Microsoft’s August 2026 Patch Tuesday delivered security fixes for 400+ vulnerabilities, including one that has been exploited in zero-day attacks (CVE-2026-68820) and three that were publicly disclosed prior to the release of the patches. Vulnerabilities of note CVE-2026-68820 is a use-after-free flaw that affects the Windows Ancillary Function Driver for WinSock (AFD.sys) and allows a…
Global Security News
Vibe-Coding Startup Lovable Hits $13 Billion Valuation
New funding round catapults AI company into the ranks of Europe’s most valuable startups.
Global Security News
Russian-Linked Hackers Accessed Polish Power Plant OT Network Through Private APN, Says CERT.PL
The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country
Global Security News
Google Magnifier helps me see very small print (when I can’t find my glasses)
If you regularly find yourself in a situation where you’ve left your glasses behind and you need to read fine print or something far away, Google has an app right up your alley.
Global Security News
Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access
Threat actors have begun to actively exploit a recently patched critical security flaw in Broadcom VMware vCenter, according to new findings from QUIRSO. The vulnerability in question is CVE-2026-59310 (CVSS score: 9.8), a directory-traversal vulnerability in the VMware vCenter server that a malicious actor with network access can exploit to execute arbitrary code. Patches for…
Global Security News
ConnectSecure helps MSPs automate Microsoft 365 security remediation
ConnectSecure has announced that Microsoft 365 Auto Remediation and AI-powered Training Assessments are now live on the ConnectSecure platform. The capabilities help managed service providers (MSPs) address supported M365 security findings, create and measure assessments, support client training and strengthen security posture from one platform. The launch advances ConnectSecure’s focus on proactive, unified protection for…
Global Security News
Domain Security Plus BlackHat USA 2026 Interviews from Balance Theory and WiCyS – Ihab Shraim, Greg Baker, Lynn Dohm – BSW #460
Global Security News
4 gaps slowing AI in enterprise SOCs
Artificial intelligence (AI) has quickly become a strategic priority for enterprise security teams. Yet despite growing investment in AI-driven security software, many enterprise SOCs are struggling to translate AI into measurable operational improvements. The issue isn’t whether AI belongs in the SOC. It does. The challenge is that many organizations are approaching AI adoption in…
Global Security News
CBTS brings continuous penetration testing to enterprise security
CBTS has launched Penetration Testing as a Service (PTaaS), combining autonomous penetration testing with security expertise to help organizations continuously identify exploitable risks, validate attack paths, and prioritize remediation as their environments evolve. Cloud environments, SaaS applications, connected systems, third-party relationships and AI systems are expanding enterprise attack surfaces faster than traditional testing cycles can…
Global Security News
Crytica’s RDAi detects OT device tampering from within
Crytica Security has developed a patented solution that delivers rapid, deterministic threat detection for operational technology (OT), protecting the embedded systems and connected devices that underpin critical infrastructure, national security, and healthcare without disrupting operations. The need is becoming increasingly urgent as cybersecurity moves toward machine speed. IBM’s Cost of a Data Breach Report 2026…
Global Security News
Chrome’s anti-abuse protections block 7 billion unwanted Android notifications daily
Google Chrome’s latest measures against abusive web push notifications include automatically revoking notification permissions for inactive and suspicious websites, helping reduce scams, phishing attempts, and other deceptive content. Abusive notifications (Source: Google) Chrome revokes notification permissions for websites users have not recently interacted with and for sites that Google Safe Browsing identifies as engaging in…
Global Security News
Kimwolf v7 Hides DDoS Traffic Behind Chrome Fingerprints and Ethereum
Kimwolf v7: The Android TV Botnet That Now Hides Its Traffic Behind Chrome Fingerprints and Ethereum Palo Alto Networks Unit 42 discovered Kimwolf v7 on February 3, 2026, while hunting threats following public disclosures of the botnet’s earlier activity. The new version substantially upgrades the DDoS capabilities and command infrastructure of a botnet that has…
Global Security News
The AI harness is the new attack surface
Ask a security researcher what makes an AI agent dangerous, and the instinct is to talk about the model — what it will and won’t refuse, how easily it can be jailbroken, whether its weights can be trusted. That instinct is increasingly out of date. A growing body of security research — exploit demonstrations, independent…
Global Security News
Weekly Update 516: Live From Vietnam
A little wind noise, a little connectivity flakiness, and a little lip-sync issues from YouTube, but look at that view! 🤩 Back to business, it’s the Brinks Home FAQ I found most interesting this week. I mean, how do you write your own FAQ then fail to actually answer most of the questions?! Being conscious…
Global Security News
Microsoft Fixes 400 Flaws on August Patch Tuesday
Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday
Global Security News
ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch
Chaotic Eclipse released a PoC for ShieldBreak, a Microsoft Defender zero-day that bypasses the CVE-2026-50656 patch and could enable SYSTEM-level code execution. Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse, released a PoC for ShieldBreak, a Microsoft Defender zero-day. The flaw bypasses the patch for CVE-2026-50656 (RoguePlanet), a race condition that…
Global Security News
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases sat on PyPI for about 40 minutes in March carrying credential-stealing code capable of harvesting cloud keys, SSH keys, Kubernetes tokens, database passwords, and other secrets from systems that installed them. Threat intelligence firm CloudSEK now says a dataset it obtained, built from roughly 434,000 files the attackers captured, maps potential…
Global Security News
Intelligence-Driven SOC: Modernizing Threat Monitoring and Detection Engineering for Ultimate MTTR Reduction
Threat monitoring serves as the vital connective tissue of modern security operations. It ensures that every function from triage to response operates effectively. To meet evolving threat challenges, SOC teams and MSSPs must transition from simple log collection to a proactive, intelligence-driven framework. ANY.RUN’s Threat Intelligence provides the essential solutions to power this transformation across…
Global Security News
Split-second deepfake glitch blows digital certificate fraudster’s cover
Spanish police have arrested a man in Murcia accused of using deepfake software to trick a certificate provider’s video identity checks in an attempt to obtain digital signatures he could use for financial fraud. According to the police, the man made 38 attempts using this method on more than 30 citizens. Police haven’t said how…
Global Security News
Seedance 2.5 on Artlist: What Creators Can Expect From the New AI Video Model
AI video generation is moving beyond short experimental clips. Creators now expect these tools to handle more than a simple text prompt and a few seconds of animation.
Global Security News
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud (Data Hub Adapter) that could result in arbitrary code execution. The vulnerability, assigned the CVE identifier CVE-2026-58231, is rated 10.0 on the CVSS scoring system. It has been described as a case of insufficient authorization checks and input validation. “SAP Commerce Cloud…
Global Security News
17 old software bugs that took way too long to squash
In 2021, a vulnerability was revealed in a system that lay at the foundation of modern computing. An attacker could force the system to execute arbitrary code. Shockingly, the vulnerable code was almost 54 years old — and there was no patch available, and no expectation that one would be forthcoming. Fortunately, that’s because the…
Global Security News
Microsoft Patch Tuesday for August 2026 Fixed a Zero-Day and Wormable RCE
Microsoft Patch Tuesday for August 2026 fixes 398 CVEs, including an actively exploited zero-day and a wormable DNS flaw enabling remote code execution. Microsoft released its Patch Tuesday security updates for August 2026 on Tuesday, covering 398 new CVEs across Windows, Office, Azure, Exchange Server, SharePoint, Teams, GitHub Copilot, .NET, and a range of other…
Global Security News
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has released a proof-of-concept (PoC) for a new Microsoft zero-day called ShieldBreak. The vulnerability, rooted in Microsoft Defender for Windows, demonstrates a patch bypass for CVE-2026-50656 (CVSS score: 7.8), otherwise known as RoguePlanet. RoguePlanet has been described
Global Security News
Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS
Cisco has warned that a new vulnerability impacting Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software has been exploited in the wild. The high-severity flaw, tracked as CVE-2026-20349 (CVSS score: 8.6), is a case of insufficient error checking when processing HTTP requests that could allow an unauthenticated, remote attacker…
Global Security News
Post-quantum migration gets harder when every user holds a key
In this Help Net Security interview, Christopher Smith, CEO of Quantus, discusses what cryptographic inventories turn up in banks and hospitals, including default passwords and admin keys still held by former employees. He explains where post-quantum key sizes break old size assumptions in IPsec, SSH, TLS and libp2p, why migrating user keys makes blockchains hard…
Global Security News
Microsoft’s August Patch Tuesday: 398 flaws, 3 zero-days, and one North Korea got to first
Tenable called it on Tuesday: the afd.sys zero-day looked like nation-state work. The same day, Check Point named the group. It was Lazarus, and the exploit had been live for…
Global Security News
PentestGPT: Open-source automated penetration testing agentic framework
PentestGPT is an open-source penetration testing agent that points a large language model at a target and lets it work. In its default mode it runs recon, then exploit, then walkthrough, each stage feeding the next. Switch it to pentest mode and the stages become asset discovery, vulnerability identification, report. No human sits in the…
Global Security News
338 million attack simulations reveal the state of enterprise defense
First, a bit of good news: Enterprise defenses are recovering. However, it’s a narrow recovery, with a twist. Today, organizations are better at stopping loud attacks but have barely moved the needle at all against the quiet ones. This data, and a lot more, comes straight from the newly published Blue Report 2026, the fourth…
Global Security News
Can Charter Buses Travel Across State Lines? Complete Guide for Group Trips
In this post, I will answer the question – can charter buses travel across state lines? Traveling with a large group often requires a transportation option that is comfortable, reliable, and cost-effective. Many people planning school trips, corporate events, sports tournaments, family reunions, church outings, or sightseeing tours wonder whether charter buses are allowed to…
Global Security News
Ready-made $500 kit puts a crypto scam within anyone’s reach
A seller on a cybercrime forum is offering a ready-made scam kit for $500, complete with an admin panel that tracks victims, checks their crypto wallets for value, and inflates fake balances to squeeze out more money, Malwarebytes found. Researchers discovered the scam project on May 16 and described it as an example of how…
Global Security News
AI deployments are stretching enterprise security to its limits
CISOs and CTOs expect AI deployments to increase their organizations’ attack surface by an average of 14% over the next year. Nearly all lack visibility into AI deployments, and 90% are concerned about employees using unapproved AI tools outside formal oversight, according to NetFoundry’s 2026 State of Secure AI Access survey. Key aspects of AI…
Global Security News
What Makes a Board Meeting Record Useful Five Years Later?
Most board minutes are written for the meeting that has just happened. The useful ones are written with a second audience in mind: the person trying to understand the decision…
Global Security News
Metabase SQLi exploit grants attackers total access
Business intelligence (BI) platform provider Metabase has disclosed a zero-day SQL Injection vulnerability, warning that customers’ sensitive credentials, tokens, API keys, and other data may have been exposed. The Metabase vulnerability revealed on August 6, designated CVE-2026-72898, is identified as critical, with a severity score of 10, the highest possible rating. It is present in…
Global Security News
SUSE Partners with Centorrino Technologies to Replace VMware Across Enterprise Infrastructure
New partnership offers Australian enterprises a cost-effective virtualisation path, after Centorrino Technologies CT avoided significant cost increases on its own…
Global Security News
ISC Stormcast For Wednesday, August 12th, 2026 https://isc.sans.edu/podcastdetail/10048, (Wed, Aug 12th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Global Security News
The Datamaxxers Feeding Their Every Health Move to AI
From marathon training to tracking office angst, health obsessives are linking their data to chatbots to build hyperpersonalized coaches.
Global Security News
Overcoming Smart Device Integration Challenges
In this post, I will talk about overcoming smart device integration challenges. Smart homes rarely fail because people buy the wrong gadget. More often, they struggle because the home ends up acting like a collection of tiny digital islands. One app controls the lights. Another runs the thermostat. A third handles cameras. Then a voice…
Global Security News
What is the Digital Personal Data Protection Act and Who Does It Apply To?
In this post, I will answer the question – what is the digital personal data protection act and who does it apply to? It’s not news that there’s an increase in reliability on digital information. We live in an era of rapid digitization of data. Our personal, organisational, healthcare, educational and financial identity exists online.…
Global Security News
One in three ANZ organisations still pay ransomware demands. Many don’t get their data back
New Commvault research finds many organisations are still making short term ransomware decisions instead of building long term cyber resilience.
Global Security News
KnowBe4 Releases Free Cybersecurity Awareness Month Resource Kit
New “Secret Agent” themed campaign-in-a-box equips organisations with training module and tabletop exercises to educate employees to combat cybercrime
Global Security News
Custom AI Chatbot Development – Everything You Need to Know
In this post, I will talk about custom AI chatbot development. Everyone seems to want a chatbot these days. The market backs that up, with projections putting global chatbot spending well past 27 billion dollars by the early 2030s. But there’s a catch most people miss. A generic bot pulled off a shelf and a…
Global Security News
95% of Enterprises Have Delayed AI Projects as Infrastructure Limitations Spark “The Great AI Re-Architecture,” New Cloudera Report Finds
Organisations are fundamentally redesigning data architectures to support trusted, scalable AI across hybrid environments.
Global Security News
Why Wall Street and Nvidia Are Building an Exotic Money Pipeline for the AI Boom
Executives involved are hailing it as a new asset class, but critics have concerns about using chips as collateral.
Global Security News
Google says Chrome cuts 7 billion unwanted Android notifications a day to fight abuse
Google says Chrome’s anti-abuse systems reduced unwanted notifications on Android by more than 7 billion per day during the first quarter of 2026. […]
Global Security News
Superloop backs girls in STEM with its first Colombo digital learning lab
More girls in Colombo will have hands-on access to technology after Superloop opened the Superloop Future Minds Lab at Anuruddha Balika Vidyalaya, a girls’ school, on Tuesday 4…
Global Security News
Macquarie Cloud Services signs Microsoft Azure Datacentre Optimisation agreement
Three-year agreement supports Macquarie Cloud Services’ Azure growth and helps Australian organisations modernise with confidence
Global Security News
Patch Tuesday August 2026: A zero-day WinSock driver hole under exploit, and a maximum severity SAP vulnerability
A currently exploited zero-day elevation of privilege vulnerability that needs to be patched in a Windows driver for WinSock is the highlight of the 398 fixes issued today in Microsoft’s August Patch Tuesday releases. The hole is in Windows’ Ancillary Function Driver for WinSock (CVE-2026-68820), which, according to Todd Schell, principal product manager at Ivanti,…
Global Security News
HID, Soloinsight and CTS Introduce Integrated Self-Service Visitor Check-In Kiosk for Global Enterprises and Critical Infrastructure
Kiosk combines HID document authentication and facial recognition with Soloinsight’s CloudGate visitor management system to deliver identity assurance across the visitor lifecycle
Global Security News
Equinix Launches Managed Solutions in Australia
New service helps organisations address IT skills shortages, reduce infrastructure complexity, and optimise technology costs
Global Security News
Kimwolf botnet rebuilt to survive takedowns, researchers say
The developers of a notorious botnet that’s powered mostly by hijacked Android TV boxes and other internet-connected devices have released a new version built to blend attack traffic in with ordinary web browsing and to keep its command channels from being seized by law enforcement, researchers at Palo Alto Networks said in a report published…
Global Security News
Atturra Supports Invercargill City Council Go Live With Cloud-Based TechnologyOne HR and Payroll Platform
Approximately 550 employees were part of the first live payroll as the Council replaced legacy systems and advanced its wider Our Council transformation programme.
Global Security News
New Research From Workiva Reveals One in Four Executives Say AI Errors Have Reached External Audiences or Boards
Although 84 per cent of executives are at least somewhat confident in AI output without human review, only 11 per cent believe their data quality is sufficient for AI use
Global Security News
Delta Air Lines investigates rogue Wi-Fi network on flight from DEF CON
The unauthorized network, named “Delta WiFi Fast,” was reportedly created by passengers attending the DEF CON hacker conference.
Global Security News
Wesco investigates cybersecurity incident after data extortion group claims breach
Wesco confirmed the incident involves its cloud CRM environment and stated that it is working with its vendor.
Global Security News
ExfilSquad targets 13 organizations, uses torrents for data distribution
The group, which extorts victims by threatening to publish stolen data rather than using ransomware, has expanded its operations, according to a recent report by Resecurity.
Global Security News
Cybercriminal caught after face-changing software glitch exposes identity
The unnamed man targeted a security company authorized to issue digital certificates, a process crucial for online authentication and legally recognized electronic signatures in Spain and other EU countries.
Global Security News
Federal judge issues second order blocking Trump mail-in voting directive
A federal judge has issued a second injunction preventing the United States Postal Service from carrying out President Donald Trump’s executive order focused on mail-in voting. Judge Indira Talwani had previously ruled that the White House order, which would have essentially placed the federal government in charge of deciding which voters in each state would…
Global Security News
Zoom zero-click RCE flaws allow attackers to compromise meeting participants
Zoom has fixed four vulnerabilities across its applications, including two that could allow attackers who join a meeting to execute malicious code on the systems of all other meeting participants with no interaction required from them. Three of the vulnerabilities affect all Zoom client applications for all platforms before versions 7.1.5 and 7.0.6, while the…
Global Security News
Recorded Future’s Insikt Group reveals 44% increase in high-impact CVE vulnerabilities in July
Recorded Future’s Insikt Group® has released its latest CVE report for July 2026, which identifies 85 high-impact vulnerabilities that ANZ organisations should prioritise for…
Global Security News
Microsoft Patch Tuesday for August 2026 — Snort rules and prominent vulnerabilities
Microsoft has released its monthly security update for August 2026, which includes 421 vulnerabilities affecting a range of products, including 62 that Microsoft marked as “critical.” Microsoft notes that 1 of the vulnerabilities disclosed this month have been exploited in the wild CVE-2026-68820 is an elevation of privilege vulnerability affecting Windows Ancillary Function Driver for WinSock. A Use After…
Global Security News
Delta Airlines Investigates Rogue Wi-Fi Attack on Flight Carrying DEF CON Attendees
Passengers on a Delta flight from Las Vegas to Atlanta experienced a disruption when an unauthorized Wi-Fi network prompted the crew to temporarily disable onboard Wi-Fi. Delta is now investigating the incident, which occurred on Flight 591 carrying passengers returning from the DEF CON 34 cybersecurity conference. “Incidents like this are a reminder that convenience…
Global Security News
DeadLock ransomware uses blockchain to resist infrastructure takedown
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity. […]
Global Security News
Process cooling just became an OT Security problem for Australian manufacturers
In late 2019, security researchers disclosed two critical flaws in Rittal’s SK 3232-series chillers, the units that cool server rooms, comms rooms, and process equipment in…
Global Security News
Landing Zone Accelerator Independent Assessment Report for C5:2020 now available on AWS Artifact
Organizations operating in Germany and across Europe increasingly need to demonstrate cloud security compliance under the Cloud Computing Compliance Criteria Catalogue (C5:2020), published by Germany’s Federal Office for Information Security (BSI). Last year, we introduced Landing Zone Accelerator on AWS support for digital sovereignty and today we’re announcing the availability of a new independent assessment…
Global Security News
Microsoft’s Patch Tuesday Deluge Continues With August Updates
Security experts say prioritization should be the main focus for the August updates, not the massive CVE volume.
Global Security News
Microsoft Plugs Nearly 400 Security Holes
Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today. Image: Shutterstock, Mallika Home Studio. August’s overstuffed bundle of patch joy from Microsoft did not eclipse its…
Global Security News
OpenAI Gives Approved Security Providers Access to Advanced Daybreak Cyber Models
Cybersecurity teams can run into an awkward problem with AI. Legitimate defensive work can resemble the same activity a model is trained to restrict. OpenAI is addressing that problem by expanding Daybreak with two access tiers for approved defenders. Blue supports common defensive workflows, while Red provides access to specialized models for advanced, authorized security…
Global Security News
Mamdani Takes on Amazon in New Battle Over New York’s Delivery Workers
A city council bill backed by the mayor would require big delivery operators to directly employ couriers instead of relying on subcontractors.
Global Security News
Why software factories are back – and how they work in the age of AI
Imagine submitting your vibe-coded app to a service that validates, tests, and then mass-produces it in a repeatable, automated fashion for delivery to a wide audience.
Global Security News
Microsoft SharePoint Server bug exploited in ransomware attacks
CISA gave no specifics, but one expert said it’s potentially the work of China-linked Storm-2603.
Global Security News
Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA
The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.
Global Security News
Sandworm hackers target IT pros with trojanized WireGuard VPN client
Hackers associated with the Russian threat group Sandworm have been targeting system administrators and IT professionals through fake job offers since at least May. […]
Global Security News
Squirrel Soup, Ghostjacking, OpenSource, Gunra, Beesafe, AI threats, SBOMS, and more – SWN #606
Global Security News
How to create flyers with AI that people won’t hate: 8 tips (and prompts) that really work
Most AI flyers are still a mess, but the right prompts can make all the difference.
Global Security News
Fake CCleaner installs GhostDesk Chrome spyware
A fake version of the popular PC cleaning tool CCleaner is being used to infect Windows users with a malicious Chrome extension called GhostDesk, which acts as spyware inside the browser. With more than 2 billion downloads worldwide, CCleaner is one of the best-known Windows utilities, making it an attractive target for cybercriminals looking to…
Global Security News
CoreWeave Reports New Revenue High of $2.6 Billion as Sales Backlog Grows
Mounting order book of $104 billion shows strong demand for cloud computing despite infrastructure challenges and AI-bubble fears.
Global Security News
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That patch goes out…
Global Security News
Anthropic to watermark AI-generated content
Anthropic will begin labeling AI-generated content created by Claude, Claude Code, and the company’s API, as well as Claude models via third-party services, according to The Register. Text generated by future Claude models will be given an invisible watermark. According to Anthropic, the watermark is embedded directly into the generated text without affecting its meaning…
Global Security News
Cisco warns of ASA and FTD VPN flaw exploited to crash devices
Cisco is warning that a high-severity denial-of-service vulnerability in Secure Firewall ASA and Threat Defense (FTD) software is being actively exploited in attacks to remotely crash affected devices. […]
Global Security News
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing
Cybersecurity researchers have discovered a new version of the Kimwolf/AISURU Android and Internet of Things (IoT) botnet that comes with significant improvements to improve its operational resilience and conduct distributed denial-of-service (DDoS) attacks. The new version, tracked as Kimwolf v7, was discovered by Palo Alto Networks Unit 42 in February 2026. “Kimwolf v7 adds an…
Global Security News
What AI Agent Incident Response Actually Controls
Global Security News
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee’s Client
Anyone sharing their screen on a Zoom call could have taken over the computers of everyone watching, and anyone watching could have taken over the presenter’s. The flaw sat in the annotation tool, the feature that lets participants draw and type on a shared screen, and it asked nothing of the victim beyond being in…
Global Security News
Summer 2026 SOC 1 report is now available with 185 services in scope
Amazon Web Services (AWS) is pleased to announce that the Summer 2026 System and Organization Controls (SOC) 1 report is now available. The reports cover 185 services over the 12-month period from July 1, 2025–June 30, 2026, giving customers a full year of assurance. These reports demonstrate our continuous commitment to adhering to the heightened…
Global Security News
Suspected Phishing Sites Use Valid TLS Certificates to Mimic WhatsApp and Instagram
A new phishing campaign is making fake websites look trustworthy by giving them the same HTTPS security signal people usually associate with legitimate sites. Security researchers at Clandestine said they identified newly activated phishing and interface-cloning infrastructure that appears designed to target customers of high-value brands, with a primary focus on WhatsApp and Instagram. According…
Global Security News
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threat actors targeting IT workers in the country by masquerading as recruiters to trick them into installing malware. CERT-UA pinned the activity on a threat cluster it tracks as UAC-0145, which is a subgroup…
Global Security News
Delta probes Wi-Fi deauth attack on flight carrying DEF CON attendees
Delta Air Lines is investigating an unauthorized Wi-Fi network that appeared aboard a flight from Las Vegas to Atlanta carrying passengers who had attended the DEF CON hacker convention. […]
Global Security News
Critical Patches Issued for Microsoft Products, August 11, 2026
Multiple vulnerabilities have been discovered in Microsoft products, the most severe of which could allow for remote code execution. Successful exploitation of the most severe of these vulnerabilities could result in an attacker gaining the same privileges as the logged-on user. Depending on the privileges associated with the user, an attacker could then install programs;…
Global Security News
How to Build an AI Security Program
Global Security News
Windows 10 KB5120249 cumulative update released with fixes
Microsoft has released Windows 10 KB5120249 cumulative update for versions 22H2 and 21H2 to fix security vulnerabilities and bugs. […]
Global Security News
CEVA Logistics Breach Triggers Customer Data Alerts Across Europe
A cyberattack at CEVA Logistics is now surfacing in customer notices across Europe. CEVA said the intrusion affected part of its European contract-logistics operation, including eight warehouses. Several clients have since notified customers that information held by CEVA may have been accessed. Client notices are beginning to clarify which organizations and data types were affected.…
Global Security News
Microsoft August 2026 Patch Tuesday fixes 400 flaws, 3 zero-days
Today is Microsoft’s August 2026 Patch Tuesday, and with it comes security updates for a massive 400 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. […]
Global Security News
OpenAI, Anthropic, and Meta AI Breaches Shared the Same Testing Vendor
A shared security-testing vendor may explain why AI models from OpenAI, Anthropic and Meta all reached systems they were never supposed to access. CNBC reported that the three incidents involved Irregular, an Israeli security firm that evaluates the offensive capabilities of advanced AI models. In the affected tests, configuration weaknesses reportedly gave the models pathways…
Global Security News
Microsoft’s August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)
42Critical 355Important 1Moderate 0Low Microsoft addresses 398 CVEs in the eighth Patch Tuesday of 2026, with three zero-days, including one that was exploited in the wild. Microsoft patched 398 CVEs in its August 2026 Patch Tuesday release, with 42 rated critical, 355 rated as important and one rated as moderate. Our counts omitted two CVEs…
Global Security News
Delta investigates in-flight Wi-Fi spoofing on post-DEF CON flight from Las Vegas
Delta Airlines said Tuesday it’s investigating an incident on a Monday flight where a passenger reportedly used an unidentified device to spoof the airline’s in-flight Wi-Fi network, leading to severe delays and authorities to board the plane once it arrived at its destination. Various posts on several social media networks went viral early Tuesday detailing…
Global Security News
SmartBear CRO Sees Partner Growth in AI Software Quality
SmartBear CRO Dave Phillips says the rapid adoption of AI-assisted coding is creating new software quality, testing, and API governance challenges for enterprises — and new services opportunities for channel partners. As development teams ship code faster with AI tools, many organizations are struggling to modernize testing and governance at the same pace. Phillips told…
Global Security News
Enterprise AI Agent Adoption Hinges on Guardrails, Caylent Finds
Ninety-eight percent of enterprise leaders would allow AI agents to autonomously make changes in production environments, provided the right safeguards are in place, according to Caylent’s newly published 2026 Enterprise Readiness for Agentic Engineering & Autonomous Cloud Operations report. The findings also suggest agentic AI is moving beyond experimentation, with 59.5% of respondents reporting that…
Global Security News
Microsoft Patch Tuesday August 2026, (Tue, Aug 11th)
This month we got patches for 418 vulnerabilities. Of these, 62 are critical, 1 is being exploited in the wild, and 2 were publicly disclosed as zero-days. Notable fixes include Windows privilege escalation, container tampering, and critical QUIC and DNS Server remote code execution bugs. A few vulnerabilities worth mentioning: Windows Ancillary Function Driver for…
Global Security News
C Spire Earns Three ISO Certifications for Managed Services
C Spire has earned three International Organization for Standardization certifications simultaneously, completing its first audit with zero nonconformities as the managed services provider strengthens its security, service management, and quality standards for customers in regulated industries. These certifications verify that C Spire’s management system “meets rigorous, internationally recognized standards for quality, security, and reliability.” The…
Global Security News
From the Edge to the Core: 9 Ways PKI Secures Your Network
Explore public key infrastructure (PKI) use cases for securing sensitive network resources against external and internal threats from unauthenticated users What’s the first thing that comes to your mind when… The post From the Edge to the Core: 9 Ways PKI Secures Your Network appeared first on InfoSec Insights.