Microsoft is retiring Manifest V2, the technology behind older Edge extensions. Some popular privacy tools will lose features or stop working.
Wetherspoons bars smart glasses from filming customers
Pub chain says turn off the cameras, reminds punters not to blare sound from phone vids either
Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users
Microsoft is changing how Entra ID handles MFA for people who sign in with Windows Hello for Business (WHfB) or macOS Platform Single Sign-On (PSSO). The…
CISA Flags Progress LoadMaster Command Injection Vulnerability Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical command injection vulnerability in Progress LoadMaster, tracked as…
Cyber Briefing: 2026.08.10
Emerging operational risks range from critical zero-day software vulnerabilities and AI agent manipulation to targeted social engineering intrusions,…
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development
AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies,…
Top 10 Malware Threats of the Week – AsyncRAT, Remcos, and Xworm Lead the Surge
Global malware activity climbed sharply over the past week, with remote access trojans (RATs), information stealers, and loaders all posting significant…
CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates
‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad
An AI agent executes instructions that an attacker has planted in the log or alert that records a blocked request word for word.
Android Banking Droppers Surge as Malware Operators Change Packaging Tactics
Android banking malware operators are increasingly relying on dropper-based packaging to evade mobile app-store controls, shifting how threats are…
Malicious Solidity Pro VS Code Extension Steals Crypto Wallets, API Keys and SSH Keys via Telegram
Malicious extensions are turning a routine developer task into a route for theft. A package named Solidity Pro, promoted as a useful tool for Solidity…
Metabase Zero-Day Allows Unauthenticated Admin Access
Metabase has released security patches addressing a critical vulnerability that was exploited as a zero-day, allowing unauthenticated remote attackers to…
Apple Private Cloud Compute Flaw Enables Root File Writes and AI Inference Telemetry Leakage
CVE-2026-20685 is a path traversal vulnerability affecting Apple’s Private Cloud Compute (PCC), potentially allowing attackers to write files as root…
TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian…
Ransomware Operators Disable EDR, Backup Software and Windows Telemetry Before Encryption
Ransomware crews are increasingly trying to blind a victim before they encrypt anything. Analysis shows that attackers can disable endpoint detection and…
New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are…
Valve Steam Hardware Buyers Hit by CEVA Logistics Data Breach
Valve has confirmed that a cyberattack on CEVA Logistics, its European shipping partner for Steam hardware such as the Steam Deck, Steam Machine, and…
IT Security News Hourly Summary 2026-08-10 15h : 15 posts
15 posts were published in the last hour 12:31 : Levi Strauss Hit by Cyberattack 12:31 : New CSS Attacks Expose Webmail Users to Passord and Token Theft 12:31 : Anthropic enables auto mode for Claude Code by default 12:31…
Levi Strauss Hit by Cyberattack
Levi Strauss & Co.
New CSS Attacks Expose Webmail Users to Passord and Token Theft
In new research, CSS-based attacks have been discovered that can bypass security protections in webmail services, allowing attackers to steal passwords,…
Anthropic enables auto mode for Claude Code by default
Anthropic announced it will activate auto mode as the default setting for Claude Code sessions on Pro, Max, and Team subscription plans beginning August…
OpenAI Pauses Astra Model Over Critical Cybersecurity Risk Concerns
OpenAI paused work involving Astra after tests showed cybersecurity abilities that could approach its Critical risk threshold under the company’s…
Health Information Privacy Reform Act Advanced
The Health Information Privacy Reform Act has cleared a significant legislative hurdle after the Senate HELP Committee advanced the bill by a unanimous…
Cyber vulnerability sweep picks up Royal Navy drones sending data to China
No, no nasties to see here, guv…