SpecterOps has released Blacklight, an open-source toolkit that identifies local artifacts from AI coding agents like Codex, Claude Code, Cursor, and…
CISA Adds Actively Exploited Windows WinSock Vulnerability to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Microsoft Windows vulnerability to its Known Exploited…
40 Minute LiteLLM Hack Exposes Cloud Keys and CI/CD Secrets From 2,488 Companies
A supply-chain breach involving LiteLLM has widened from a compromised software release into an exposure event affecting thousands of corporate build…
OpenAI Pauses Astra, Expands Daybreak GPT 5.6 Cyber
In a major shift for AI risk governance, OpenAI announced it has paused internal activities for its upcoming…
Kimwolf v7 Botnet Uses Chrome Browser Fingerprints to Hide HTTP/2 DDoS Attacks
Kimwolf v7 is raising the stakes for attacks launched from everyday Android TV boxes and set-top devices. The latest version can make disruptive web…
Fortinet Patches Authentication Flaws in FortiWeb and FortiManager
The vulnerabilities could allow attackers to log in with random usernames and passwords or impersonate any FortiGate appliance.
Armored Likho Turns Windows Microphones Into Automated Eavesdropping Devices
Armored Likho, also tracked as Eagle Werewolf, has expanded its espionage capability with a Rust-based toolkit that can hijack Telegram sessions and…
UK Cyber Attacks Jump 26% Year-on-Year as Ransomware Activity Doubles Globally
UK organisations were hit by an average of 1,597 cyber attacks per week each in July 2026, a 26% increase year-on-year, according to new data from Check…
Searchlight Cyber combines exposure and threat intelligence in new PTEM platform
Searchlight Cyber has launched its Preemptive Threat Exposure Management (PTEM) platform, combining exposure visibility with real-world attacker…
Wireshark 4.6.8 Released to Patch 28 Security Vulnerabilities
Wireshark has released version 4.6.8, which addresses security vulnerabilities in 28 identified issues that could lead to crashes, abnormal exits,…
153GB of stolen credentials surface after LiteLLM supply chain attack
A massive 153GB archive stolen during the LiteLLM supply chain attack exposes credentials and other sensitive data linked to thousands of corporate…
Cloudflare Mitigates 23.2 Million DDoS Attacks as 1 Tbps Attacks Surge 519%
Cloudflare has mitigated 23.2 million network-layer DDoS attacks and stopped 29.64 trillion HTTP DDoS requests during the first half of 2026. This…
IT Security News Hourly Summary 2026-08-13 13h : 12 posts
12 posts were published in the last hour 10:31 : Meta Faces Latest Test As Federal Trial Begins 10:31 : CopyEscape: Taking Over Docker Hosts with docker cp 10:31 : 6,330 Internet-Exposed ICS Devices Near U.S. Data Centers Put Cooling…
Meta Faces Latest Test As Federal Trial Begins
Facebook parent faces biggest legal test so far over addiction claims, with start of trial brought dozens of by state attorneys general
CopyEscape: Taking Over Docker Hosts with docker cp
Imperva Red Team uncovered CVE-2026-17106, a container-to-host arbitrary file-write vulnerability in Docker’s docker cp command. Docker later confirmed…
6,330 Internet-Exposed ICS Devices Near U.S. Data Centers Put Cooling and Power Systems at Risk
A newly published internet-exposure analysis has identified more than 6,300 high-confidence industrial control system and building automation devices…
Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits
It’s the biggest legal challenge yet to addictive social media design and its impact on children.
Nearly 40% of APIs Carry More Than One Authentication Risk at Once — and That Should Change How We Think About the Problem
Every year, the security industry publishes benchmark reports built more or less the same way: pick a handful of common vulnerabilities, measure how often…
Dissecting the JWR phishing framework
Cisco Talos recently identified an undocumented phishing framework, internally branded “JWR” by its developer, built to convincingly impersonate checkout…
White House Mobilizes Security Firms for Operations Against Foreign Cybercrime Gangs
Contracts may require a $1 million bond, which will be forfeited if a company fails to comply with operational requirements.
Akira Affiliate Crashes Ransomware After Attempting EDR Evasion
Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort
CBP Workers Allegedly Used Government Databases to Spy on Exes, Crushes, and Colleagues
Records obtained by WIRED detail hundreds of allegations of Customs and Border Protection workers misusing internal tools to look up romantic interests…
Phantom Stealer Hides Inside PNG Files, Then Steals Your Passwords, Cookies and Crypto
Phantom Stealer is taking a familiar computer file and turning it into a hiding place. The credential-stealing malware can conceal its next stage in PNG…
ISC Stormcast For Tuesday, August 11th, 2026 https://isc.sans.edu/podcastdetail/10046, (Tue, Aug 11th)
This post has no text preview — click the link below to read the original article. This article has been indexed from SANS Internet Storm Center, InfoCON: green Read the original article: ISC Stormcast For Tuesday, August 11th, 2026 https://isc.sans.edu/podcastdetail/10046,…