The archive

391 dispatches · newest first · page 4 of 7

1. 2026-08-04Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent
2. 2026-08-04TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover
3. 2026-08-04“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AI
4. 2026-08-04QuickFox Supply Chain Attack Used to Deploy FDMTP Implant
5. 2026-08-04Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware
6. 2026-08-04Gemini Agent-to-Agent Attack Method Exposed Secrets, Enabled Pull Request Tampering
7. 2026-08-04New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database RootCVE-2026-58048
8. 2026-08-04Ransomware: incransom → Oleoductos del Valle
9. 2026-08-04Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts
10. 2026-08-03New DOUBLECUP ClickFix service hides malware in browser cache images
11. 2026-08-03Russian spies turn public Wi-Fi into malware delivery systems
12. 2026-08-03Chinese Actor Weaponizes Deepseek AI Agent to Attack Security Firm
13. 2026-08-03INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
14. 2026-08-03Water system cyberattacks spread to Georgia, Michigan amid US-Iran conflict
15. 2026-08-03AI Runs the Hack: Chinese Actor Automates Cyberattacks With DeepSeek
16. 2026-08-03Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
17. 2026-08-03CVE-2026-17583: The affected Thermo Fisher Applied Biosystems Genetic Analyzers are vulnerable because .fCVE-2026-17583
18. 2026-08-03Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks
19. 2026-08-03Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking
20. 2026-08-03CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the WildKEVCVE-2026-18577
21. 2026-08-03US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States
22. 2026-08-02COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft
23. 2026-08-02US Water Systems Hit by Suspected Iranian Cyber Attacks
24. 2026-08-01Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
25. 2026-08-01Rails patches critical Active Storage flaw with RCE potential
26. 2026-08-01Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User InteractionCVE-2026-48449
27. 2026-07-31CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft
28. 2026-07-31Anthropic says its AI hacked real-world companies in three incidents
29. 2026-07-31Cyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian Hackers
30. 2026-07-31Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
31. 2026-07-31Critical Flaw Allowed to Azure Cosmos DB Pwnage
32. 2026-07-31The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version
33. 2026-07-31AWS Blames North Korean Group for Axios and Other npm Supply Chain Attacks
34. 2026-07-31CISA Urges Water Sector to Protect OT After Coordinated Attacks on PLCs
35. 2026-07-31Minnesota Water Utility Attacks Expose Sector's Cyber-Risks
36. 2026-07-31Anthropic's Claude breached 3 orgs, uploaded PyPI malware during tests
37. 2026-07-31JetBrains warns of critical TeamCity remote code execution flaw
38. 2026-07-30What water utilities need to know about cybersecurity compliance
39. 2026-07-30Microsoft Teams vishing attacks lead to Chaos ransomware attacks
40. 2026-07-30DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware
41. 2026-07-30Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers
42. 2026-07-30VMware fixes three critical flaws allowing auth bypass, VM escapes
43. 2026-07-30Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)CVE-2026-42897
44. 2026-07-30eSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis Finds
45. 2026-07-30Ransomware: thegentlemen → Malaysian Nuclear Agency
46. 2026-07-30Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation
47. 2026-07-30Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts
48. 2026-07-30Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks
49. 2026-07-30Hackers disrupt over 30 Minnesota water utilities in coordinated OT attack
50. 2026-07-30OpenAI agent used exposed credentials at 4 services in Hugging Face breach
51. 2026-07-30A little-known npm package was North Korea’s warm-up act for the axios hack
52. 2026-07-30Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
53. 2026-07-29Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)CVE-2026-66066
54. 2026-07-29[KEV] CVE-2026-20316: Cisco Secure Firewall Management Center Use of Hard-coded Password VulnerabilityKEVCVE-2026-20316
55. 2026-07-29Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI MemoryCVE-2026-59726
56. 2026-07-29Critical VMware vCenter Vulnerabilities Allow Authentication Bypass and Remote Code Execution (CVE-2026-59309, CVE-2026-59310)KEVCVE-2026-59309
57. 2026-07-29Russia accuses Telegram founder of aiding terrorism, seeks international arrest
58. 2026-07-29Researchers Show a Single Malicious Webpage Visit Can Compromise Tor BrowserCVE-2026-10702
59. 2026-07-29CVE-2026-47876: VMware ESX contains an out-of-bounds write vulnerability in the VMXNET3 virtual network adCVE-2026-47876
60. 2026-07-29[KEV] CVE-2026-60004: Gitea Code Injection VulnerabilityKEVCVE-2026-60004