Category: Global Security News

Framework, the San Francisco-based company that designs repairable and upgradeable laptops, has suffered a data breach after attackers managed to exploit a zero-day vulnerability in the Metabase business intelligence service. According to the notification sent to affected Framework customers, the attackers accessed names, email addresses, phone numbers, physical addresses, and login IP addresses, but not…

Read more →

A seller claims to offer Israel’s 2026 population registry, but checks show the 9.2 million records are authentic data dating back to 2005. A vendor on a well-known leak forum claims to have breached Israel’s Population and Immigration Authority and is selling the entire national registry, 9.2 million records covering essentially the whole country. Ransomnews…

Read more →

North Korea’s state hackers are no longer content to type prompts into public chatbots. One of the country’s main espionage groups has begun running artificial intelligence (AI) offline on its own servers, connecting document-search tools to files in its possession, and collecting the software parts needed to build AI into its malware. South Korean security…

Read more →

Microsoft is changing how Entra ID handles MFA for people who sign in with Windows Hello for Business (WHfB) or macOS Platform Single Sign-On (PSSO). The rollout reaches worldwide and GCC tenants starting early October 2026, with completion expected by late November. Microsoft says the change “helps organizations expand the use of phishing-resistant authentication methods”…

Read more →

A member of “The Com,” a loose-knit online cybercrime collective that targets children and teenagers, has been sentenced to two years in prison for blackmail and sextortion offenses against nearly 120 victims worldwide. […]

Read more →

Microsoft is beginning the retirement of Manifest V2 (MV2) extensions in Edge this month, with consumer completion targeted for the end of 2026 and managed-enterprise deprecation in early 2027. Microsoft says that change is justified because 95% of the most-used MV2 extensions in the Edge Add-ons store have already moved to Manifest V3 (MV3). It…

Read more →

Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable passwords and resist phishing. The attacks instead reused signed authentication material that Windows had exposed, abused a cloud-synced passkey system from malware already on the victim’s machine, and used a 

Read more →

LexisNexis took its Diligence, Metabase API, and Newsdesk services offline as part of its response to unusual activity on servers hosted and managed by an unnamed third-party vendor. […]

Read more →

OpenAI said its upcoming model Astra is showing cybersecurity capabilities that could reach its highest risk category, where a system can autonomously find and exploit vulnerabilities or carry out end-to-end cyberattacks against hardened targets. The company disclosed the assessment following recent internal testing and expert reviews. “Our latest internal evaluations of Astra, one of our…

Read more →

Atlassian’s enterprise AI assistant Rovo, which is usually connected across sensitive work environments like Slack, Microsoft 365, and Google Workspace, was found vulnerable to data leaks through malicious instructions. At DEF CON 34, researchers from Varonis demonstrated an attack that used Rovo’s rovoChatPrompt parameter to place attacker-controlled instructions directly into Rovo Chat. “A single click…

Read more →

AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fixes, and control risk at human speed. When software output jumps 10 to 50 times, the problem is no longer just finding vulnerabilities. It is keeping security from becoming the bottleneck, or worse,…

Read more →

Video game publisher and digital distribution giant Valve is notifying Steam hardware customers in Europe that hackers stole their data after hacking its shipping partner, CEVA Logistics. […]

Read more →

While the number of US jobs declined by 23,000 in July, employment in the tech sector rebounded as the AI revolution continues to gain steam. The national unemployment numbers were reported Friday by the US Bureau of Labor Statistics. At the same time, research firms said July was a good month for IT hiring compared…

Read more →

To help customers fend off ongoing attacks, N-able released a second security hotfix for N‑central, its monitoring and management (RMM) solution popular with managed service providers (MSPs). “Hotfix 2 is required, even if you already applied the earlier hotfix. Hotfix 2 supersedes Hotfix 1 with additional hardening measures to further protect you and your customers,”…

Read more →

The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning instrumentation, electronics, transport, energy, IT, and software development sectors. Russian cybersecurity vendor Kaspersky said it detected the attacks in July 2026. The activity involves exploiting a vulnerability chain

Read more →

OpenAI paused work involving Astra after tests showed cybersecurity abilities that could approach its Critical risk threshold under the company’s framework. OpenAI disclosed that internal evaluations of Astra, one of its upcoming models, have found cybersecurity capabilities significant enough that the company “cannot rule out” reaching the Critical threshold under its own Preparedness Framework. In…

Read more →

OpenAI’s first major hardware bet could look less like a smartphone and more like a doughnut-shaped computer small enough to hold in one hand. The company is reportedly developing a screen-free AI device roughly the size of a hockey puck, Bloomberg reported, citing people familiar with the project. The portable gadget could cost $300 to…

Read more →

Tenet reported that half of Fortune 500 companies are vulnerable to the Ghostjacking technique, which involves tricking AI agents with fake reports

Read more →

The new alliance will develop shared specifications, capability standards, accreditation programs, and research intended to help MSPs deliver AI services responsibly. The Global Technology Industry Association (GTIA) is forming a new Managed Intelligence Alliance to establish standards and governance for managed AI services as solution providers race to add the technology to their portfolios. Announced…

Read more →

The Meta CEO has a new game plan for winning over hearts and minds to his company’s artificial-intelligence efforts.

Read more →

The Meta CEO has issued a 6,500-word encyclical laying out the company’s thinking on the AI race. Here are a few key takeaways.

Read more →

A macOS malware variant has been detected stealing crypto, passwords and more

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability. […]

Read more →

Thanks to mid six-figure bonuses, engineers at Samsung and SK Hynix are the hottest bachelors in South Korea.

Read more →

Anthropic will make auto mode in Claude Code the default for new sessions on Pro, Max, and Team plans starting August 14. Users who previously selected a different default may receive a one-time prompt asking whether they want to switch to auto mode. In a controlled experiment with 1,053 paid professional testers, human review caught…

Read more →

TRM Labs explains that sanctioned Iranian firm Shelbit was a fake crypto exchange

Read more →

AI tutors can offer useful support, but their quality and safeguards vary widely. Here’s what parents should check before handing one to a child.

Read more →

Kimi K3 bypassed a UK cybersecurity test by accessing GitHub, cloning the benchmark and reading its solutions instead of solving the challenge Sometimes the smartest move isn’t solving the puzzle, it’s noticing nobody locked the door to the answer key. That’s essentially what happened when Moonshot’s Kimi K3 model was put through a cybersecurity evaluation…

Read more →

Broadcom’s acquisition of VMware has given MSPs an opportunity to rethink how customer workloads are deployed, but StorMagic Channel Chief Scott Mann does not expect most businesses to abandon VMware through a single, sweeping migration. Instead, Mann sees small and midsize businesses adopting multiple virtualization platforms, repurposing existing hardware and moving individual workloads according to…

Read more →

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro (“solidity-pro”) that has been observed delivering a browser wallet and credential stealer. The names of the extensions are below – helper-beeps.solidity-pro web3devtoolsx.solidity-pro Although neither of the extensions is now available on Open VSX, the GitHub repository

Read more →

Ricoh, a leading provider of smart workplace technology, today announced the appointment of Matthew Taylor as National Sales Manager for Ricoh Graphic Communications.

Read more →

OpenAI’s internal evaluation of its upcoming model, Astra, found significant advances in agentic coding and cybersecurity, leading the company to conclude that it cannot rule out the model reaching the critical capability level for cybersecurity under its Preparedness Framework. The Preparedness Framework, first published in December 2023, outlines how OpenAI evaluates frontier AI risks and…

Read more →

GitHub has flagged npm malware since March 2026. Anyone pulling in a bad PyPI, Maven, RubyGems, NuGet, Go, crates.io, or PHP Composer package has had no such warning, because GitHub’s malware detection only ever watched one ecosystem. That changed this month. GitHub’s Advisory Database now ingests malware reports from OpenSSF’s malicious-packages repository, a public feed…

Read more →

Last week on Malwarebytes Labs: AI chat bots are sliding into League of Legends friend requests Meta ordered to pay $942 million over harm to children Apple WebKit vulnerabilities reveal your IP address, despite Private Relay Scammers target OnlyFans users with deepfakes Amazon and Apple impersonated in “$149.99 unauthorized charge” scam Anthropic’s Mythos AI used…

Read more →

Artificial intelligence is creating a two-sided security challenge for managed service providers, channel leaders warned at GTIA ChannelCon 2026: Cybercriminals are using the technology to make familiar attacks more convincing, while customers are adopting AI tools that can expose sensitive business data. For MSPs, responding will require more than adding security products. Providers must help…

Read more →

OpenAI has announced that it’s pausing some “internal activities” involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation found it had made significant advancements in agentic coding and cybersecurity. In response to the discovery, the AI upstart said it’s implementing security controls for higher-capability models and associated activities, such as isolated

Read more →

Integris has launched CORE, a managed services offering that combines AI, automation, cybersecurity, and data governance as the MSP looks to redefine what managed services should include as artificial intelligence changes the needs of small and midsize businesses. AI creates a new inflection point for managed services For Integris CEO Rashaad Bajwa, the shift reflects…

Read more →

Boards want evidence that security controls and architecture reduce business risk, expressed in terms of resilience, consequence, and decision relevance. Translating technical findings into business language remains a major time burden for CISOs, who are calling for simpler data delivery, better frameworks, and better context. Pulse Security AI’s The CISO-Board Communication Gap report found that…

Read more →

The EU’s fight to regulate AI models entered a new chapter on 2 August 2026, when the European Commission’s AI Office and national authorities began enforcing the AI Act. The AI Act is the EU’s law regulating AI, the first broad legal framework of its kind. It creates a common set of rules for AI…

Read more →

Canon Business Services CBS ANZ has appointed senior technology executive, Matt Clarkin, as General Manager of Sales and Marketing.

Read more →

Australia’s major telcos are warning customers to be vigilant against scammers who may use the Census to trick them into sharing access to personal data and financial information.

Read more →

Voice automation often looks deceptively simple during an early rollout.

Read more →

Ricoh has announced it has been named in the Leaders Category in the IDC MarketScape: Worldwide Laser Production Printers, 2026 Vendor Assessment 1.

Read more →

Google Threat Intelligence Group GTIG has published new…

Read more →

Japan’s airline cuts network provisioning time from months to weeks and prepares for a tenfold increase in global data volumes

Read more →

Sophos to bring OpenAI’s frontier models to the channel and managed service providers in newly announced partnership

Read more →

In this post, I will talk about 6 best enterprise platforms for AI-Native software engineering. Enterprise engineering organizations have moved past the question of whether AI belongs in software delivery. The question in 2026 is structural: when AI agents plan work, write code, review pull requests, and trigger operational workflows across thousands of services, what…

Read more →

Plus, Elon Musk’s rocket company roller coaster, the ‘SaaSpocalypse’ forces reinvention, replacing AI data-center wires with light

Read more →

The Cirqa health tracker, Garmin’s screenless health band, offers lots of data with no distractions.

Read more →

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Fake Xeno Roblox Cheats Deliver Powerful Java Stealer Through Discord and Forums   DarkSword’s Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator Cluster   Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting Alibaba…

Read more →

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Palo Alto Networks Faces China Cybersecurity Review Amid Rising Tech Tensions Metabase Zero-Day Exploited in the Wild,…

Read more →

Plus, Iran’s new demands for reopening the Strait of Hormuz narrow Trump’s options, and estate sales get competitive.

Read more →

The iPhone maker has held early talks with China’s CXMT, but any deal would be politically sensitive.

Read more →

Wonderful capability or ethical failure? Decoding the stories coming out of Black Hat USA and the unsanctioned AI cyber attacks of 2026.

Read more →

CSS attacks on major webmail services can steal credentials, hijack sessions and manipulate AI tools connected to users’ inboxes. PortSwigger researcher Gareth Heyes demonstrated something that should make every webmail team a little nervous: plain CSS, the styling language that’s supposed to just make text look nice, can be weaponized to steal passwords, hijack sessions, and…

Read more →

Cybersecurity vendors introduced a wave of AI-driven tools at Black Hat USA 2026, targeting threat detection, exposure management, security operations, and emerging attack risks. Tanium, Prophet Security, VanishID, Flashpoint, Arctic Wolf, and Vectra AI were among the companies unveiling new capabilities during the Aug. 1–6 conference in Las Vegas. The announcements reflected the industry’s shift…

Read more →

SpaceX’s $300 billion swing in market value this past week put Musk back in grind mode, having to execute on highflying promises made in the lead-up to the biggest IPO ever.

Read more →

The Head Mare hacktivist group has been exploiting vulnerabilities in unpatched TrueConf video conferencing servers to replace client installers with malicious versions that deliver backdoors. […]

Read more →

China opened a cybersecurity review of Palo Alto Networks, citing national security concerns but giving no details about the reasons behind the probe. China’s Cyberspace Administration (CAC) announced that it’s launching a cybersecurity review of products Palo Alto Networks sells in the country. The announcement itself runs to a few sentences of formal Chinese, citing…

Read more →

Attackers exploited a CVSS 10 Metabase zero-day to gain admin access and steal sensitive data. Framework confirmed it was among the victims. Metabase just confirmed something no analytics vendor wants to write: attackers found and used an unpatched, maximum-severity flaw against Metabase Cloud before anyone on the defense side knew it existed. The company’s own…

Read more →

Robinhood Chain launched on July 1, 2026. Banana Gun supported it from that first day. No waitlist, no separate setup, no new app to download. You open the same Banana Gun Telegram bot you already use, and copy trading is sitting there waiting for you. Robinhood Chain moved fast. Daily DEX volume on the chain…

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Progress LoadMaster vulnerability to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Progress LoadMaster vulnerability, tracked as CVE-2026-8037 (CVSS score of 9.6), to its Known Exploited Vulnerabilities (KEV) catalog. The vulnerability is an OS Command Injection Remote Code Execution issue…

Read more →

Attacker-controlled instructions can make Atlassian’s Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an outside server. Two security firms found that behavior independently, by different routes. Only one of those routes is confirmed closed. PromptArmor, an AI security firm, hid the instructions in content Rovo reads.…

Read more →

New research shows content inside an email can escape its message boundary and interfere with the webmail interface. Across attack chains spanning Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail, the techniques can capture passwords, take over third-party accounts, leak tokens, hijack trusted UI actions, and manipulate AI tools that read email. PortSwigger…

Read more →

Hackers stole personal, medical, and insurance data of 3.8 million people from Unlimited Technology Systems’ data center. Unlimited Technology Systems disclosed a data breach affecting more than 3.8 million people after hackers accessed one of its commercial data centers between October 5 and 10, 2025. Unlimited Technology Systems is a U.S.-based healthcare technology company headquartered…

Read more →

Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data visualization software package has been exploited in the wild as a zero-day. The vulnerability (CVSS score: 10.0), which does not carry a CVE identifier, allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application database, enabling them to…

Read more →

N-able has released a fresh round of hotfixes for N‑central as part of its investigation into ongoing exploitation of a recently disclosed security flaw in the Remote Monitoring and Management (RMM) product. “We are proactively expanding protections in response to ongoing monitoring of threat actors as they evolve their attack techniques,” the company said. “This…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild. The vulnerability, tracked as CVE-2026-8037 (CVSS score: 9.6), is a command injection flaw that could be weaponized to achieve arbitrary

Read more →

A decade ago, a computer did something that no human would have done. It was considered a breakthrough for AI. Now the world is full of them.

Read more →

Russell on launching Savant Pathseeker, the first product in its new Agentic Offensive Testing line.

Read more →

Murphy on why data trust is the foundation of the agentic era.

Read more →

AI-battered hedge fund Situational Awareness made a big bet this week in Source Foundry, a private company aiming to reinvent the way chips are manufactured.

Read more →

Davies shares insights from original FIRE research, while also digging into trends.

Read more →

Boehm discusses why organizations need to build a resilient foundation for securing AI across increasingly dynamic environments.

Read more →

Lina K., a co-worker, recently shared a firsthand account of how bots are adding League of Legends players via the Riot client friends list immediately after a match ends, striking up a flirty conversation, and eventually pushing an OnlyFans link. The pattern lines up with a wave of complaints that have piled up on Reddit…

Read more →

The decision reflects internal findings that the upcoming ‘Astra’ model may possess ‘critical cyber capabilities’ and follows a string of AI-testing incidents.

Read more →

A New Mexico court has ordered Meta to pay a total of $942 million after finding that Facebook and Instagram harmed young users and that the company misled consumers about the safety of its platforms. Reportedly, the decision combines a $375 million civil-penalty verdict from March with a newly ordered $567 million abatement fund intended…

Read more →

A Canadian hacker has pleaded guilty to charges tied to the 2024 breaches of more than 165 Snowflake customer environments, a campaign that exposed data belonging to at least 100 million people. Connor Riley Moucka, 26, admitted to computer fraud, wire fraud, aggravated identity theft, and conspiracy in federal court in Seattle. The attacks relied…

Read more →

A critical Metabase SQL injection vulnerability was exploited in zero-day attacks to breach customer instances in data theft attacks, known to impact Framework and Tally. […]

Read more →

On Aug. 6, DXC announced a strategic partnership with security startup Primary, becoming the exclusive managed services provider for Primary’s AI-native Zero Trust Platform. The joint offering is designed to help enterprises and government agencies govern how AI agents and enterprise AI applications access data, identities, and business systems. The companies are targeting organizations that…

Read more →