Forescout has launched a new Rapid Insight Assessment designed to help organisations uncover hidden assets, network blind spots, and security exposures as…
Wireshark 4.6.8 Released With Patch for 28 Vulnerabilities That Lead to Crashes
The Wireshark Foundation has officially rolled out Wireshark 4.6.8, a security update that patches 28 distinct vulnerabilities capable of triggering…
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems…
Blacklight Toolkit Finds Codex, Claude Code, and Cursor Artifacts Exposing Tokens and Session Data
SpecterOps has released Blacklight, an open-source toolkit that identifies local artifacts from AI coding agents like Codex, Claude Code, Cursor, and…
CISA Adds Actively Exploited Windows WinSock Vulnerability to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Microsoft Windows vulnerability to its Known Exploited…
40 Minute LiteLLM Hack Exposes Cloud Keys and CI/CD Secrets From 2,488 Companies
A supply-chain breach involving LiteLLM has widened from a compromised software release into an exposure event affecting thousands of corporate build…
OpenAI Pauses Astra, Expands Daybreak GPT 5.6 Cyber
In a major shift for AI risk governance, OpenAI announced it has paused internal activities for its upcoming…
Kimwolf v7 Botnet Uses Chrome Browser Fingerprints to Hide HTTP/2 DDoS Attacks
Kimwolf v7 is raising the stakes for attacks launched from everyday Android TV boxes and set-top devices. The latest version can make disruptive web…
Fortinet Patches Authentication Flaws in FortiWeb and FortiManager
The vulnerabilities could allow attackers to log in with random usernames and passwords or impersonate any FortiGate appliance.
Armored Likho Turns Windows Microphones Into Automated Eavesdropping Devices
Armored Likho, also tracked as Eagle Werewolf, has expanded its espionage capability with a Rust-based toolkit that can hijack Telegram sessions and…
UK Cyber Attacks Jump 26% Year-on-Year as Ransomware Activity Doubles Globally
UK organisations were hit by an average of 1,597 cyber attacks per week each in July 2026, a 26% increase year-on-year, according to new data from Check…
Searchlight Cyber combines exposure and threat intelligence in new PTEM platform
Searchlight Cyber has launched its Preemptive Threat Exposure Management (PTEM) platform, combining exposure visibility with real-world attacker…
Wireshark 4.6.8 Released to Patch 28 Security Vulnerabilities
Wireshark has released version 4.6.8, which addresses security vulnerabilities in 28 identified issues that could lead to crashes, abnormal exits,…
153GB of stolen credentials surface after LiteLLM supply chain attack
A massive 153GB archive stolen during the LiteLLM supply chain attack exposes credentials and other sensitive data linked to thousands of corporate…
Cloudflare Mitigates 23.2 Million DDoS Attacks as 1 Tbps Attacks Surge 519%
Cloudflare has mitigated 23.2 million network-layer DDoS attacks and stopped 29.64 trillion HTTP DDoS requests during the first half of 2026. This…
IT Security News Hourly Summary 2026-08-13 13h : 12 posts
12 posts were published in the last hour 10:31 : Meta Faces Latest Test As Federal Trial Begins 10:31 : CopyEscape: Taking Over Docker Hosts with docker cp 10:31 : 6,330 Internet-Exposed ICS Devices Near U.S. Data Centers Put Cooling…
Meta Faces Latest Test As Federal Trial Begins
Facebook parent faces biggest legal test so far over addiction claims, with start of trial brought dozens of by state attorneys general
CopyEscape: Taking Over Docker Hosts with docker cp
Imperva Red Team uncovered CVE-2026-17106, a container-to-host arbitrary file-write vulnerability in Docker’s docker cp command. Docker later confirmed…
6,330 Internet-Exposed ICS Devices Near U.S. Data Centers Put Cooling and Power Systems at Risk
A newly published internet-exposure analysis has identified more than 6,300 high-confidence industrial control system and building automation devices…
Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits
It’s the biggest legal challenge yet to addictive social media design and its impact on children.
Nearly 40% of APIs Carry More Than One Authentication Risk at Once — and That Should Change How We Think About the Problem
Every year, the security industry publishes benchmark reports built more or less the same way: pick a handful of common vulnerabilities, measure how often…
Dissecting the JWR phishing framework
Cisco Talos recently identified an undocumented phishing framework, internally branded “JWR” by its developer, built to convincingly impersonate checkout…
White House Mobilizes Security Firms for Operations Against Foreign Cybercrime Gangs
Contracts may require a $1 million bond, which will be forfeited if a company fails to comply with operational requirements.
Akira Affiliate Crashes Ransomware After Attempting EDR Evasion
Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort