DEF CON 34 research exposed Pyodide sandbox flaws affecting seven products and potentially exposing sensitive host resources.
North Korean spies are running local LLMs to cause AI mischief
Kimsuky’s phishing attacks get an AI boost
Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise
Microsoft is named a Leader in the 2026 IDC MarketScape for MDR services. Discover how Microsoft Defender Experts MDR combines AI, threat intelligence,…
Hackers Cross From IT to OT Through a Private APN in Poland
Attackers breached a Polish CHP plant through a Fortinet device and private APN, reaching PLCs and disrupting turbine and water treatment systems.…
2026 AWS CyberVadis report now available for due diligence on third-party suppliers
We’re excited to announce that Amazon Web Services (AWS) has completed theCyberVadis assessment of its security posture with the highest score (Mature) in…
DEF CON 34: 10 Vulnerabilities Put Local AI at Risk
DEF CON 34 research revealed 10 vulnerabilities in llama.cpp, exposing critical memory-safety flaws.
Google’s top hacker hunter explains why hacking groups get code names
Google recently changed how it refers and assigns names to hacking groups. TechCrunch spoke with one of the world’s foremost experts on tracking hackers…
Gym rat asks AI agent to book him a class, it hacks a waitlist API to bump him up the list
What wouldst thou ask of the monkey’s paw?
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo. Answering a call. Leaving a box exposed. Trusting the…
IT Security News Hourly Summary 2026-08-10 19h : 12 posts
12 posts were published in the last hour 16:31 : GitHub Expands Supply Chain Malware Detection From npm to 8 Package Registries 16:31 : CISA Warns of Progress LoadMaster Command Injection Vulnerability Exploited in Attacks 16:31 : Windows WalletService Vulnerability…
GitHub Expands Supply Chain Malware Detection From npm to 8 Package Registries
GitHub has expanded its malware detection capabilities beyond npm, providing developers with broader protection against malicious open-source packages.…
CISA Warns of Progress LoadMaster Command Injection Vulnerability Exploited in Attacks
CISA has added a critical Progress LoadMaster vulnerability to its Known Exploited Vulnerabilities catalog after attackers were observed targeting exposed…
Windows WalletService Vulnerability Allows Attackers to Escalate Privileges – PoC Released
Microsoft has patched a Windows WalletService vulnerability that could let local attackers gain SYSTEM privileges, with a public proof of concept urging…
Scans for Solana (Surfpool?) Endpoints, (Mon, Aug 10th)
Solana is a crypto platform known for speed. Developers like it to develop distributed applications or to implement crypto payments. To interact with the…
Red Hat ACM Privilege Escalation Vulnerability Lets Attackers Gain Full Cluster-Admin Access
Red Hat has disclosed a critical privilege escalation flaw, tracked as CVE-2026-10090, affecting the Application Subscription controller in Red Hat…
Researchers Uncover RovoBlast Vulnerability in Atlassian AI Assistant
Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data
Civil-society initiative will pay cybersecurity vendors to protect rural water systems
The group is seeking philanthropic grants, but its founder said the federal government ultimately needs to step in.
New turnkey kit makes it easy for anyone to become a scammer
We discovered a kit that gave us an insight into how modern online scams are built, promoted, and potentially used to target everyday consumers.
China’s New Challenge: Fake AI Videos During Natural Disasters
As China grapples with intensified storms and flooding over recent months, authorities face an unexpected secondary crisis: a surge of AI-generated fake…
Syrian migrant smugglers arrested in coordinated strike in Germany and Serbia
This follows several years of intensive and extensive investigations led by the German Federal Police under the direction of three Bavarian Public…
Bank of Baroda Data Breach: What We Know About the Alleged 1TB Dark Web Leak
Bank of Baroda has confirmed a cybersecurity incident involving a compromised employee email account after reports emerged that nearly 1TB of data…
IT Security News Hourly Summary 2026-08-10 18h : 12 posts
12 posts were published in the last hour 15:32 : Levi Strauss Breach Began With Social Engineering of 3 Employees 15:32 : DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure 15:32 : Fake The Odyssey Downloads Are…
Levi Strauss Breach Began With Social Engineering of 3 Employees
Levi Strauss says hackers socially engineered three employees and stole corporate data, highlighting the growing threat of identity-based attacks.
DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure
Microsoft Threat Intelligence examines DeadLock ransomware, an emerging financially motivated operation distinguished by its use of decentralized…