New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges
Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldBreak" after Microsoft released the August 2026 Patch Tuesday security updates.
🔗️ [Bleepingcomputer] https://link.is.it/GqoOFm
Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldBreak" after Microsoft released the August 2026 Patch Tuesday security updates.
🔗️ [Bleepingcomputer] https://link.is.it/GqoOFm
Signal adds new security feature to thwart man-in-the-middle attacks
Signal has introduced Automatic Key Verification, a new security feature that gives users a new way to ensure their encrypted chats haven't been intercepted.
🔗️ [Bleepingcomputer] https://link.is.it/BvPveZ
Signal has introduced Automatic Key Verification, a new security feature that gives users a new way to ensure their encrypted chats haven't been intercepted.
🔗️ [Bleepingcomputer] https://link.is.it/BvPveZ
👍1
Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery
This month’s update features about five times the volume of patches Microsoft was shipping in a typical month before AI-assisted vulnerability discovery took hold.
🔗️ [Therecord] https://link.is.it/cYZBRn
This month’s update features about five times the volume of patches Microsoft was shipping in a typical month before AI-assisted vulnerability discovery took hold.
🔗️ [Therecord] https://link.is.it/cYZBRn
Hackers leverage new Microsoft SharePoint exploit in attacks
Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7 on Tuesday.
🔗️ [Bleepingcomputer] https://link.is.it/FIYd3Y
Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7 on Tuesday.
🔗️ [Bleepingcomputer] https://link.is.it/FIYd3Y
Flipper OS — the operating system for Flipper One
TL;DR: Flipper OS is an additional layer on top of a standard Debian-based Linux system. It lets you switch between multiple preconfigured system profiles for different tasks, so you can experiment freely without worrying about breaking your setup or turning it into a mess.
Why build Flipper OS, yet
🔗️ [Flipper] https://link.is.it/ou3HQa
TL;DR: Flipper OS is an additional layer on top of a standard Debian-based Linux system. It lets you switch between multiple preconfigured system profiles for different tasks, so you can experiment freely without worrying about breaking your setup or turning it into a mess.
Why build Flipper OS, yet
🔗️ [Flipper] https://link.is.it/ou3HQa
👍1
CISA gives federal agencies two weeks to patch Microsoft bug exploited in DPRK campaign
Researchers disclosed the bug to Microsoft after examining a long-running campaign by North Korean hackers to exploit the job application process.
🔗️ [Therecord] https://link.is.it/5eVMtd
Researchers disclosed the bug to Microsoft after examining a long-running campaign by North Korean hackers to exploit the job application process.
🔗️ [Therecord] https://link.is.it/5eVMtd
Three intrusions at UK criminal records office went undetected for two years
Unread antivirus alerts and an unpatched content management system exposed Britain's ACRO to three separate data breaches, according to a reprimand notice.
🔗️ [Therecord] https://link.is.it/yGnDX8
Unread antivirus alerts and an unpatched content management system exposed Britain's ACRO to three separate data breaches, according to a reprimand notice.
🔗️ [Therecord] https://link.is.it/yGnDX8
The Threat Hiding in Your Hiring Process: How Fake Remote Workers Get In
Fake remote workers can exploit gaps between hiring checks, device delivery, and account access to enter organizations under false identities. Specops Software explains how document verification and biometric liveness checks can help organizations confirm that the person receiving access is the legitimate new hire.
🔗️ [Bleepingcomputer] https://link.is.it/FREV0K
Fake remote workers can exploit gaps between hiring checks, device delivery, and account access to enter organizations under false identities. Specops Software explains how document verification and biometric liveness checks can help organizations confirm that the person receiving access is the legitimate new hire.
🔗️ [Bleepingcomputer] https://link.is.it/FREV0K
FBI: Hackers target online accounts to steal nude photos
The FBI warns that cybercriminals are targeting adults' and children's social media and other online accounts to steal sexually explicit images or videos.
🔗️ [Bleepingcomputer] https://link.is.it/MsY2Hw
The FBI warns that cybercriminals are targeting adults' and children's social media and other online accounts to steal sexually explicit images or videos.
🔗️ [Bleepingcomputer] https://link.is.it/MsY2Hw
Lazarus hackers exploited Windows zero-day to target defense firms
North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign.
🔗️ [Bleepingcomputer] https://link.is.it/NpjibN
North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign.
🔗️ [Bleepingcomputer] https://link.is.it/NpjibN
Plug and Pwn attack uses fake USB devices for Windows SYSTEM access
Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM privileges.
🔗️ [Bleepingcomputer] https://link.is.it/ViMMvl
Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM privileges.
🔗️ [Bleepingcomputer] https://link.is.it/ViMMvl
FBI: Hackers using social engineering to breach accounts and steal explicit content
Leaked passwords, social engineering and spoofed social media sites are among the tools hackers are using to gather individuals' private content and sell it online, the FBI said.
🔗️ [Therecord] https://link.is.it/OygJtS
Leaked passwords, social engineering and spoofed social media sites are among the tools hackers are using to gather individuals' private content and sell it online, the FBI said.
🔗️ [Therecord] https://link.is.it/OygJtS
Hundreds of fake Chrome VPN extensions route traffic through a proxy
More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users' traffic through SOCKS5 proxies operated by a single provider.
🔗️ [Bleepingcomputer] https://link.is.it/zcqjq1
More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users' traffic through SOCKS5 proxies operated by a single provider.
🔗️ [Bleepingcomputer] https://link.is.it/zcqjq1
Hackers exploit critical Adobe Commerce flaw to hijack customer accounts
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts.
🔗️ [Bleepingcomputer] https://link.is.it/JJqIH9
Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts.
🔗️ [Bleepingcomputer] https://link.is.it/JJqIH9
Android malware combo takes out loans and relays victims' credit cards
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time.
🔗️ [Bleepingcomputer] https://link.is.it/mn1C80
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time.
🔗️ [Bleepingcomputer] https://link.is.it/mn1C80
"City-Forum" data-theft attacks target Salesforce, ServiceNow portals
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals.
🔗️ [Bleepingcomputer] https://link.is.it/DF7fVL
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals.
🔗️ [Bleepingcomputer] https://link.is.it/DF7fVL
Hackers Target Social Media Accounts to Steal Explicit Content, FBI Warns
The FBI is warning the public about sexual exploitation actors illegally accessing social media and personal accounts to steal explicit
🔗️ [Thecyberexpress] https://link.is.it/6377g2
The FBI is warning the public about sexual exploitation actors illegally accessing social media and personal accounts to steal explicit
🔗️ [Thecyberexpress] https://link.is.it/6377g2
NIST Moves to Modernize NVD as AI Reshapes Vulnerability Management
The National Institute of Standards and Technology (NIST) is seeking industry and government input on how to modernize the National
🔗️ [Thecyberexpress] https://link.is.it/rQ0KQb
The National Institute of Standards and Technology (NIST) is seeking industry and government input on how to modernize the National
🔗️ [Thecyberexpress] https://link.is.it/rQ0KQb
Internal Auditing e AI: la Cognitive Governance protegge l’autonomia del giudizio
Quando l'AI entra nei processi decisionali, la sfida non è solo governare gli algoritmi, ma preservare autonomia, capacità critica e responsabilità. Cognitive Governance e Decision Assurance offrono all'Internal Audit una nuova chiave per valutare l'affidabilità del sistema decisionale
🔗️ [Cybersecurity360] https://link.is.it/8HEOWs
Quando l'AI entra nei processi decisionali, la sfida non è solo governare gli algoritmi, ma preservare autonomia, capacità critica e responsabilità. Cognitive Governance e Decision Assurance offrono all'Internal Audit una nuova chiave per valutare l'affidabilità del sistema decisionale
🔗️ [Cybersecurity360] https://link.is.it/8HEOWs
Agenti AI contro Taiwan: la guerra cyber entra nell’era degli attacchi autonomi
Gli Agenti AI hanno attaccato Taiwan, mettendo in luce come l’intelligenza artificiale stia trasformando la guerra cibernetica. Ecco come l'attacco autonomo end-to-end ha operato in parallelo, adattando ricognizione e attacco in funzione di ciò che trovavano. Come mitigare il rischio
🔗️ [Cybersecurity360] https://link.is.it/Bkmg8b
Gli Agenti AI hanno attaccato Taiwan, mettendo in luce come l’intelligenza artificiale stia trasformando la guerra cibernetica. Ecco come l'attacco autonomo end-to-end ha operato in parallelo, adattando ricognizione e attacco in funzione di ciò che trovavano. Come mitigare il rischio
🔗️ [Cybersecurity360] https://link.is.it/Bkmg8b
CEVA Logistics Cyberattack Disrupts European Warehouses, Exposes Customer Data
A CEVA Logistics cyberattack disrupted parts of the company's European operations on July 29, halting shipments at eight affected warehouses
🔗️ [Thecyberexpress] https://link.is.it/jyYhfq
A CEVA Logistics cyberattack disrupted parts of the company's European operations on July 29, halting shipments at eight affected warehouses
🔗️ [Thecyberexpress] https://link.is.it/jyYhfq