August 2026 | Based on Verizon DBIR 2026, CrowdStrike, and Industry Sources Report Date: August 13, 2026 Data Period Covered: November 1, 2024 – October 31, 2025 Sources: Verizon Data Breach Investigations Report (DBIR) 2026, CrowdStrike Global Threat Report 2026, IBM Cost of a Data Breach 2026, FBI IC3 Reports Executive Summary The cybersecurity threat landscape in…
A recently patched critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited in an active campaign to deploy a reverse SSH tool for persistence and remote access. […]
The surveillance-technology company has faced criticism over the risks of police abuse of its AI-enabled camera system.
The Samsung R95H is built with an all-new Micro RGB panel that delivers truly impressive color and contrast.
Here’s what election security teams need to consider ahead of the elections this fall.
The Apple Watch Ultra 3 and the Samsung Galaxy Watch Ultra 2 are top-tier rugged smartwatches with similar features, but one stands out.
CRM provider Beacon has revealed that a compromised AWS access key was the likely root cause of the breach of 1500 UK charities’ data
DND is so much more than a way to silence your phone.
Hardware wallet manufacturer Trezor disclosed a data breach affecting nearly 14,000 of its customers after ShipMonk, its shipping provider and logistics partner, got hacked. […]
Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, with wider migration goals extending through 2028
President Trump signed a National Security Presidential Memorandum on August 12 allowing vetted private companies to run offensive cyber operations against foreign threat actors, under the control and oversight of the US government. The post White House authorizes private US companies to hack foreign criminal networks appeared first on Help Net Security.
Academic researchers from the CISPA Helmholtz Center for Information Security and KU Leuven have demonstrated that commercially available out-of-order RISC-V processors, specifically the SiFive P550 and T-Head Xuantie C910/C920, are vulnerable to all major Spectre variants.
Syncro has launched a native Model Context Protocol (MCP) server that connects live operational data from its platform with AI assistants including Claude, ChatGPT and Microsoft Copilot, giving MSP technicians a new way to access and act on ticketing, billing, customer and endpoint data. Syncro connects live MSP data to AI assistants The MCP server…
AI coding tools can introduce unvetted or hallucinated open source dependencies faster than traditional security reviews can keep pace. ActiveState explains why organizations should govern packages at the point of selection, before they enter the development pipeline. […]
Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it
SelectHub has announced the launch of DataGrout, its specialized AI research lab introducing an LLM inference optimization platform and AI governance solution for enterprises. DataGrout’s mission is to drive token reduction for agentic workflows, chatbots and AI tools, while equipping IT and FinOps leadership with a policy-driven, auditable LLM payload and cost monitoring system to…
The move should cut down on the confusion between the two apps, especially for anyone who bounces back and forth between the two of them.
A new White House memo signed by U.S. President Donald Trump instructs the National Coordination Center (NCC) to establish a program that would allow private security companies to apply for approval to hack foreign cybercrime organizations. […]
A threat hunting maturity score can tell you whether your team has developed a disciplined hunting practice. It cannot tell you which adversary techniques you are equipped to find. That leaves a sizable hole in board reporting. The 2025 Verizon Data Breach Investigations Report found that credential abuse accounted for 22% of breaches, with vulnerability…
Autonomous AI agents built on open-source frameworks breached Taiwanese government systems, compromised credentials, and probed a nuclear safety agency in a multi-day cyberattack that researchers say signals a new phase in AI-enabled operations. The campaign unfolded over four days in early July, during which multiple AI agents operated in parallel to map networks, identify vulnerabilities,…
Frontier Technologies and MSP Hub Technologies have formed a strategic alliance combining Frontier’s federal contracting and CMMC capabilities with MSP Hub’s Microsoft licensing, cloud, and managed services operations for government and regulated customers. Managed services and federal contracting expertise in one model This partnership will deliver a fully integrated model that combines Frontier’s federal contracting…
A10 Networks has announced the general availability of the A10 AI Gateway, a centralized, intelligent control plane that gives organizations unified routing, cost management, and governance across every AI agent, application and large language model (LLM) they use. As AI adoption accelerates, developers are increasingly building agents and embedding AI into applications and business systems,…
Tips for those feeling addicted to a beeping, chirping device.
Threat actors have begun exploiting a critical Microsoft SharePoint flaw following the release of proof-of-concept (PoC) exploit code by Rapid7. About CVE-2026-55040 Tracked as CVE-2026-55040, the vulnerability was patched by Microsoft as part of its July 2026 Patch Tuesday updates. “The authentication feature could be bypassed as this vulnerability allows impersonation,” Microsoft said. “Exploiting this…
For the past year, the ransomware conversation has centered on concentration: a handful of dominant RaaS operations controlling most of the damage, and a shrinking pool of active groups fighting over the same territory. The State of Ransomware Q2 2026 report from Check Point Research shows that picture starting to shift. The leaders are still winning, but…
Job seekers are editing their career back-stories as employers pump AI terms into job descriptions.
The White House has authorized government-directed offensive cyber operations against transnational groups, prompting warnings over escalation and attribution risks
The Trump administration is opening the door for vetted US companies to conduct cyber operations against foreign cybercriminal organizations under federal supervision, giving the private sector a more direct role in disrupting cyber-enabled crime. A presidential memorandum issued on August 12 directs the National Coordination Center to create a program authorizing participating companies to conduct…
Researchers at XM Cyber found that a standard domain user with no Microsoft SCCM privileges can chain multiple flaws to reach remote code execution, although the attack does require network access to the SCCM environment. Enterprises use Microsoft System Center Configuration Manager (SCCM) to deploy operating systems, manage patches, distribute software, and monitor compliance across…
Researchers at XM Cyber found that a standard domain user with no Microsoft SCCM privileges can chain multiple flaws to reach remote code execution, although the attack does require network access to the SCCM environment. Enterprises use Microsoft System Center Configuration Manager (SCCM) to deploy operating systems, manage patches, distribute software, and monitor compliance across…
Three out of four of the 138 developers I surveyed use Claude Code. Here’s what they say matters in daily AI coding workflows.
WhatsApp has begun rolling out a new optional “Scam Alert” feature, which uses a local machine learning model to warn users when scammers are targeting them. […]
President Donald Trump signed a national security memorandum Wednesday that lays the groundwork for private sector companies to take a larger role in helping law enforcement carry out offensive hacking operations against transnational criminal organizations. The White House said sustained fraud and other cyber-enabled campaigns from transnational criminal organizations (TCOs) warranted the memo, and cited…
The process of sending someone a file or sharing your information on Android just got a lot simpler.
Researchers at Group-IB have discovered a new NFC relay malware family, purpose-built to capture live card data via NFC and forward it in real time to attackers. They dubbed it “WindRelay.” NFC (Near Field Communication) is wireless technology that allows devices such as smartphones, payment cards, and payment terminals to communicate when they’re very close…
Searchlight Cyber has launched its Preemptive Threat Exposure Management (PTEM) platform, combining exposure visibility with real-world attacker intelligence to help organizations prioritize and reduce the exposures most likely to be exploited. Security for the real-time era For decades, security teams have relied on a critical advantage: time. Organizations could identify vulnerabilities, investigate threats and respond…
A massive 153GB archive stolen during the LiteLLM supply chain attack exposes credentials and other sensitive data linked to thousands of corporate domains, including AWS, Samsung, Cisco, and Salesforce. Hudson Rock says it obtained and analyzed the archive, which contains 433,909 files, and attributed 118,829 CI runner dumps to 2,488 corporate domains. “We are leveraging…
Cisco Talos recently identified an undocumented phishing framework, internally branded “JWR” by its developer, built to convincingly impersonate checkout and login pages across major payment and shopping platforms. The client engine of the JWR phishing framework is a real-time, operator-driven system that, rather than merely logging form submissions like a static credential-stealing page, keeps an AES-CTR encrypted WebSocket open to the threat actor…
Researchers discovered hackers-for-hire performing cyber espionage and financially motivated heists from the same Web panel.
A group of big tech firms is fighting to stop roughly 3,000 youth safety lawsuits from moving forward, and they just lost a critical procedural battle in court. The lawsuits, brought by attorneys general and families, allege that Meta, Google, ByteDance’s TikTok, and Snap knew their products were addictive to children and teens and harmful…
Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort
One page, every number that matters. This infographic distills July 2026’s 188 confirmed cyber attacks into a fast visual read — who’s behind them, how they broke in, what they targeted, and where in the world it happened.
July 2026 saw 188 confirmed cyber attacks across 69 countries, with financially motivated Cyber Crime driving three in four incidents. Malware remained attackers’ weapon of choice, exposed public-facing applications were the most common way in, and Information & Communication infrastructure absorbed the heaviest share of targeting. Here’s the full breakdown of who attacked, how, and…
Our favorite antivirus software protects your PC, laptop, and mobile devices from malware without costing a fortune.
If you have trouble remembering the passwords for all of your online accounts, we’ve handpicked the best password manager apps to help you stay protected.
Attackers are exploiting SharePoint flaw CVE-2026-55040 after a public PoC was released, allowing unauthenticated users to impersonate administrators. Attackers started exploiting CVE-2026-55040 (CVSS score of 9.1), a critical SharePoint authentication bypass patched in July, within days of Rapid7 releasing a public proof-of-concept on August 12. The vulnerability allows an unauthenticated attacker impersonate any SharePoint user…
LevelBlue has been named SentinelOne’s premier remediation partner for Wayfinder Frontier AI Services, expanding the companies’ relationship as organizations grapple with a growing challenge: finding vulnerabilities with AI is becoming faster, but fixing those vulnerabilities at scale remains difficult. For MSPs and other security service providers, the partnership reflects a broader opportunity emerging around AI-driven…
The ICO has issued a formal reprimand to ACRO after patching and security monitoring failures led to a breach
Schneider Electric has launched a new generation of its APC Smart-UPS designed to support multiple battery chemistries, giving channel partners a more flexible platform for helping customers modernize backup power across distributed IT and edge environments. Standardized platform across every battery type The new Smart-UPS runs on valve-regulated lead-acid (VRLA) or lithium-ion batteries and supports…
Cyber defenders need to shake off traditional best practices and switch from reactive patching to building inherently resilient systems in the face of AI-accelerated vulnerability discovery, according to a senior security manager at Microsoft. David Weston, group manager in the Windows team at Microsoft, told delegates at Black Hat USA that traditional approaches to vulnerability…
Ingram Micro is expanding the AI capabilities of its Xvantage platform with an Integration Hub and Model Context Protocol (MCP) Server designed to make it easier for channel partners to connect AI assistants with business data, workflows, and existing IT systems. The distributor says hundreds of partners worldwide are already using the Xvantage Integration (XI)…
Microsoft says China-linked Storm-1175 is using a new ransomware called StormEncryptor, replacing Medusa in its latest attacks. Microsoft says China-linked, financially motivated threat actor Storm-1175 has begun using a new ransomware strain called StormEncryptor. The group previously relied on Medusa ransomware. StormEncryptor is written in C++ and encrypts files and adds the .encrypted extension, then…
MSPs’ access to credentials across dozens or even hundreds of customer environments can turn a single compromised login into a multi-client security incident, putting credential management, technician access and offboarding practices under growing scrutiny. Chris Skipworth, CEO of MSP-focused password management provider Passpack, spoke with Channel Insider about where credential security breaks down inside MSPs,…
For operations leaders, plant managers, and IT decision-makers in growing organizations, the hardest part of expansion is that business growth IT needs change faster than…
Insta360 has launched its new X6 flagship in Australia, pairing larger image sensors and 10-bit Dolby Vision recording with an on-camera AI editor designed to turn spherical…
A high-severity vulnerability (CVE-2026-20349) is being leveraged by attackers to temporarily interrupt the operation of Cisco firewalls, the company has confirmed. The flaw has been added to CISA’s Known Exploited Vulnerabilities catalog and needs to be remediated by US civilian federal agencies by August 14, 2026. Details about the attacks are currently under wraps. Cisco…
Lazarus targets defense professionals with fake Lockheed Martin jobs, exploiting a Windows zero-day to deploy backdoors and evade security controls. Check Point Research has uncovered a new wave of Operation Dream Job, the long-running North Korean campaign that lures defense and aerospace professionals with convincing fake job offers. This iteration is more dangerous than previous…
The trust framework underlying Belgium’s electronic ID system was fully compromised by severe vulnerabilities in a key browser extension, showcasing bigger problems with extensions in general.
Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the release of a proof-of-concept (PoC) code. The vulnerability in question is CVE-2026-55040 (CVSS score: 9.1), which refers to a critical security feature bypass that stems from weak authentication. It was patched by Microsoft as part of its July 2026 Patch Tuesday…
In this Help Net Security video, Christine Gadsby, VP and Chief Security Advisor at BlackBerry, explains why corporate investigations go wrong before the forensic team arrives. The first hours matter more than leaders assume. Access gets granted, conversations start, and decisions get made that later affect chain of custody, privilege, and how regulators judge the…
DDoS attacks grew in scale during the first half of 2026, bringing larger traffic floods, shorter attack durations, and increasingly automated campaigns. Cloudflare’s H1 2026 DDoS Threat Report shows threat actors relying on multi-vector techniques and large-scale network-layer attacks to disrupt online services across multiple industries. L3/4 attack-size distribution (bitrate), H1 2026 (Source: Cloudflare) Network-layer…
Slop or Not is an AI text and image detector for iPhone and Mac that runs entirely offline, with no account required. It uses on-device AI models powered by the Apple Neural Engine to detect AI-generated content. According to a recent survey, 85% of people say they struggle to distinguish authentic content from AI-generated material,…
SAP appoints Rachel Hunter as Head of AI, Australia and New Zealand, and reveals the most widely used AI applications across its ANZ customer base.
SAP research reveals that AI adoption is siloed across lines of business, with each department facing unique challenges in realising value.
Wireshark 4.6.8 fixes 28 security bugs in the protocol analyzer, and nine of them fire when someone opens a saved capture file. Those nine sit in file parsers, the code that reads a capture off disk before any dissection begins: pcapng, Endace ERF, Tektronix K12xx, BUSMASTER, Catapult DCT2000, Gammu DCT3, 3gpp phone logs, TTX Logger,…
I will show you what to do if your password is found on the dark web. Our online security is more important than ever in today’s digital age. With cybercrime on the rise and data breaches becoming increasingly common, it’s crucial to stay vigilant about protecting your personal information. One of the most alarming situations…
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
ChatGPT, Claude and Gemini unwittingly respond like China’s censored chatbots when asked some sensitive questions—and researchers say companies haven’t done much to fix it.
Inaugural Wiz awards recognize top Australian partners for excellence in cloud and AI security
In the past few weeks, I have been using Gemma4 as a Large Language Model (LLM) to see how useful it can be to analyze some of the malware hashes uploaded to the DShield sensor over the past 30 days and figure out how its recommendation can be considered useful about the activity my DShield…
Rimini Street appoints Keith Costello as EVP and Chief Operating Officer and Alexander Guasch as EVP and Chief Delivery Officer
DXC Workplace Services helps organisations improve employee productivity and experience without adding new tools or operational complexity. The offering combines DXC’s deep…
Versatility is in, with people expected to work across the tech stack.
Alphabet’s top scientist discussed the proposed new entity with heads of other AI labs and Trump administration officials including Treasury Secretary Scott Bessent.
Lovable, the Swedish-based AI software creation platform company, today announced an acceleration of its product, infrastructure, and team development efforts — and a noteworthy round of Series C funding totaling $400 million. The company said in its statement that it is looking to augment its platform, which it boasts is already used by almost two-thirds…
Welcome to the 25th edition of Cloudflare’s DDoS Threat Report. This is the first half-year edition in the series: rather than publishing separate reports for the first and…
As expected following last July’s largest Patch Tuesday release, the new normal has arrived with 398 CVEs being addressed in August.
Global study finds AI has become mainstream in security operations, shifting the conversation from adoption to governance and accountability
Total revenue increased 12% year over year, while global product revenue grew 31% and Hitachi Vantara storage revenue increased 45% Within Hitachi Vantara’s block portfolio,…
Would you like access to Anthropic’s Claude at 90% off the normal price? All you have to do is redirect your traffic to a mysterious service called “Poison Claude”. Only problem is that it’s run by fraudsters… Meanwhile, a phishing-as-a-service platform called “Greatness” has come up with something rather nasty: a phishing attack that doesn’t…
An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals. […]
A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time. […]
When you build a new application or capability on Amazon Web Services (AWS), you want to focus on what you’re building. Getting a service running almost always begins with AWS Identity and Access Management (IAM). Many AWS services that act on your behalf need an IAM role, an identity the service assumes to access your…
The Digital Economy and Society Minister is seeking cabinet approval for compulsory multi-factor authentication across all government systems.
The incident at Uber Freight, the logistics arm of the ride-sharing giant, comes after the Helix group listed the company on its data leak site on August 6, claiming to have accessed mailboxes, OneDrive accounts, and accounts receivable.
The attack, which impacted services related to illicit-drug monitoring and legal processes, followed a warning from Colombia’s national CERT about increased ransomware group focus on the country.
Here’s why AI agents must be treated as a new type of identity — yet always must be tied to a human.
Security researchers Alejandro Hernando and Borja Martínez demonstrated attacks at DEF CON 34 that exploit Windows’ automatic hardware identification and driver installation process.
Brad Lightcap, one of OpenAI’s longest-serving executives and its former COO, is leaving after nearly eight years. In a post on X, he said he plans to “start something new” and will remain available for several weeks during the transition. As COO, he oversaw global deployment and key partnerships as OpenAI expanded its enterprise business. …
The ban, introduced in 2022, was a response to concerns that TikTok’s parent company, ByteDance, had ties to the Chinese government, raising fears about data collection and algorithmic influence.
Bitcoin miner turned AI infrastructure provider Riot Platforms has reportedly landed Anthropic as the tenant behind a $9.1 billion, 20-year data center lease. Riot announced Monday that an unnamed “leading frontier AI lab” had leased 191 megawatts of critical IT capacity at its Rockdale, Texas, campus. Bloomberg later identified the customer as Anthropic, citing people…
The cloud-computing company’s stock jumped 19% and lifted other shares tied to the artificial-intelligence build-out.
Just weeks after Microsoft patched a critical hole in Microsoft Defender, a cybersecurity researcher has posted an apparent workaround that provides system-level control to attackers once they gain any level of access. The researcher, who goes by the name Nightmare Eclipse, has been engaged in a long-running battle with Microsoft Security. As of publication time,…
The “City-Forum” campaign has been active since at least March 2025 and has targeted organizations across multiple sectors with custom tooling.
Just weeks after Microsoft patched a critical hole in Microsoft Defender, a cybersecurity researcher has posted an apparent bypass that provides system-level control to attackers once they gain any level of access. The researcher, who goes by the name Nightmare Eclipse, has been engaged in a long-running battle with Microsoft Security. Nightmare Eclipse has not…
Just weeks after Microsoft patched a critical hole in Microsoft Defender, a cybersecurity researcher has posted an apparent workaround that provides system-level control to attackers once they gain any level of access. The researcher, who goes by the name Nightmare Eclipse, has been engaged in a long-running battle with Microsoft Security. As of publication time,…
