The Wordfence Threat Intelligence Team was notified on August 7th, 2026 of a supply chain compromise affecting BdThemes, a WordPress plugin vendor whose…
IT Security News Hourly Summary 2026-08-08 21h : 1 posts
1 posts were published in the last hour 19:1 : Levi Strauss Data Breach – Hackers Gained Access to the Company’s Systems
Levi Strauss Data Breach – Hackers Gained Access to the Company’s Systems
Levi Strauss & Co., the denim giant, reported a cybersecurity incident where an unauthorized third party accessed the company’s internal systems via a…
Atlassian Rovo AI Can Be Abused to Exfiltrate Jira, Confluence Data
Atlassian’s Rovo AI assistant has been exposed to two independent attack techniques that could cause it to retrieve Jira and Confluence data accessible to…
Malvertising Campaign Uses Fake Crypto Websites to Build Malware Directly in Browser Memory
A major malvertising campaign targets crypto investors and traders with fake Solana, Luno and TradingView sites offering to install malicious JavaScript…
Cloudflare Increases Annual Revenue Projection After AI Driven Traffic
Following impressive quarterly results, Cloudflare increased its full-year revenue projection above Wall Street expectations, wagering that the quick…
U.S. Travelers Warned Against Wrapping Passports in Aluminum Foil Over Data Theft Fears
Travel “privacy hacks” encouraging travelers to secure their passports in aluminum foil are bringing renewed attention as concerns grow over electronic…
South Korean Military Medical System Breached, 1.15 Million Records at Risk
South Korea’s military has reported unauthorized access to a medical imaging system containing sensitive records linked to approximately 1.15 million…
Google’s top hacker hunter explains why hacking groups get codenames
Google recently changed how it refers and assigns names to hacking groups. TechCrunch spoke with one of the world’s foremost experts on tracking hackers…
Palo Alto Networks Faces China Cybersecurity Review Amid Rising Tech Tensions
China opened a cybersecurity review of Palo Alto Networks, citing national security concerns but giving no details about the reasons behind the probe.…
Why IT security’s future is more than just AI models
Much of the public discussion around AI and its impact on cybersecurity focuses almost exclusively on models, with some arguments calling for a central…
Splunk Tutorial for Beginners: Search, Dashboards and Alerts (2026)
By HOC Team | Last updated: July 2026 | Read time: ~25 min Splunk is the most widely…
Devs to Anthropic, OpenAI, Cursor, and friends: Make security and privacy the default
Researchers scour social media to measure developer concerns about AI coding tools
U.S. CISA adds a Progress LoadMaster flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Progress LoadMaster vulnerability to its Known Exploited Vulnerabilities catalog. The…
Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data
The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data.
Brinks Home – 732,162 breached accounts
In July 2026, Brinks Home was targeted in a ShinyHunters “pay or leak” extortion campaign . The group subsequently published data they alleged was taken…
Metabase Zero-Day Exploited in the Wild, Exposing Admin Access and Sensitive Data
Attackers exploited a CVSS 10 Metabase zero-day to gain admin access and steal sensitive data. Framework confirmed it was among the victims. Metabase just…
Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All
Two security researchers bought cheap domains—including noreply.net and deleteduser.com—and set up email listening services. Hundreds of companies are…
Flock’s Plans for Rideshare Dashcams and Coaching Police, Revealed
Plus: A judge rules cell tower dumps unconstitutional, water utility hacks spread to a dozen states, a phishing email opens a missile-parts supplier’s…
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
New research shows content inside an email can escape its message boundary and interfere with the webmail interface. Across attack chains spanning…
Inside Astaroth’s New Spambot Component
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Inside Astaroth’s New Spambot Component
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Attacker-controlled instructions can make Atlassian’s Rovo assistant collect Jira or Confluence data that a signed-in user can access, then send it to an…
IT Security News Hourly Summary 2026-08-08 11h : 5 posts
5 posts were published in the last hour 9:2 : WordPress XSS2Shell Flaw Enables Attackers to Achieve Remote Code Execution 9:2 : Falcon Cloud Security July 2026 Release: Helping Security Teams Move Faster in the Cloud 9:2 : 18-Year-Old Linux…
WordPress XSS2Shell Flaw Enables Attackers to Achieve Remote Code Execution
WordPress has patched a high-severity vulnerability, tracked as CVE-2026-64638 and nicknamed XSS2Shell, that begins as an unauthenticated cross-site…