A “Bring Your Own EDR” attack abuses trusted SentinelOne components to turn endpoint protection into a powerful malware shield. The research was presented…
OWASP API Security Testing Framework (ASTF)
The OWASP API Security Testing Framework (ASTF) is an open-source, automated security testing tool built to detect vulnerabilities…
FBI, NCAA Warn Hackers Are Targeting College Athletes’ Private Photos
Hackers are targeting college athletes’ accounts to steal intimate photos, prompting a new FBI and NCAA initiative focused on prevention and support.
Ransomware Attacks Fall as Business Defenses Improve
Ransomware has long been one of the biggest cyber threats to businesses, often forcing victims into costly downtime and data loss. Recently, analysts have…
Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges
TP-Link has disclosed multiple high-severity vulnerabilities affecting ISP-managed Aginet networking products, including mesh systems, routers, PON…
New Ransomware Targets AI Model Weights but Fails to Collect Ransom
An updated ransomware campaign is targeting an important but often overlooked asset in artificial intelligence environments: trained AI models and their…
Citrix NetScaler Heap Overflow Flaw Lets Remote Attackers Execute Code as Root – PoC Released
A working proof-of-concept (PoC) exploit demonstrating how a pre-authentication heap overflow in Citrix NetScaler ADC and NetScaler Gateway can be turned…
AnMed Health Ransomware Attack Highlights Growing Patient Safety Risks in Healthcare
AnMed Health is the latest healthcare organization to be disrupted by a ransomware-related cybersecurity incident after having to cancel procedures and…
AI Agents Don’t Stop When Malware Fails, They Write Another Tool and Keep Attacking
AI agents are changing the shape of cyberattacks. Instead of relying on a fixed piece of malware, an agent can test an approach, see it fail, write a…
OpenAI Discloses AI Agent Breached Hugging Face and Accessed Four Other Services
OpenAI has disclosed that an autonomous AI agent involved in an internal cybersecurity evaluation accessed four accounts across four publicly available…
Veracode Finds AI-Generated Code Still Struggles With Security
Veracode finds that AI-generated code remains vulnerable despite near perfect syntax performance.
Lazarus Abuses Zero-Day Exploit to Install a New Backdoor
Lazarus does a zero-day exploitt The North Korean hacking group called Lazarus has been linked to the zero-day compromise of a recently patched…
Cloudflare Report Shows Massive Spike in High-Volume DDoS Attacks: Here Is What the Data Shows
Cloudflare says 805 DDoS attacks topped 1 Tbps in Q2 2026 as high-bandwidth attacks surged, raising new concerns for network defenses.
Hackers Steal 607,000 Records in Cyber-Attack on UK Department for Education
Hackers have stolen around 607,000 records from England’s Department for Education (DfE) after compromising systems used to handle enquiries and…
The first domino of AI disruption: How frontier models are revolutionising software security
Jimmy White, Chief Technology Officer, AI Security, F5 The first domino has well and truly fallen. The advent of high-powered AI models that can rapidly…
New York School District Pauses AI Robot Teacher Plan After Privacy and Safety Concerns
A rural school district in upstate New York decided to cancel the plan to bring in a robot after teachers, state officials, and community members raised…
Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations
Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via…
UK Retail Turns to Chinese Robots
Britain’s retail industry is entering a new phase of automation as Chinese robotics companies step in to fill growing labour gaps. With productivity…
Picus Blue Report Reveals Persistent Detection Gaps
Picus finds that cyber defenses are improving, but detection, post-compromise, and ransomware prevention gaps persist.
Here’s How to Secure Your SSO Against Credential Attacks
Single sign-on (SSO) has transformed how employees access business applications by allowing one account to authenticate users across multiple services.…
IT Security News Hourly Summary 2026-08-14 17h : 15 posts
15 posts were published in the last hour 14:31 : After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug 14:31 : Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026) 14:31…
After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug
This is the latest zero-day released by security researcher Nightmare Eclipse, despite Microsoft publicly threatening to take legal action against them.
Wordfence Intelligence Weekly WordPress Vulnerability Report (August 3, 2026 to August 9, 2026)
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to…
Autonomous AI Hacking Campaign Targets Taiwan Infrastructure
Taiwan’s Ministry of Digital Affairs (MODA) confirmed that government systems and critical national infrastructure were targeted in a…