Whats The Hax? Signal / noise
All coverage

Threats, breaches, and defensive intelligence.

Security intelligence All coverage

Security signals, without the noise.

Current reporting from security alerts, threat intelligence, incident response, fraud, practitioner blogs, community feeds, and watch-and-listen sources.

Latest loaded

New infosec products of the month: August 2026

Help Net Security Ā· 1h ago
Complete index

Source grid

Every loaded article, grouped by its original feed. Search scans source names and headlines.

Density
Sort
All coverage Help Net Security

10 entries Ā· 1h ago

New infosec products of the month: August 2026 1h ago The featured infosec products this month are from: A10 Networks, Abnormal AI, F5 Networks, Intezer, Netscout, ScienceLogic, and more. Two alleged TeamPCP hackers arrested over global supply chain attacks 14h ago Two alleged TeamPCP hackers were arrested in Australia over cyberattacks that compromised more than 1,000 organizations worldwide. Cyberattack causes network outage at Boston Scientific, disrupts global operations 16h ago Medical company Boston Scientific suffered a cyberattack that hit certain information technology systems, causing a network outage. Unknown PaperCut NG/MF vulnerability is under active attack 16h ago A yet unspecified vulnerability affecting print management solutions PaperCut NG and PaperCut MF is being exploited by attackers. Previously patched Citrix NetScaler flaw exploited in the wild (CVE-2026-8452) 18h ago Citrix NetScaler ADC and Gateway flaw CVE-2026-8452 is under active attack, with hackers dropping web shells days after a public PoC. FBI takes down China-linked hacking network behind attacks on NASA, DOJ and U.S. Senate 20h ago FBI disrupted a China-linked hacking network built on QScan and QTRouter, tools used against NASA, the Federal Reserve, and the U.S. Senate. Abnormal AI expands email security from detection to data protection and phishing-simulation training 22h ago Abnormal AI expands its email security platform with Control Center, Email DLP Rules and upgraded Phishing Coach training tools. AI will not fix a governance problem in your camera estate 22h ago Rob Janssens of Hikvision Europe on surveillance camera security when the installer is gone and nobody has the admin credentials. The best human hacking team still out-solved the best AI team 23h ago AI-augmented security teams solved faster in Hack The Box benchmarks, but the top human team still cleared more challenges. AnonyMousKIT phishing-as-a-service uses AI voice calls to steal iPhone passcodes 1d ago AnonyMousKIT is a phishing service targeting stolen iPhone owners to steal Apple ID credentials and remove Activation Lock.
All coverage / Watch and listen Black Hat

20 entries Ā· 5h ago

Black Hat Asia 2026 | Graph-Aware LLM for Windows Logon with a Closed-Loop Guarded Detection Agent 5h ago Black Hat Asia 2026 | Social Media Manipulation Wargaming for Cyberliteracy and Research 8h ago Black Hat Asia 2026 | When 3.5 Billion Strangers Can Exploit Your WhatsApp Devices 14h ago Black Hat Asia 2026 | Shedding LIGHT on Real-World Attacks on Cloudless IoT Devices 1d ago Black Hat Asia 2026 | Exploiting DFIR Agents Through Adversarial Manipulation 1d ago Black Hat Asia 2026 | WhisperPair: A Security Analysis of Google Fast Pair 1d ago Black Hat Asia 2026 | Cast Attack: A New Threat Posed by Ghost Bits in Java 3d ago Black Hat Asia 2026 | Practical Attacks Against Smartphone Boot ROMs 3d ago Black Hat Asia 2026 | Subverting Screen Trust via State Disruption and ONE-WAY Flooding 4d ago Black Hat Asia 2026 | Systematically Exploring and Exploiting DNS Silent Vulnerabilities 4d ago
All coverage / Incidents BleepingComputer

20 entries Ā· 6h ago

Nearly 700 rogue AI agents coordinated in the Hugging Face attack 6h ago New details about the July attack on Hugging Face reveal that hundreds of AI agents driven by OpenAI's internal IM1 model coordinated the compromise through an unauthorized messag… PaperCut warns of NG, MF flaw exploited in zero-day attacks 11h ago PaperCut is warning that hackers are actively exploiting a vulnerability in all versions of its PaperCut NG and PaperCut MF print management software in zero-day attacks. Manchester Airports Group says hackers stole travelers' data 11h ago The Manchester Airports Group (MAG) disclosed that hackers breached its systems and stole customer data, including Wi-Fi sign-ups from Manchester, Stansted, and East Midlands airp… How Threat Research and MDR Help SMBs Build a Defensive Edge 14h ago Threat research gives security teams insight into how attackers operate, while MDR turns that intelligence into faster detection and response. ESET explains how combining threat i… Android 17 adds ECH support to make web browsing harder to track 14h ago Google is introducing new network security protections in Android 17 to strengthen connection privacy, address cellular vulnerabilities, and protect the privacy of users' home net… Australia arrests alleged TeamPCP hackers behind supply-chain attacks 14h ago Australian authorities have arrested and charged two young men accused of belonging to TeamPCP, a hacking group linked to a string of far-reaching developer supply chain attacks. Microsoft rolls out fix for Windows 11 crashes, gaming issues 15h ago Microsoft has started rolling out a permanent fix for a known issue that causes system crashes and gaming issues on Windows 11 devices. Webinar: How Google Workspace breaches happen and what to do next 15h ago Google Workspace breaches can begin with social engineering or forgotten third-party integrations rather than sophisticated exploits. This webinar examines real-world breaches, wh… Carhartt data breach exposes information of 12.9 million accounts 16h ago The ShinyHunters extortion group has published sensitive data from nearly 13 million accounts stolen from clothing retailer giant Carhartt earlier this month, according to data br… CISA orders feds to patch Citrix NetScaler RCE flaw by Saturday 18h ago CISA has ordered U.S. government agencies to patch their Citrix NetScaler appliances against an actively exploited remote code execution vulnerability by Saturday.
All coverage / Incidents The Record from Recorded Future News

5 entries Ā· 8h ago

All coverage / Incidents The Hacker News

20 entries Ā· 9h ago

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face 9h ago Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE 12h ago ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories 12h ago Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers 14h ago Learn How to Build Security Operations Ready for AI-Powered Attacks 16h ago Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks 16h ago What the Data Says About AI in Security Operations in 2026 16h ago Spark RAT Targets Cambodia, Abuses Vulnerable OPSWAT Driver to Disable Security Tools 17h ago GoCaracal Malware Uses Ethereum Smart Contract to Fetch Replacement C2 Address 18h ago New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access 19h ago
All coverage / Incidents Security Latest

20 entries Ā· 9h ago

A Georgia Cop Used Flock to Track 2 Other Cops: His Ex and Her Friend 9h ago OpenAI’s Hugging Face Hack Debrief Raises More Questions Than It Answers 1d ago FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure 1d ago The County Prosecutors Who Became ICE Informants 2d ago Your Expired Visa Card Could Be ā€˜Zombified’ to Make Contactless Payments 5d ago China Is Strapping ā€˜Digital Bombs’ to Civilian Infrastructure—Is the US Ready? 7d ago Reverse-Lookup Service Exposed Millions of Photos of People’s Faces 8d ago Flock Has a Powerful New AI Tool for Police. We Got Its Code 8d ago OpenAI Overhauls Safety Protocols After Its AI Agents Went Rogue 9d ago Meta Ran Ads for an App That Promised to Nudify Female Politicians 9d ago
All coverage / Watch and listen David Bombal

20 entries Ā· 12h ago

All coverage / Blogs Microsoft Security Blog

20 entries Ā· 12h ago

​​​​​​What’s new in Microsoft Security: August 2026 12h ago This month’s updates provide new capabilities to help organizations gain insights into agent activity, expand security coverage across supported environments, and enhance security… When AI infrastructure becomes the target: Securing gateways and control points 1d ago Microsoft Threat Intelligence examines attacks on exposed AI workloads, including LiteLLM gateway exploitation, credential harvesting, persistence, and cryptomining activity. The patch window is collapsing: Why security needs a new control plane 2d ago Learn why Microsoft is investing in new and innovative capabilities able to give organizations time to safely validate and deploy patches. Microsoft named a Leader in the Frost Radarā„¢: Cloud Workload Protection Platforms, 2026 8d ago Microsoft is named a visionary leader in the 2026 Frost Radar for CWPP, recognized for unified runtime security with Microsoft Defender for Cloud. Hunting MacSync Stealer infrastructure through behavioral pivots 9d ago MacSync Stealer rapidly rotates domains to evade detection, but its behavior remains consistent. Learn how Microsoft uncovered 30+ related domains using durable hunting pivots. Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise 17d ago Microsoft is named a Leader in the 2026 IDC MarketScape for MDR services. Discover how Microsoft Defender Experts MDR combines AI, threat intelligence, and human expertise. DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure 17d ago Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use of decentralized infrastructure to support victim… ​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP) 22d ago Learn why KuppingerCole named Microsoft a Leader in its Leadership Compass: Cloud Native Application Protection Platforms report. From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide 22d ago A macOS ClickFix campaign shifted tactics from openly serving infostealer lures to hiding them behind a browser-fingerprinting gate. The change makes malicious infrastructure hard… ChainDrop supply chain compromise: Anatomy of a self-propagating worm 23d ago A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems by republishing malicious updates. This analysis detail…
All coverage / Blogs Heimdal Security Blog

15 entries Ā· 13h ago

50+ insider threat statistics for 2026 13h ago In 2026, insider threats are probably a bigger risk than you think. In fact, they could cost your organization $19.5 million a year. But it’s not really a problem with hackers, sp… The Planting Seeds philosophy. Selling into schools takes years, not quarters 1d ago It’s tempting for MSPs to write off event sponsorship in education as a waste of money. You sponsor an event, hand out flyers, follow up with an email, and hear nothing back. Rick… What the DfE’s cyber security update means for multi-academy trusts 3d ago Before dawn on 10 July 2024, one ransomware attack took down ten schools inside the same multi-academy trust at once. Every control that eventually stopped it was something the De… 9 Proofpoint alternatives. Pros & cons of the leading options 3d ago Compare 9 top Proofpoint alternatives to find the email security tool that best fits your needs, budget, and usability. The risk awareness radar. A superpower every MSP needs to train 21d ago Most of the cyber incidents landing on our desks these days start with someone believing a lie. It’s not a brilliant piece of code that causes most breaches. A convincing email, a… Heimdal data reveals MediaArena adware completes persistence before antivirus quarantine finishes 28d ago New data from Heimdal's telemetry measures the gap between execution of the MediaArena adware and the completion of quarantine. The same pattern has been confirmed across more tha… How Heimdal grew from a bold idea into a global cybersecurity platform 28d ago Heimdal did not start as a traditional cybersecurity company. It started with two Danish cybersecurity researchers, a piece of innovative technology and a challenge. Could they cr… MediaArena malvertising: why a quarantine isn’t the end of the incident 28d ago If Microsoft Defender quarantines BrowserModifier:Win32/MediaArena on one of your endpoints, the alert reads like a win. Our SOC data says treat it as a live persistence incident… Tools Change. Teach People How to Keep Up 30d ago ā€œMake everyone one percent better and it compounds across the team.ā€ That’s the line Joe Head wrote about his own job and when I read it back to him, he didn’t hesitate. ā€œThat is… 4 Best Managed EDR Solutions & Service Suppliers (and how to choose) 35d ago There are several cybersecurity companies that offer managed EDR services in 2026. Here’s what actually separates them, and who each one suits. Most successful cyber attacks begin…
All coverage / Incidents SecurityWeek

10 entries Ā· 13h ago

All coverage Security - Ars Technica

20 entries Ā· 14h ago

Claude, Codex, and Hermes installed unowned code inside corporate networks 14h ago How OpenAI let a mob of LLM agents game a test and ransack Hugging Face 15h ago Inaudible sounds used to fingerprint browsers catch AliExpress red-handed 3d ago Grok exfiltrates user data when malicious instructions are encrypted 7d ago Microsoft Copilot reveals secret input that allowed it to be hacked 9d ago Vulnerability giving attackers full control of Macs is under active exploitation 13d ago Private security firms will soon be allowed to hack overseas cybercriminals 14d ago Terabytes of credentials leaked in massive supply-chain attack 15d ago Researchers found a way to hijack devices through Zoom screen sharing 15d ago DEF CON crowd suspected in fake-hotspot attack on Delta flight 16d ago
All coverage / Alerts MSRC Security Update Guide

20 entries Ā· 14h ago

CVE-2026-69550 Windows App for Mac Information Disclosure Vulnerability 14h ago CVE-2026-66804 Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability 14h ago CVE-2026-65779 Windows Autopilot Elevation of Privilege Vulnerability 14h ago CVE-2026-68817 Microsoft Excel Remote Code Execution Vulnerability 14h ago CVE-2026-65660 Microsoft SharePoint Server Remote Code Execution Vulnerability 14h ago CVE-2026-70329 Microsoft Outlook Remote Code Execution Vulnerability 14h ago CVE-2026-50435 Windows Overlay Filter Elevation of Privilege Vulnerability 14h ago CVE-2026-50351 Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability 14h ago CVE-2026-42993 Remote Desktop Client Remote Code Execution Vulnerability 14h ago CVE-2026-62890 Windows GDI+ Elevation of Privilege Vulnerability 1d ago
All coverage / Watch and listen John Hammond

20 entries Ā· 16h ago

All coverage / Incidents Krebs on Security

10 entries Ā· 17h ago

Two Alleged ā€˜TeamPCP’ Hackers Arrested in Australia 17h ago Who’s Tracking You? Use This New Service to Find Out 13d ago It can be daunting to determine who's responsible for showing ads on the websites we visit, or who's harvesting data from the mobile apps we use every day. That information is alr… Microsoft Plugs Nearly 400 Security Holes 16d ago Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already be… Canadian Man Pleads Guilty in Snowflake Extortions 21d ago A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort… Read This Before You Buy That TV Streaming Stick 28d ago Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they se… LG to Ban Residential Proxies from Smart TV Apps 37d ago The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy node… Microsoft Patches a Record 570 Security Flaws 44d ago Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilitie… Lessons Learned from CISA’s Recent GitHub Leak 45d ago The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including… Felons, Fraudsters Flog Offensive Cybersecurity Startup 50d ago A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convic… FBI Seizes NetNut Proxy Platform, Popa Botnet 56d ago The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service op…
All coverage / Threat intel Securelist

10 entries Ā· 18h ago

Threat landscape for industrial automation systems. Q2 2026 18h ago The report contains statistics on industrial threats for Q2 2026, including ransomware, miners, spyware and other threats that were detected and blocked on industrial control syst… Exploits and vulnerabilities in Q2 2026 1d ago This report covers statistics on vulnerabilities, exploits, and C2 frameworks in Q2 2026. For the first time ever, we aggregate data on vulnerabilities in open-source AI agents an… The invisible passenger in your car 6d ago Kaspersky expert has discovered new Android malware designed to serve ads and build a proxy botnet. It’s delivered through legitimate software for DoFun head units. APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit 13d ago Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and t… Armored Likho expands its cyber-espionage toolkit 14d ago Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on… Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants 16d ago Kaspersky experts have discovered malicious TrueConf software installers. The Head Mare APT group uses them to deliver the PhantomCore and PhantomGraph backdoors to target systems… Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection 16d ago Project CAV3RN targets Israel with Google Apps Script C2 relays and DNS-based routing. Modular .NET NativeAOT framework blends C2 traffic with legitimate Google services to evade… IT threat evolution in Q2 2026. Non-mobile statistics 17d ago The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as internet of things (IoT) devices, during Q2 2026. IT threat evolution in Q2 2026. Mobile statistics 17d ago This report contains mobile threat statistics for Q2 2026, along with noteworthy discoveries and quarterly trends: the Anatsa banker and a transition to droppers. How legitimate cloud platforms enable phishers to bypass MFA 23d ago We cover a cloud-based AitM attack scenario leveraging service workers and Ultraviolet, and provide detailed phishing hosting statistics across platforms like Cloudflare Workers,…
All coverage / Fraud Blog – Forter

10 entries Ā· 19h ago

All coverage / Threat intel Recorded Future

20 entries Ā· 1d ago

All coverage / Watch and listen The Cyber Mentor

20 entries Ā· 1d ago

All coverage / Alerts Cisco Security Advisory

20 entries Ā· 1d ago

Cisco Advance Notification for Publication of September 2, 2026, Security Advisories 1d ago On September 2, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software re… Cisco Secure Workload Software Security Hardening Release: August 2026 8d ago As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering team has conducted a comprehensive internal security review.… Cisco Industrial Ethernet 1000 Series Switches Stored Cross-Site Scripting Vulnerability 8d ago A vulnerability in the web-based management interface of Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an authenticated, remote attacker to conduct a stored cros… Cisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability 8d ago A vulnerability in Cisco Packaged Contact Center Enterprise (Packaged CCE) and Cisco Unified Contact Center Enterprise (Unified CCE) could allow an authenticated, remote attacker… Cisco Unified Intelligence Center SQL Injection Vulnerability 8d ago A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, local attacker to perform a blind SQL injection attack aga… Cisco Industrial Ethernet 1000 Series Switches Denial of Service Vulnerability 8d ago A vulnerability in the handling of management plane packets by Cisco Industrial Ethernet (IE) 1000 Series Switches could allow an unauthenticated, remote attacker to cause the dev… Cisco RoomOS Stack Overflow Vulnerability 8d ago A vulnerability in the USB driver of Cisco RoomOS could allow an unauthenticated, local attacker with physical access to the USB port on an affected device to execute arbitrary co… Cisco BroadWorks Out-of-Band Blind XML External Entity Injection Vulnerability 8d ago A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an… Cisco Crosswork Security Hardening Release: August 2026 8d ago As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team has conducted a comprehensive internal security review. This… Cisco Advance Notification for Publication of August 19, 2026, Security Advisories 15d ago On August 19, 2026, the Cisco Product Security Incident Response Team (PSIRT) will publish advisories to disclose security vulnerability information along with fixed software rele…
All coverage / Threat intel SANS Internet Storm Center, InfoCON: green

10 entries Ā· 2d ago

All coverage / Watch and listen DEFCONConference

20 entries Ā· 2d ago

All coverage / Watch and listen NetworkChuck

20 entries Ā· 2d ago

All coverage / Incidents CyberScoop

20 entries Ā· 3d ago

SCOTUS tosses one of two injunctions against Trump USPS mail-in ballot rules 3d ago Treasury sanctions alleged Iranian hackers as part of ā€˜economic D-Day’ 3d ago Bipartisan Senate bill aims to prepare energy sector for Q-Day 3d ago Postal Service moves to finalize mail ballot regs before SCOTUS ruling 5d ago Apollo discloses data breach from ongoing wave of attacks hitting financial sector 6d ago Lawmakers seek watchdog review of federal hacking of Americans 6d ago Early 764 member sentenced to 77 years, longest prison term to date for a nihilistic violent extremist 7d ago Retail theft bill spurs ā€˜very large and very dangerous’ surveillance fears 7d ago The push to designate AI as the next critical infrastructure sector 7d ago AI-fueled attacks pose ā€˜active threat’ to water, other sectors, U.S. agencies warn 8d ago
All coverage / Community Technical Information Security Content & Discussion

20 entries Ā· 3d ago

Insight into agentic hacking tools: Hermes, OpenClaw and the Bayesian brain 3d ago The Citizen Lab Bad Connection: Uncovering Global Telecom Exploitation by Covert Surveillance Actors 3d ago Code Execution via Text Template Files | Playbook & Detection 3d ago Tata’s B2B platform returned OTPs in API responses 3d ago ValleyRAT campaign uses fake GSTR-3B overdue notice targeting Indian taxpayers 8d ago CRLF-Powered Desync Attacks: Beheading HTTP Streams 8d ago How to break secure boot without touching any cryptography 8d ago The Curious Incidents with DNS in the Sandbox at Escape-Time 9d ago šŸŽ„ Operation CameraSwarm: over 14,000 Dahua cameras compromised across Ukraine and Russia 9d ago How a popular Android library silently exposed thousands of apps to Arbitrary File Overwrite (AFO). https://itis911.github.io/writeups/cropper-vulnerability.html 9d ago
All coverage / Watch and listen NahamSec

20 entries Ā· 3d ago

All coverage / Watch and listen LiveOverflow

8 entries Ā· 4d ago

All coverage / Watch and listen Hak5

20 entries Ā· 7d ago

All coverage / Blogs The Last Watchdog

20 entries Ā· 7d ago

News alert: Airlock Digital IRAP assessment bolsters trust for sensitive Australian deployments 7d ago ADELAIDE, Australia, August 19th, 2026, CyberNewswire Ć¢ā‚¬ā€ Airlock Digital, a global provider of application control and allowlisting solutions, today announced that it has complet… News alert: OpenMatter Network spotlights AI verification at Belgrade Blockchain Week 10d ago Melbourne, Fla., August 17, 2026, CyberNewswire Ć¢ā‚¬ā€ Continuing its effort to build global awareness of the need to move computing from assumption-based trust to cryptographic proo… MY TAKE: Black Hat 2026 Part 3 — Agentic AI can do the work, but somebody has to prove it 15d ago Security work used to leave a trail without anyone trying. A developer who wanted an open source library went and got it, and the license came along. An analyst who closed a case… MY TAKE: Black Hat 2026 Part 2 — Security shifts to deciding in advance what an AI agent may reach 16d ago Humans get identity. That is what MFA and single sign-on are for, and we all understand the bargain: prove you are who you say, then go do your work. Machines get predictability.… MY TAKE: Black Hat 2026 Wrap-up Part 1 — AI is forcing security and operations to merge in the SOC 17d ago Companies have kept security in one silo and operations in another for as long as both have existed. Related:Part 2 Ć¢ā‚¬ā€ deciding what AI can reach Agentic AI is collapsing the div… News Alert: Pulse Security AI’s research reveals C-suite, board confidence gap on cyber exposures 22d ago LAS VEGAS, Aug. 5, 2026, CyberNewswire ﻗ€“ Boards of directors believe they understand their company's security posture and what it means for the business. The security leaders pr… BLACK HAT ROUNDTABLE: Security pros dissect fallout from Hugging Face’s double guardrail failure 22d ago LAS VEGAS Ć¢ā‚¬ā€œ It's come to this. A cyberattack carried out by a machine. Worse, a machine that picked its own victim. Whether that counts as agency is where the experts below part… News alert: Airlock extends endpoint control to govern AI agents and define operating boundaries 22d ago Atlanta, GAÅŒÄ†Ć¶August 4, 2026ÅŒÄ†Ć¶Airlock Digital, a leader in preventative endpoint security, today announced Agentic AI Control & Governance at Black Hat USA 2026. The new capabili… News alert: Mallory links threat intelligence to governed response as exploit timelines shrink 22d ago Las Vegas, United States, August 4th, 2026, CyberNewswire Ć¢ā‚¬ā€œ Mallory, the AI-native Threat and Exposure Management platform, today introduced a unified context and intelligence l… News alert: Community voting shapes 2026 Cybersecurity Excellence Awards 22d ago LAS VEGAS, Aug. 4, 2026, CyberNewswire Ć¢ā‚¬ā€œ The Cybersecurity Excellence Awards today announced the winners of the 2026 Community Choice Award, selected through 79,455 votes cast d…
All coverage / Threat intel WeLiveSecurity

20 entries Ā· 10d ago

All coverage / Watch and listen IppSec

20 entries Ā· 12d ago

All coverage / Threat intel / Watch and listen Proofpoint News Feed

10 entries Ā· 14d ago

Cybercriminals Turn to Indirect Prompt Injection Attacks 14d ago Cybercriminals are developing indirect prompt injection tools to target AI agents. Russian hackers can steal emails without a click 20d ago Proofpoint Joins Google Unified Security Recommended Program to Help Organizations Defend Against Today’s Most Sophisticated Threats 23d ago Recognition highlights Proofpoint's deep technical integration with Google Cloud Security solutions and commitment to helping organizations protect people, data and AI Helps Proofpoint Launches OEM Program to Help Security Providers Embed Trusted Threat Intelligence and Detection Capabilities 23d ago Accelerates OEM innovation by embedding trusted threat intelligence into security products and customer-facing workflows. Helps partners deliver more prioritized, Max-severity Exchange server flaw under active exploitation by Kremlin hackers 28d ago New warnings that Russian operatives are targeting the emails of US nuclear scientists and defense contractors 35d ago Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes 35d ago US and allies say Russian hackers stole emails without social engineering 35d ago The United States and more than a dozen allied nations said on Thursday that Russian hackers stole emails from users of ​the Zimbra email program without having to fool them into… If you pay a hacker’s ransom, chances are that they’ll come back for more 36d ago Proofpoint Research Finds 65% of Organizations Affected by Ransomware Say AI Made Attacks More Effective 36d ago Global study reveals that AI is amplifying phishing, impersonation and credential theft, transforming ransomware into a human-centric extortion problem 40%
All coverage / Blogs Microsoft 365 Blog

10 entries Ā· 28d ago

The next measure of AI momentum is work transformed 28d ago New data from Microsoft 365 Copilot telemetry signals, along with examples from our customers around the world, demonstrate AI transformation in action. Copilot in Excel: Built for the era of Frontier Finance 63d ago - Discover how Copilot in Excel transforms finance workflows with skills, data connectors, and capabilities for traceability. Copilot Cowork is now generally available 72d ago Copilot Cowork is now generally available worldwide, bringing secure, AI-powered automation for complex enterprise tasks in Microsoft 365. Introducing Microsoft Scout: Your always-on personal agent 86d ago Microsoft introduces a new, always-on personal agent, Microsoft Scout, integrated across the Microsoft 365 apps you use every day. Announcing the new Work IQ APIs 86d ago Build enterprise agents with Work IQ APIs for Microsoft 365—bringing business context, tools, and secure, scalable intelligence into every workflow. Introducing Microsoft 365 Business with Copilot: The new standard for small business 91d ago Meet Microsoft 365 Business with Copilot—the AI-powered solution transforming how small businesses work, collaborate, and compete. Introducing a new design for Microsoft 365 Copilot 91d ago Copilot’s redesigned experience delivers faster performance, adaptive tools, and clearer AI-powered workflows to help you easily move from intention to outcome. New and improved: Computer-using agents, a new workflows experience, and real-time voice experiences 93d ago Explore what's new in Copilot Studio, May 2026: computer-using agents are now available, plus redesigned workflows and Work IQ extensibility. New and improved: Agent governance, intelligent workflows, and connected app experiences 108d ago See what's new in Copilot Studio, April 2026: updates to workflows, more control over agent operations, and an expanded agent usage estimator. Copilot Cowork: From conversation to action across skills, integrations, and devices 114d ago Today, we’re announcing additional capabilities in Cowork to expand on what it can make possible for you.
All coverage / Threat intel Trend Micro Research, News, Perspectives

20 entries Ā· 29d ago

Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility 29d ago Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave 30d ago The Signs Were There: What the First Autonomous Ransomware Case Confirms 35d ago 13M+ Emails Sent in Tech Support Scam Targeting Users, Organizations in Japan 36d ago Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It 36d ago Federal Agencies Warn of Ongoing PLC Exploitation Against Critical U.S. Infrastructure 36d ago Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass 37d ago Volume Is Not Risk: Making Sense of the ā€œVulnpocalypseā€ 38d ago Six Minutes to Compromise: How ā€˜Patriot Bait’ Actor Used AI to Build and Deploy a C&C Botnet 45d ago TONResolver RAT Abuses TON Blockchain to Target Japan's Hotel Industry 60d ago
All coverage / Incidents darkreading

20 entries Ā· 34d ago

All coverage Cyber Defense Magazine

20 entries Ā· 38d ago

All coverage / Fraud PYMNTS | Fraud Prevention Archives

10 entries Ā· 43d ago

All coverage / Threat intel WeLiveSecurity

20 entries Ā· 44d ago

All coverage / Alerts Alerts

20 entries Ā· 70d ago

CISA Adds One Known Exploited Vulnerability to Catalog 70d ago CISA Urges Hardening Fortinet Devices After Reports of Credential Exposure 70d ago CISA Adds One Known Exploited Vulnerability to Catalog 72d ago CISA Adds Two Known Exploited Vulnerabilities to Catalog 73d ago CISA Adds One Known Exploited Vulnerability to Catalog 76d ago CISA Adds One Known Exploited Vulnerability to Catalog 77d ago CISA Adds Three Known Exploited Vulnerabilities to Catalog 79d ago CISA Adds Two Known Exploited Vulnerabilities to Catalog 80d ago CISA Adds One Known Exploited Vulnerability to Catalog 83d ago CISA Adds One Known Exploited Vulnerability to Catalog 85d ago CISA has added one new vulnerability to its KEV Catalog, based on evidence of active exploitation.
All coverage / Alerts All CISA Advisories

20 entries Ā· 70d ago

All coverage / Community cybersecurity

20 entries Ā· 77d ago

All coverage / Community hacking: security in practice

20 entries Ā· 77d ago

All coverage / Community Reverse Engineering

20 entries Ā· 77d ago

Reverse engineered BLE protocol of a $7 generic Chinese smart ring from Temu, and built an iOS app around it 77d ago [Reverse-Engineering] Skeet CS:GO source code (Gamesense) 77d ago [Reverse-Engineering] Skeet CS:GO source code (Gamesense) 77d ago Giulio Zausa's MMO-CHIP Makes Reverse Engineering Old Silicon Chips a Multiplayer Game 77d ago I built 99 adversarially malformed PE files to test tool robustness - here’s what happened 77d ago Drive Firmware Security - Phison S11 77d ago IDA 9.4 Beta | Hex-Rays Docs 78d ago Trane Tracer HVAC cybersecurity issues 78d ago šŸš€ Release PyMemoryEditor v2.0 — read, write and scan the memory of any running process, in pure Python (Windows, Linux & macOS) 78d ago I reverse engineered Lofree Hypace mouse firmware flashing protocol to bypass their official web based configuration on MacOS. 79d ago
All coverage / Community For [Blue|Purple] Teams in Cyber Defence

20 entries Ā· 77d ago

US charges suspected Russian hacker with facilitating cyber campaign 77d ago Hawkish GOP lawmaker Don Bacon says he was hacked by Russia 77d ago Oops, I Weaponized the Database: Abusing AI Features in SQL Server 2025 77d ago GreatXML: GreatXML bitlocker bypass vulnerability 77d ago GreatXML a bitlocker that seems to only work if you ever had Defender Offline Scan 77d ago I found 23 Chrome extensions hijacking 758,000 users' searches for affiliate revenue 77d ago [Op Report] From SSA Phish to AdaptixC2: A Multi-RAT Intrusion 77d ago GhostTrace – CLI forensic scanner for Windows: 22 modules, MITRE ATT&CK mapped, read-only by default 78d ago Miasma-style supply chain attacks 78d ago On affected platforms running Arista EOS where a tunnel decapsulation configuration—such as VXLAN (Virtual Extensible LAN), decap-groups, or a GRE (Generic Routing Encapsulation) tunnel interface—is present, the switch will incorrectly decapsulate and forward other unexpected tunneled packet 78d ago
All coverage / Community Malware Analysis & Reports

20 entries Ā· 77d ago

All coverage / Blogs Security | Microsoft Azure Blog | Microsoft Azure

6 entries Ā· 86d ago

All coverage / Fraud Blog Articles - Identity Insights | Trulioo

13 entries Ā· 133d ago

All coverage / Fraud Fraud Prevention Archives - Alloy Silverstein

10 entries Ā· 175d ago

AI in Tax Season: Risks, Scams, and How to Protect Your Data 175d ago Tax Season Scams to Watch For This Year 182d ago Beware of Misleading Tax Advice on Social Media 350d ago Each year the IRS educates taxpayers on the most trending fraud schemes that could deceive individuals and businesses during tax season. In late 2024, The IRS took to warning the… Scammers Up Their Game With AI 352d ago Learn how to spot the threats and protect yourself from scammers using AI for phishing and deepfakes with smart security practices. The Essential Guide to Safeguarding Your Online Passwords 429d ago Protect your personal and business data with strong passwords, two-factor authentication, and smart cybersecurity practices. Beware: Tax Season is Scam Season 540d ago Tax season is also prime time for tax scams. To safeguard your personal information, consider these key points: Communication methods The IRS initiates contact primarily through m… Stop Scams: Fraud Prevention Starts with Your Employees 554d ago You can be as proactive and protective as possible when it comes to cyber security for your business, but there’s one vulnerability you cannot eliminate: human error. In fact, sta… ā€˜Tis the Season for Holiday Shopping Scams 626d ago The holidays are typically the time of year for gifting presents to friends and family or donations to charity. Unfortunately, not-so-jolly fraudsters take advantage of this gener… IRS Issues ā€œDirty Dozenā€ Fraud Warnings 811d ago Each year, the IRS releases a ā€œDirty Dozenā€ series to highlight the most common fraud schemes taxpayers should be aware of. IRS Identity Theft Season Begins Now 941d ago Each year thieves try to steal billions in federal withholdings by stealing your identity. As the IRS focuses more attention on this quickly growing problem, now is the time of ye…
All coverage / Threat intel Threatpost

10 entries Ā· 1457d ago

Student Loan Breach Exposes 2.5M Records 1457d ago 2.5 million people were affected, in a breach that could spell more trouble down the line. Watering Hole Attacks Push ScanBox Keylogger 1458d ago Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. Tentacles of ā€˜0ktapus’ Threat Group Victimize 130 Firms 1459d ago Ransomware Attacks are on the Rise 1462d ago Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. Cybercriminals Are Selling Access to Chinese Surveillance Cameras 1463d ago Twitter Whistleblower Complaint: The TL;DR Version 1464d ago Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. Firewall Bug Under Active Attack Triggers CISA Warning 1465d ago CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. Fake Reservation Links Prey on Weary Travelers 1466d ago Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. iPhone Users Urged to Update to Patch 2 Zero-Days 1469d ago Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. Google Patches Chrome’s Fifth Zero-Day of the Year 1470d ago An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack.

No matching sources found.