Attackers are actively exploiting a CVSS 10.0 Oracle WebLogic flaw

CVE-2026-21962 can let unauthenticated attackers access or modify critical data in Oracle HTTP Server and WebLogic Server Proxy Plug-in via HTTP.

Why would a Yemeni cyber group call itself “Uways al-Qarani”? Because names matter. It invokes a revered Yemeni Islamic figure, signaling identity, legitimacy, and ideological purpose—turning cyber ops into part of a wider resistance, not just technical disruption.

A large-scale DDoS attack has targeted the shared infrastructure of Norway's digital government services since Monday, causing disruptions to some public services.

Systems such as government login, digital identification, electronic signatures, and tax services have experienced outages, slowdowns, or login issues. Norwegian officials have stated that some services are now stable, and there is no evidence of breaches or theft of personal information.

Peru and the Israeli regime are seeking to deepen cooperation in the field of cybersecurity.

Memory chips from the Chinese company CXMT, which previously struggled to reach speeds of 6400 MT/s, have now achieved a speed of 9000 MT/s in DDR5 kits.

New details emerge about the cyberattack on an American oil tanker in Gibraltar.

Following reports about the cyberattack on the oil tanker "VL Prosperity" in the Strait of Gibraltar, Captain Mamdouh bin Jaber Al-Saqt, a seasoned Saudi captain, has revealed more details about the incident.

According to Al-Saqt, the oil tanker was targeted by a cyberattack on the night of August 7, 2026. The attackers disrupted the operation of critical parts of the ship by interfering with the engine control systems and fuel tanks. Communication with the vessel was also down for approximately 30 hours.

Researchers have warned about a security vulnerability in NVIDIA NemoClaw that, under certain circumstances, allows an attacker to access a local Ollama instance by redirecting a user to a malicious website, even without authentication.

Meta agrees to $17.1 billion settlement over alleged harms to children.

GTA 6 leak hype abused to distribute Vidar infostealer malware.

Carhartt data breach affects 12.9M, half of what ShinyHunters claimed.

Ubiquiti has released security patches for three new maximum-severity vulnerabilities that threat actors can exploit remotely without privileges.

The first (tracked as CVE-2026-77537) lets unauthenticated attackers compromise unpatched devices by exploiting an improper input validation weakness in the UniFi Protect Application video surveillance management platform.

Ubiquiti also addressed a CRLF injection flaw (CVE-2026-77550) that remote attackers without privileges can exploit to bypass authentication on UniFi OS devices or instances.

"A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running CRLF Injection to bypass authentication to such UniFi OS devices or instances," it explained.

The third maximum severity vulnerability patched today is a command injection security flaw (CVE-2026-77554) stemming from improper input validation in the UniFi Talk Application Voice over IP (VoIP) phone system.

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation.

Adobe and Nvidia Patch Dozens of Vulnerabilities.

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes.

Zelensky Awards Elon Musk Ukraine’s Order of Freedom

Ukraine has awarded Elon Musk the Order of Freedom after SpaceX worked with Kyiv to curb Russia’s unauthorized Starlink access, underscoring the billionaire’s pivotal but contentious role in the war.

Huawei Offers Top AI Chips to Egypt, US Prepares Counterbid

Huawei's offer of more than 2,000 Ascend AI processors for an Egyptian data center has prompted Washington to approach Nvidia, AMD, and Microsoft about assembling a competing US consortium.

US Says Chinese Hackers Breached Justice Department, NASA, Federal Reserve and Senate.

US Banks on the Verge of Launching a Nationwide Blockchain Network

Banking groups from 39 US states plan to launch a joint blockchain network in 2027.