pwnsy
ENCN
BLEEPINGCOMPUTER
Hackers arrested over €30M bank fraud exploiting service provider flaw1h
Hackers exploit macOS Screen Sharing flaw to deploy Monero miner4h
The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI5h
DARK READING
Amid AI-Driven Bug Tsunami, NIST Looks to…AI1h
Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office3h
What Boards Need to Know About Tech Risk5h
THE HACKER NEWS
Unpatched GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE1d
Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor2d
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access2d
CYBERSCOOP
A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.21h
Tech contractor for Brightly Software sentenced to 2 years in prison for insider attack21h
AI’s ‘middle class’ has gotten dramatically better at hacking1d
TLDR INFOSEC
Attacks Target Salesforce and ServiceNow 🚨, VMware vCenter RCE Flaw 🖥️, Trezor data breach 💿19h
Ceva Cyberattack 💻, LiteLLM Supply Chain attack ⛓️‍💥, Kimwolf botnet 🤖1d
SharePoint AI Exploit 🤖, Zoom "Zoomsday" RCE 📹, Project CAV3RN C2 🦇2d
THE RECORD
France investigates tax authority breach after hacker claims 600,000 victims6h
Flock tightens privacy controls amid scandals over officer abuse1d
New Mirai variant adds stealth capabilities to notorious botnet code1d
INFOSECURITY
Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations4h
New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies6h
Novel macOS Infostealer AmnesiaStealer Spread via ClickFix8h
SECURITYWEEK
In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities7h
Trivy, Not LiteLLM Behind the 2,500 Org Compromise7h
Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal8h
HELP NET SECURITY
The hardest part of agentic AI may be rebuilding the business13h
New infosec products of the week: August 14, 202615h
153GB of stolen credentials surface after LiteLLM supply chain attack1d
INDICATOR
Briefing: US backtracks on company ownership transparency8h
AI generators are now required to offer detection tools. We tested them (and they need work)2d
How TikTok bots turned a cancer patient's story into engagement bait4d
GRAHAM CLULEY
Smashing Security podcast #480: This is the AI service you should never sign up to1d
Beware cut-price AI services that read your every word7d
Apple’s bug bounty program is drowning in so much AI slop, it is in danger of missing serious exploits8d
SOPHOS
ClickFix campaign abuses Deno runtime for infostealer delivery3d
Abuse of alternative runtime environments Deno-tes defender headaches3d
Sophos Working with OpenAI on security from AI, with AI, and for AI4d
KREBS ON SECURITY
Who’s Tracking You? Use This New Service to Find Out7h
Canadian Man Pleads Guilty in Snowflake Extortions8d
SOCIAL
R/CYBERSECURITY
French taxpayers' data stolen in cyber attack, French Finance Ministry says38min💬 2▲ 5
What's one cybersecurity habit you wish more people actually followed?48min💬 29▲ 9
SOC L1 responsibilities2h💬 7▲ 8
R/PRIVACY
Data and Privacy55min💬 1▲ 5
Is Apple really a privacy focused option?2h💬 26▲ 9
Opinion: Flock debate is not facts versus feelings3h💬 10▲ 116
R/NETSEC
You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?)) - watchTowr Labs12h💬 1▲ 28
Ruby 4.0 Universal RCE Deserialization Gadget Chain - elttam14h💬 2▲ 22
When You Pay the Ransom - Taking Apart an Interlock ESXi Decryptor | Maldbg22h💬 3▲ 44
R/REVERSEENGINEERING
Modern Reverse Engineering IDE Built For AI Based RE12h💬 0▲ 15
From P-Code to GNN: extract binary code semantics19h💬 0▲ 8
I reverse engineered an anti-detect (Stealth) browser to find out exactly how their hooks work. I wrote a detailed breakdown + detector for it.1d💬 0▲ 7
R/HACKING
In a first, US will allow some private firms to carry out cyberattacks | TechCrunch21h💬 8▲ 135
University hostel Wi-Fi is heavily restricting websites and video calls — VPNs, WARP, DoH, and DPI bypasses all fail. Is there a way around this?23h💬 68▲ 67
How to access wifi only camera without the app?1d💬 5▲ 9
R/ASKNETSEC
Palo Alto firewall malicious dns requests1d💬 4▲ 8
Question the value of vpn in modern or last 15 years corporate infrastructure.1d💬 26▲ 6
Best SASE platform for stopping data leaks into ChatGPT and Gemini1d💬 8▲ 7
R/MALWARE
WhiteCobra Malware on VS Code: Cloudflare C2 to Telegram Infostealer2d💬 0▲ 5
ICMP-Ghost: Fileless C2 with ICMP & DNS Tunneling in Pure x64 Assembly | Suricata Bypassed6d💬 0▲ 9
R/INFOSECNEWS
RingCentral data breach exposed info of 16 million accounts7h💬 0▲ 7
HACKER NEWS
💬Google is making private AI practical with homomorphic encryption3h💬 69▲ 107
💬Covert CIA program said to be behind mysterious attacks on Galápagos boats11h💬 19▲ 33
💬GLM-5.3: Frontier coding with emergent cyber capabilities13h💬 477▲ 954
💬Rsync 3.5.0: a huge number of security fixes16h💬 1▲ 22
💬Terabytes of credentials leaked in supply-chain attack22h💬 1▲ 46
ENTERPRISE
TECHCRUNCH SECURITY
What we know about the alleged Iranian hacks on U.S. water utilities15min
US courts will start publishing how often the government uses spyware5h
Flock says its new tool will help identify police abuse, but hasn’t explained how it works21h
THE REGISTER SECURITY
1.6M RingCentral accounts' data dumped after ShinyHunters extortion attack1h
French tax authority admits data heist after crook touts 2M records4h
Autonomous AI attacks pose 'clear and present danger' to critical infrastructure6h
ZDNET SECURITY
Google Meet can take notes for your in-person meetings now - here's how it works2h
I tested an Android app that lets anyone fight censorship - and shows your impact in real time3h
Apple is warning users of new spyware attacks - what to do if you're a target3h
CSO ONLINE
Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks5h
Oracle’s new database security tool is free — for six months6h
Akira ransomware reboots into Windows Safe Mode to knock EDR offline10h
FEDERAL NEWS CYBER
BOD 26-04 isn’t a scoring upgrade. It’s an audit of whether you can actually fix things.21h
DISA starting small in proving out Mission Partner Environment capabilities22h
‘ICJobs:’ Intel community gets new classified jobs portal1d
NEXTGOV CYBER
Trump admin empowers private US firms to go after transnational cybercriminals1d
NIST wants to outfit the National Vulnerability Database with AI2d
Federal systems increasingly likely to face accidental AI breach after Hugging Face, experts say4d
CYBERSECURITY DIVE
Researchers confirm breach claims by data-extortion group3h
Researchers find AI-powered hacking tools for sale in underground forums1d
Cisco security revenue jumps 14% as agentic AI sharpens cyberattacks1d
RESEARCH
SCHNEIER ON SECURITY
Upcoming Speaking Engagements3h
If the Markets Reject OpenAI and Anthropic, the US Should Nationalize Them8h
Separating AI’s Technological Problems from Its Capitalism Problems1d
ARXIV SECURITY
DCBA: Detection of Collaborative Black-Hole Attacks in Connected Dominated Set using Baiting Process15h
The energetic cost of mitigating AI attacks in cellular networks15h
Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks15h
SANS ISC
ISC Stormcast For Friday, August 14th, 2026 https://isc.sans.edu/podcastdetail/10052, (Fri, Aug 14th)17h
ISC Stormcast For Thursday, August 13th, 2026 https://isc.sans.edu/podcastdetail/10050, (Thu, Aug 13th)1d
Using Gemma4 with Ollama - Testing File Hash Analysis and Recommendations with AI, (Wed, Aug 12th)1d
MICROSOFT SECURITY
Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise4d
DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure4d
​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)9d
NIST NEWS
NIST National Construction Safety Team Advisory Committee Meeting Scheduled for Sept. 23 and 24, 20261d
NIST Researchers Correct Common Error Confounding Nanotech Measurements8d
‘Spooky’ Particles Transit DC Suburbs, a Step Toward a Quantum Network9d
TROY HUNT
Weekly Update 516: Live From Vietnam2d
NCSC UK
NCSC statement in response to recent incidents resulting from frontier AI evaluations10d
VENDORS
MANDIANT$4.7T
UNC6671 Rebrands: Multi-Brand Vishing Extortion Targets Financial Services and Enterprise Cloud Environments8d
CISCO TALOS$475B
Curiouser and Curiouser1d
Dissecting the JWR phishing framework1d
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities2d
UNIT 42$228B
Kimwolf v7: An Evolution of the Kimwolf Botnet3d
The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications3d
Inside the Modern SOC: The Identity Front Door6d
CROWDSTRIKE$186B
August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs3d
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX7d
Expanding AI Benchmarks in Cybersecurity Beyond Vulnerability Discovery8d
FORTINET$101B
Multi-Functional Linux Botnet “Evooo1Bot”1d
QuickFox Supply Chain Attack Used to Deploy FDMTP Implant10d
CLOUDFLARE$85B
How Cloudflare detects MCP traffic and helps secure it6h
Secure all your internal vibe-coded applications — in one click6h
Total eclipse of the Internet: traffic impacts in Iceland, Spain, and Portugal23h
WIZ$32B
Wiz on Wiz: How the Wiz FinOps Team Uses Wiz Cloud Cost5h
Securing Data in the AI era7h
How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign1d
ZSCALER$23B
Project Glasswing and the Coming Inversion of Vulnerability Management1d
Closing the Data Security Gap: How AHEAD Built a Full1d
Introducing Zscaler Zero Trust Gateway for Google Cloud1d
CHECK POINT RESEARCH$14B
The State of Ransomware Q2 20261d
Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack3d
10th August – Threat Intelligence Report4d
SNYK$7.4B
The Agent Baseline: 35 Controls, But Where Should You Start?2d
Show, Don't Tell: What Evo Continuous Offensive Security Found in a Real Enterprise SaaS4d
Continuous Offensive Security & AI Pentesting: 20 FAQs9d
SENTINELONE$6.2B
The Good, the Bad and the Ugly in Cybersecurity – Week 333h
The Model Is the Malware | What Four Agentic Intrusions Tell Defenders1d
From Input to Impact: Secure AI Where It Runs10d
ELASTIC SECURITY$5.7B
13 million tool calls: auditing every AI coding agent action with Elastic Agent3d
Living off the coding agent: Two tales of tunnels and LaunchAgents6d
The security signal log tailing can't see: tracking npm cooldown removals with Elastic Agent7d
QUALYS$3.85B
Why API Discovery Is Critical for Modern AppSec Programs1d
Qualys Introduces Real-Time Cloud Security Posture Management (CSPM) for Faster Risk Detection and Remediation1d
Microsoft and Adobe Patch Tuesday, August 2026 Security Update Review2d
TENABLE$3.1B
Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)3d
Agentic AI for Cyber Defenders: What Security Teams Built at Black Hat USA 20267d
AI code security with Claude Mythos Preview: Inside Tenable’s 500+ hours of testing for Project Glasswing8d
RECORDED FUTURE$2.65B
Malware Crypting Services and the Threat Actors Who Sell Them1d
Mines, Minds, and Machines: The Journey of AI3d
The Hugging Face Hack Was Cheap Persistence at Work4d
EXPEL$1B
The hidden cost of alert fatigue (and how agentic MDR fixes it)2d
HACKERONE$841M
How to Build a CTEM Program: A 90-Day Implementation Roadmap23h
CTEM Metrics That Matter: What CISOs Should Report to the Board9d
RAPID7$440M
AI is Working in the SOC. So Why are Security Executives More Worried Than Ever?2d
Patch Tuesday - August 20262d
CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)3d
KASPERSKY SECURELIST
APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit10h
Armored Likho expands its cyber-espionage toolkit1d
Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference participants3d
REVERSINGLABS
AI worms are coming — and traditional controls won't stop them1d
OWASP Top 10 for LLM Apps 2026: Excessive agency risk on the rise2d
Frontier AI agents: Only as safe as their containment3d
OX SECURITY
Shai-Hulud Outbreak Debrief: The Worm Evolves into MCP4d
AI-SPM vs. ASPM (and Why AINAPP Is What Comes Next)5d
Agentic AI Security: Risks and Best Practices for Autonomous Agents8d
WELIVESECURITY
Black Hat USA 2026: Will vulnerability discovery eventually decline in the AI era?1d
Black Hat USA 2026: What the Hugging Face hack tells us about human responsibility1d
Black Hat USA 2026: AI is racing ahead of cybersecurity controls2d