incidents may be connected to attacks targeting internet-exposed PTC Windchill and PTC FlexPLM systems through CVE-2026-12569. “Cl0p’s playbook hasn’t been…
OpenAI has lost two senior executives in 48 hours as the company prepares for a closely watched public offering. Chief Revenue Officer Denise Dresser is leaving less than a year after joining the company, OpenAI confirmed Thursday. Her departure follows longtime executive Brad Lightcap, who announced Tuesday that he was leaving to pursue a new…
SpaceX has added a powerful new weapon to its AI arsenal: Cursor, the coding startup that turned chatbot prompts into working software. The tech giant completed its $60 billion acquisition of AI coding startup Cursor on Friday, marking one of the largest acquisitions of an AI startup. The deal, structured as an all-stock transaction, began…
Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability in Snowflake’s public snowflakedb/snowflake-connector-net repository that it said could be exploited through a crafted GitHub issue to execute commands in a workflow containing internal Jira credentials. The issue was present in .github/workflows/jira_issue.yml, which ran when a
Industries are finding the strategies that work best for their business needs, according to Salesforce’s latest Agentic Enterprise Index.
Melbourne, Fla., August 17, 2026, CyberNewswire — Continuing its effort to build global awareness of the need to move computing from assumption-based trust to cryptographic proof, OpenMatter Network today announced that Head of Operations and Partnerships Chris Biele will play a prominent role at Belgrade Blockchain Week 2026, where he will lead sessions focused on secure…
A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active installations, that could be exploited to achieve arbitrary code execution on susceptible sites. The vulnerability, tracked as CVE-2026-15748, is rated 9.8 out of 10.0 on the CVSS scoring system. It was discovered and reported by a security…
Sensitive tax and property information belonging to hundreds of thousands of people has been exposed in a breach of France’s tax administration. The French Ministry of the Economy and Finance confirmed that an attacker gained unauthorized access to systems operated by the General Directorate of Public Finances (DGFiP) and extracted data concerning 678,000 individuals and…
SafePal says a breach exposed personal data of 39,798 customers, but not wallet credentials, private keys, seed phrases, or payment information. SafePal disclosed a data breach affecting about 39,798 customers after hackers exploited a vulnerability in its order-tracking plugin. The flaw exposed information linked to orders placed between March 2, 2025, and April 11, 2026,…
Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-control (C2) framework used by Iranian nation-state hackers in attacks targeting entities in Israel. Russian cybersecurity company Kaspersky said its ongoing monitoring of the threat activity cluster since December 2025 has led to the discovery of previously unreported components that expand the
Amazon Web Services (AWS) is gradually introducing updates to the AWS Sign-In and sign-up experience to a limited number of customers. We’re sharing these changes so you will know what to expect as we gradually make the updated experience available to more customers. These updates include new options for creating and accessing AWS accounts. To…
The latest stable kernel also brings filesystem and I/O improvements, and substantial new support across AMD, Intel, Apple, Nvidia, USB4, and laptop hardware.
With AI-driven RAM shortages pushing Raspberry Pi prices sky high, here’s how to repurpose your old handset into a portable powerhouse for your projects.
Google is leveraging our poor relationship to technology to sell its new phones – the same relationship it had a hand in creating.
The SANDCLOCK LiteLLM supply-chain attack exposed credentials across 2,038 repositories, affecting technology, finance, healthcare, retail and more. Resecurity (USA) estimated the most affected sectors by the “SANDCLOCK” backdoor, which was planted as a result of the code repository compromise. According to cybersecurity experts, LiteLLM / TeamPCP Supply-Chain Attack will have long-lasting consequences. By compromising a…
Got an old Android phone or tablet lying around? Turn it into a test server for experiments and development – it’s simpler than you think.
Cybercrime accelerated in early 2026 as infostealers harvested 1.7 billion credentials and ransomware operations affected 6,256 victims in six months worldwide.
The botnet adds exploitation modules, credential theft, and reverse SOCKS relays to turn compromised devices into persistent attacker infrastructure.
The Hacker Went Offline. The AI Agent Kept Working: How Hermes Could Change Post-Exploitation A hacker does not necessarily need to sit in front of a compromised computer anymore. They can potentially give an autonomous AI agent a goal, provide it with access to an environment, remove the human approval step for risky actions, and…
US Commerce Secretary Howard Lutnick is “not in favor” of Apple’s plan to alleviate the impact of rapid memory price inflation by purchasing RAM made in China for use in devices sold there. Trade by US firms with the biggest Chinese memory manufacturers, CXMT and Yangtze Memory Technologies, is restricted. Apple must secure a license before it can…
In an Aug. 12 National Security Presidential Memorandum, President Donald Trump set out guidance for more private-sector action in global cyber battles. Here’s the rest of the story.
Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One Cloud Exposure uses AI-powered threat stories to expose Storm-0501 TTPs, backed by precision-engineered threat detection alerts. Key takeaways Storm-0501 demonstrates that cloud-first ransomware groups have shifted from simple endpoint encryption…
Security teams in heavily regulated industries can’t afford to make data privacy a “nice-to-have” option.
An AI analyst that triages, investigates, and verifies attacks at machine speed — and where it meets the Cisco Data Fabric.
A March supply-chain attack involving malicious versions of the LiteLLM Python package may have exposed credentials belonging to more than 2,500 organizations and hundreds of thousands of CI/CD pipelines, according to security researchers. Attackers published two compromised versions of LiteLLM, a widely used AI gateway, after obtaining access to the project’s PyPI account. The malicious…
GitHub is down for some users as a widespread outage is causing errors across the website, API, Actions, Pull Requests, and several other services. […]
About 20 years ago, with macOS 10.5 (Leopard), Apple introduced screen sharing. Apple did not invent a new protocol for screen sharing. Instead, it used the established VNC protocol. VNC is a pretty simple, unencrypted protocol using TCP port 5900. Historically, the protocol used a simple global password for authentication. Apple adapted the protocol for its…
France’s tax authority has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems, saying the intrusion exposed data on 678,000 individuals and professionals. The incident came to light after an alleged attacker using the alias “ZeroBytes” took credit on a cybercrime forum and listed a stolen database for…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about how they are adopting and implementing artificial intelligence (AI) into their organizations.
A cybersecurity expert has demonstrated how computer-generated patterns can successfully prevent surveillance cameras from detecting vehicles – such as the controversial AI-powered Flock licence plate readers that are becoming increasingly common on American streets. Read more in my article on the Hot for Security blog.
CVE-2026-54121 lets a standard domain user turn your Enterprise CA into a Domain Controller. The patch is the easy part. The lesson is standing privilege, implicit trust, and treating PKI as the Tier 0 identity infrastructure it has always been. […]
The most important aspect of Mythos isn’t what it finds, but how it thinks. Here’s how to use that thinking to protect your organization.
Melbourne, Florida, August 17th, 2026, CyberNewswire Head of Operations and Partnerships Chris Biele to lead sessions on secure…
As AI takes on more security operations center (SOC) workflows to automate threat triage, indicator extraction, and incident report generation, security operations leaders face a persistent question: Does SOC performance depend more on the large language model (LLM) deployed or on the underlying quality of the security data it consumes? Academic studies offer conflicting answers.…
Fortinet has acquired Virtue AI, strengthening its broader Security for AI strategy and its vision for securing the agentic enterprise. The acquisition builds on Fortinet’s existing AI security portfolio, which includes the FortiGate Hyperscale Firewall. As organizations deploy AI applications and autonomous agents, their attack surface expands beyond networks, users, endpoints, applications, and cloud workloads.…
For the latest discoveries in cyber research for the week of 17th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Colombia’s Ministry of Justice has experienced a ransomware attack that affected part of its technology infrastructure and disrupted public services related to illicit-drug monitoring and legal processes. Officials confirmed that some files were…
Microsoft Defender’s latest patch bypass shows a familiar problem. A newly disclosed Microsoft Defender flaw called ShieldBreak shows that fixing one attack path doesn’t always close every route to the same result. Microsoft has assigned ShieldBreak the identifier CVE-2026-69414 and confirmed it is an elevation of privilege (EoP) vulnerability in the Microsoft Malware Protection Engine.…
Critical User Profile Builder flaw let unauthenticated attackers access administrator accounts
The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was already there and defenses that assumed…
Moburst has launched Answerburst, a dedicated practice within the agency focused specifically on Answer Engine Optimization, built out of what the team describes as an internal need that showed up before there was a market name for it. The founding story The practice did not start as a planned product launch. According to the team,…
The agreement with SoftBank’s SB Energy caps weeks of negotiations over the largest data-center project announced to date.
Microsoft has reminded IT administrators that Windows Server 2022 is rapidly approaching its mainstream end date of October 2026, when it will switch to extended support. […]
A recently patched security flaw in Apple macOS is being actively exploited by hackers to bypass authentication, gain root access, and install a cryptominer, the Netherlands’ National Cyber Security Centre (NCSC) warns. The vulnerability, tracked as CVE-2026-65400, , let attackers authenticate to macOS Screen Sharing without valid login credentials. Apple fixed the issue with updates…
Chinese AI developer Zhipu has launched GLM-5.3, a new coding-focused AI model that the company says has developed unexpectedly strong cybersecurity capabilities, putting it close to global leading models in vulnerability discovery while remaining behind them on deeper exploitation tasks. Zhipu’s own testing places GLM-5.3 slightly ahead of Anthropic’s Mythos 5 and OpenAI’s GPT-5.6 Sol…
Here’s how I saved hundreds on a new phone and watch in just a few seconds.
When was the last time a cybersecurity process at work made you want to scream? Maybe it was a password requirement so complicated you had to write it down (defeating the purpose), a phishing simulation test that felt more like a trap than a lesson, or a confusing security warning pop-up that interrupted your work.…
MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt injection, often before security teams even know the server is running. As more organizations adopt AI agents into their systems, that exposure can silently become a major gap in MCP server security. The Model Context Protocol (MCP) allows AI agents to…
Attackers are probing internet-facing GeoServer systems for a critical SQL injection vulnerability affecting deployments that use PostGIS 12…
In Google Workspace, Gemini has access to Gmail, Docs, Calendar, Chat, and more by default. Here’s why it matters, and how administrators can disable it today.
Mac users are being freshly warned of suspicious websites asking them to open Terminal and install software. Jamf Threat Labs has uncovered a multi-stage macOS infostealer, dubbed AmnesiaStealer, that uses a ClickFix-style fake GitHub download page to trick victims into executing a command that installs malware. The campaign is designed to steal credentials and sensitive…
AI-based assistants and agents are generally supposed to expedite software development lifecycles. For Microsoft’s Exchange team, it may be doing the opposite, in turn leaving enterprise IT teams waiting for an update that will require extensive compatibility testing before implementation. In response to customer questions, Microsoft said in a blog post that it was again…
Tech giants General Electric (GE) and Philips have also confirmed they’re investigating claims that the Clop ransomware gang breached their systems and stole data. […]
TikTok-branded “rewards” pages are promising users cash for checking in every day, completing small tasks, and earning points. Those points supposedly convert into real money, and the balances look enormous. A countdown timer usually warns that your balance is about to expire. But when you try to withdraw it, there’s always something else you need…
The European Telecommunications Standards Institute has launched an approval process for standards vendors will have to meet under the Cyber Resilience Act
The Dutch National Cyber Security Centre (NCSC) issued a warning after being notified of several incidents where a vulnerability in Apple’s Screen Sharing feature was exploited to install Monero cryptominers. The vulnerability, tracked as CVE-2026-65400, was patched by Apple on August 6. It is an authentication-bypass flaw in macOS Screen Sharing that can let an…
Security researchers at SSD Secure Disclosure have published a two-stage exploit chain that achieves full Android kernel access on devices running Unisoc modem firmware through a VoLTE video call, with no fix from the chipset maker. The advisory, published August 17, 2026, is the second stage of a chain that began in March 2026, when SSD…
Cryptocurrency wallet maker SafePal disclosed a data breach that exposed order information for 39,798 customers, including names, email addresses, shipping addresses, phone numbers and purchase details. The company traced the exposure to an authorization flaw in a plug-in used for order tracking. Under certain conditions, the flaw let one customer view another customer’s order information.…
The French Ministry of the Economy and Finance has disclosed a data breach after an attacker accessed the General Directorate of Public Finances (DGFiP) systems and stole data belonging to 678,000 individuals. […]
Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functionality from the Mirai botnet source code and is equipped to turn internet-facing devices into SOCKS proxies. “While the malware reuses the DDoS engine from the publicly leaked Mirai source code, it extends the original framework with numerous capabilities,…
