📔 UK Legal Regulator Raises AI Misuse Concerns 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Solicitors Regulation Authority sounds the alarm over AI hallucinations and data leaks.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
📢 Hacker claims to have stolen millions of Azure customer records from McDonald’s, Vodafone, Kyndryl, and others – here's what we know so far 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
TheHatman claims the data has been stolen from the victims' Azure and Entra tenants using compromised credentials.📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
IT Pro
Hacker claims to have stolen millions of Azure customer records from McDonald’s, Vodafone, Kyndryl, and others – here's what we…
TheHatman claims the data has been stolen from the victims' Azure and Entra tenants using compromised credentials
🖋️ 16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have flagged a new typosquatting campaign targeting RubyGems users with a Windowsbased information stealer. OpenSourceMalware, which discovered the activity on August 15, 2026, is tracking the threat under the moniker StubMaker. The complete list of packages published as part of the campaign is below ubnuler ubnlder ri18nr reaker rakier orakw joxn.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
A single piece of infrastructure has been pulling records out of Salesforce and ServiceNow customer portals across multiple industries for more than a year, according to research published this week by agent security platform Reco. The activity, which Reco has named the City Forum campaign after a domain tied to the attacker's IP address, traces back to one server 158.220.87.79, hosted on a.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
SafePal has disclosed that an authorization flaw in an ordertracking plugin exposed the names, email addresses, shipping addresses, phone numbers, and purchase details of approximately 39,798 customers. The hardware wallet maker said all affected customers were notified individually by email on August 16 from securitysafepal.com, with the subject line "Important Your SafePal Order.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a critical flaw impacting Ray to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. Ray is an opensource, Pythonnative distributed computing framework designed to scale artificial intelligence and machine learning workloads. As of writing, the GitHub project has more than.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 Cyber Incident Disrupts Student Services at UT San Antonio 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
UT San Antonio has taken IT systems offline following a cyber incident, disrupting student registration and tuition payments days before term is due to resume.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
📔 Three-quarters of Ransomware Attacks Target Mid-Market Firms 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Black Kite finds midmarket is the sweet spot for ransomware as manufacturers are most likely to be hit.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Three-quarters of Ransomware Attacks Target Mid-Market Firms
Black Kite finds mid-market is the sweet spot for ransomware as manufacturers are most likely to be hit
🌊 AI SOC vs. SOAR: What the Architectural Difference Means for a Team Evaluating Both 🌊
📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
AI SOC vs SOAR vs MDR explained by practitioners see how architecture decides breach outcomes. Discover which layer your team should run today. The post AI SOC vs. SOAR What the Architectural Difference Means for a Team Evaluating Both appeared first on UnderDefense.📖 Read more.
🔗 Via "UnderDefense"
----------
👁️ Seen on @cibsecurity
UnderDefense
AI SOC vs SOAR: What Every Security Team Must Know
AI SOC vs SOAR explained by practitioners: see how architecture decides breach outcomes. Discover which layer your team should run today.
🦿 FBI Pegasus Records Expose a Blind Spot in US Spyware Oversight 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Federal court records show how far the FBIs Pegasus review progressed and why new US spyware reporting will still leave major gaps in government hacking transparency. The post FBI Pegasus Records Expose a Blind Spot in US Spyware Oversight appeared first on TechRepublic.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
FBI Pegasus Records Expose a Blind Spot in US Spyware Oversight - TechRepublic
FBI Pegasus records reveal gaps in new US spyware oversight, showing what future court wiretap statistics may still fail to capture.
🕵️♂️ 'Ransom Busters': Ransomware Actor Poses as Incident-Recovery Service 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
A ransomware affiliate appears to be sidling up to victims with offers of aid, masking its true intention of diverting ransom payments.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
'Ransom Busters': Ransomware Actor Poses as Recovery Service
A ransomware affiliate appears to be sidling up to victims with offers of aid, masking its true intention of diverting ransom payments.
🖋️ AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Security researchers at Anthropic and Switzerland's EPFL have demonstrated that selfpropagating payloads can spread from one artificial intelligence AI agent to the next through the editable system prompt files that autonomous agent harnesses use to carry state between sessions. The work, released as a preprint on August 10, 2026, tests the technique in a simulated sixagent coding.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
🖋️ TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks 🖋️
📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
Cybersecurity researchers have disclosed details of a previously undocumented Python implant framework dubbed TWINLOOT. "TWINLOOT is a modular, PyArmorhardened Python implant designed to operate its entire commandandcontrol infrastructure inside trusted Microsoft services," Ontinue said in a technical report shared with The Hacker News. "Tasking flows through SharePoint Online file.📖 Read more.
🔗 Via "The Hacker News"
----------
👁️ Seen on @cibsecurity
📔 NASA Ground Control Software Flaw Enables Unauthenticated Commands 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Critical AITGUI flaws expose spacecraft commands and scripts to unauthenticated attackers.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
NASA Ground Control Software Flaw Enables Unauthenticated Commands
Critical AIT-GUI flaws expose spacecraft commands and scripts to unauthenticated attackers
🔥1
📔 Enterprise Applications Carry 4.31x More Critical and High Vulnerabilities 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Enterprise Applications Carry 4.31x More Critical and High Vulnerabili
Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds
🦿 Apple Warns Users in 110 Countries of Mercenary Spyware as iPhone Alerts Get Harder to Miss 🦿
📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
Apple sent a new wave of mercenary spyware threat notifications to targeted users in 110 countries, while making the warnings more visible on iPhones. The alerts signal suspected targeting, not confirmed compromise, and Apple is urging affected users to verify the warning, consider Lockdown Mode, and seek expert help. The post Apple Warns Users in 110 Countries of Mercenary Spyware as iPhone Alerts Get Harder to Miss appeared first on TechRepublic.📖 Read more.
🔗 Via "Tech Republic"
----------
👁️ Seen on @cibsecurity
TechRepublic
Apple Warns Users in 110 Countries of Mercenary Spyware as iPhone Alerts Get Harder to Miss - TechRepublic
Apple warns targeted users in 110 countries of mercenary spyware attacks as new iPhone alerts surface on the Lock Screen and in Settings.
📔 Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed 📔
📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
The security flaw in Snowflakes GitHub Actions workflow had been missed by a GitHub Advanced Security scan, said a Wiz researcher.📖 Read more.
🔗 Via "Infosecurity Magazine"
----------
👁️ Seen on @cibsecurity
Infosecurity Magazine
Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw
The security flaw in Snowflake’s GitHub Actions workflow had been missed by a GitHub Advanced Security scan, said a Wiz researcher
📢 Why software supply chain security is the next accountability challenge for channel partners 📢
📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
Partners need to be able to confidently answer key client questions relating to supply chain security going forward...📖 Read more.
🔗 Via "ITPro"
----------
👁️ Seen on @cibsecurity
ChannelPro
Why software supply chain security is the next accountability challenge for channel partners
Partners need to be able to confidently answer key client questions relating to supply chain security going forward...
🕵️♂️ China-Linked Hacker Shows AI Capabilities in APAC Attack 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
In the first purported "nearautonomous" attack on a nationstate, a Chineselanguage operator used a complex AI framework to target and compromise government agencies, likely in Taiwan.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
🕵️♂️ Critical GitLab Zero-Click Flaw Poses Mitigation Challenges 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
A lack of technical details could make it hard for organizations running selfmanaged GitLab versions to detect potential exploitation of CVE202619478.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential exploitation of CVE-2026-19478.
🕵️♂️ 'CoSnitch' Attack Tricked Copilot into Mapping Out Architecture 🕵️♂️
📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Researchers discovered a "metahacking" technique that can manipulate the AI service into revealing its own security weaknesses.📖 Read more.
🔗 Via "Dark Reading"
----------
👁️ Seen on @cibsecurity
Dark Reading
'CoSnitch' Attack Tricked Copilot Into Revealing Own Architecture
Researchers discovered a "meta-hacking" technique that can manipulate the AI service into revealing its own security weaknesses.