JFrog finds AI development tools are expanding the software supply chain and creating new attack paths for organizations.
Tag: eSecurity Planet
Android Car Systems Infected With Malware Through Software Updates
Kaspersky uncovered malware spreading via software updates on Android-based car head units, turning infected systems into proxy nodes in a botnet.
ToxicPanda 2.0 Blocks Google Play as Android Malware Targets 349 Financial Apps
ToxicPanda 2.0 now targets 349 financial apps across 16 countries while abusing VPN, Accessibility and Android debugging features for deeper control.
Suspected Iran-Linked Cyberattack Shuts UK Power Generator for Four Days
A suspected Iran-linked cyberattack reportedly forced a small UK power generator offline for four days, raising concerns about infrastructure resilience.
Google Pixel August Update Fixes High-Severity Security Flaw
Google’s August 2026 Pixel security update fixes a high-severity privilege escalation flaw. Here’s what Pixel owners need to know.
Anthropic Expands Mythos 5 Access for AI-Assisted Security Audits
Anthropic expands Mythos 5 access for enterprise security teams, offering AI-assisted vulnerability scanning with safeguards and required human review.
TikTok Reaches $400M Settlement With US Over COPPA Violations
TikTok and ByteDance have agreed to a $400 million settlement with the DOJ to resolve allegations that TikTok violated federal children’s privacy…
Thousands of Leaked AWS Access Keys Are Still Active
Truffle Security found 9,308 leaked AWS keys still active, including 768 corporate credentials with full administrative control of cloud accounts.
CISA Orders Civilian Agencies to Patch Exploited TrueConf Server Flaws
CISA ordered civilian agencies to patch two exploited TrueConf Server flaws used to compromise systems and distribute trojanized client installers.
Top 10 Cybersecurity Companies in 2026
Compare the top cybersecurity companies in 2026, including Cisco, CrowdStrike, Bitdefender, Semperis, and more, to find the right security vendor.
New Manic Android Malware Uses Offline Networks to Drain Bank Accounts
Manic Android malware steals banking credentials and can relay stolen data through nearby infected phones, complicating traditional device isolation.
Microsoft Patches Entra ID RCE Vulnerability Exploited in Attacks
Microsoft patched an Entra ID RCE vulnerability exploited in attacks that required no authentication or user interaction.
Critical Patches, AI-Driven Attacks, and Data Theft Define the Week in August 2026
Weekly summary of Cybersecurity Insider newsletters in August 2026.
Alation Confirms Cyberattack: What Security Teams Need to Know
Alation confirms unauthorized activity in one of its systems, leaving key questions about customer exposure, stolen data, and the attack’s scope.
Medusa Ransomware Hits 500-Plus Victims as Agencies Warn of Rapid Exploitation
Federal agencies warn that Medusa ransomware has hit more than 500 victims and can exploit newly disclosed vulnerabilities within 24 hours of release.
Researchers Use Remote Spectre Attack to Leak JWT From Cloudflare Worker
Researchers used a remote Spectre attack to leak a JWT between co-located Cloudflare Workers. Cloudflare says the technique is now mitigated.
6 Best Identity and Access Management (IAM) Software Solutions in 2026
Compare the 6 best IAM solutions for 2026, including JumpCloud, Okta, OneLogin, ManageEngine, CyberArk, and Microsoft Entra ID, features, pros, and cons.
Oracle Patches 943 Vulnerabilities, Including Critical WebLogic Bugs
Oracle patched 943 vulnerabilities, including critical remotely exploitable flaws.
Apple Patches Critical iPhone Flaws: Attackers Could Run Malicious Code
Apple patched critical iPhone flaws that could allow malicious code execution, including an ImageIO vulnerability. Here’s what users should know.
T-Mobile Cuts Network Cable to Stop Salt Typhoon Hackers
T-Mobile physically cut a network cable to disrupt Salt Typhoon’s access.