Over Security
659 subscribers
31.1K photos
32.6K links
This is a (beta) cybersecurity news aggregator!

https://oversecurity.net
Download Telegram
Vague Task, Total Access: When AI Delegation Becomes a Security Risk

AI agents can improvise beyond the intended scope of a task when they are given broad access to enterprise systems and data. Token Security explains why organizations need to define agent intent and continuously enforce permissions around what each agent was actually created to do.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/YgAGa3
Mozilla updates GPG signing key for Firefox releases after exposure

Mozilla announced today that it updated the GPG key used to sign Firefox and Thunderbird releases after it was accidentally exposed on GitHub.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/UP2hJr
DDoS attacks over 1 Tbps surged fivefold in the second quarter

Cloudflare says it mitigated more than 800 network-layer distributed denial-of-service (DDoS) attacks exceeding 1 Tbps in the second quarter of the year.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/2fRwIq
Cyberattack on logistics giant Ceva hits retailers and Steam customers across Europe

Operations at eight European warehouses belonging to France's CEVA Logistics have reportedly been disrupted by a cyberattack, and several other companies are feeling the effects.

πŸ”—οΈ [Therecord] https://link.is.it/DKifov
Wesco confirms security incident after ExfilSquad claims data theft

Global supply chain and distribution giant Wesco has confirmed in a statement for BleepingComputer that it is investigating a cybersecurity incident.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/zSAWnt
Delta investigating after someone set up fake Wi-Fi network mid-flight

The Delta flight crew switched off the aircraft's legitimate Wi-Fi network for around 30 minutes due to the incident, according to a spokesperson.

πŸ”—οΈ [Techcrunch] https://link.is.it/dQ1UVw
Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days

Today is Microsoft's August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/JtLumj
How to Create a Secure WordPress Staging Site: Beginner’s Guide

Learn how to create and secure a WordPress staging site, safely test updates and changes, and deploy them to your live website with less risk.

πŸ”—οΈ [Sucuri] https://link.is.it/nZS1B6
Windows 11 KB5121003 & KB5120240 cumulative updates released

Microsoft has released Windows 11 KB5121003 and KB5120240 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/90kQ1A
Ransomware group hijacks hospital system’s Facebook page amid ongoing cyberattack fallout

The hackers claimed to have exfiltrated 6 terabytes of data, including highly sensitive health information like records related to sexual assault, mental health, abortions and sexual harassment incidents.

πŸ”—οΈ [Therecord] https://link.is.it/gJyavI
Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees

Delta Air Lines is investigating an unauthorized Wi-Fi network that appeared aboard a flight from Las Vegas to Atlanta carrying passengers who had attended the DEF CON hacker convention.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/jOtqHI
Windows 10 KB5120249 cumulative update released with fixes

Microsoft has released Windows 10 KB5120249 Extended Security Updates for versions 22H2 and 21H2 to fix security vulnerabilities and bugs.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/m9itry
FBI says cybercriminals are hacking into victims’ online accounts to steal their intimate pictures

In a new alert, the FBI said cybercriminals are targeting adults and minors in an attempt to steal their personal and intimate pictures in extortion campaigns.

πŸ”—οΈ [Techcrunch] https://link.is.it/0T634m
NSA installs DHS lawyer as new general counsel

Kerianne Tobitsch, who most recently served as a senior lawyer at the Homeland Security Department, is the NSA's new general counsel, sources told Recorded Future News.

πŸ”—οΈ [Therecord] https://link.is.it/lhenag
Cisco warns of ASA and FTD VPN flaw exploited to crash devices

Cisco is warning that a high-severity denial-of-service vulnerability in Secure Firewall ASA and Threat Defense (FTD) software is being actively exploited in attacks to remotely crash affected devices.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/WYqnD5
Microsoft Plugs Nearly 400 Security Holes

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including...

πŸ”—οΈ [Krebsonsecurity] https://link.is.it/ej84Gl
Sandworm hackers target IT pros with trojanized WireGuard VPN client

Hackers associated with the Russian threat group Sandworm have been targeting system administrators and IT professionals through fake job offers since at least May.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/1fTlg4
Microsoft Patch Tuesday for August 2026 β€” Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as "critical."

πŸ”—οΈ [Talosintelligence] https://link.is.it/GqAVS0
DeadLock ransomware uses blockchain to resist infrastructure takedown

The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/SQGvui
Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse

Google says Chrome's anti-abuse systems reduced unwanted notifications on Android by more than 7 billion per day during the first quarter of 2026.

πŸ”—οΈ [Bleepingcomputer] https://link.is.it/AkeXRg
6G, infrastruttura di sorveglianza pervasiva: rischi cyber, minaccia cinese e Golden power

Integrated Sensing and Communication (ISAC), consenso informato e resilienza delle reti mobili di sesta generazione: un'analisi tecnico-scientifica del 6G come infrastruttura di sorveglianza pervasiva

πŸ”—οΈ [Cybersecurity360] https://link.is.it/JZVwub