Microsoft Defender’s Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point Research has disclosed a technique that uses Microsoft Defender's own legitimately signed boot-time remediation driver to perform arbitrary...
Hacking
Category Added in a WPeMatico Campaign
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Ravie LakshmananAug 21, 2026Malware / Automotive Security Cybersecurity researchers have flagged a new malware family that's specifically designed to infect...
Wazuh and AI For Enhanced SOC Workflows
Artificial Intelligence (AI) has become one of this decade's defining technologies. From healthcare and finance to manufacturing and education, organizations...
Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0
Ravie LakshmananAug 21, 2026Vulnerability / Enterprise Security Cisco has published another round of security updates for Crosswork platforms and Secure...
GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure
Ravie LakshmananAug 21, 2026Vulnerability / Enterprise Security A newly disclosed security flaw in GitLab has come under active exploitation within...
Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution
Ravie LakshmananAug 21, 2026Vulnerability / Threat Intelligence Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that...
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account...
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single out individuals working...
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More
Ravie LakshmananAug 20, 2026Hacking News / Cybersecurity News A lot of this week’s trouble starts with something trusted doing exactly...
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
The U.S. government on Wednesday warned of an "active threat" targeting critical infrastructure organizations in the country using artificial intelligence...
New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
Adversa AI has disclosed an attack technique that it says can cause xAI's Grok chatbot to send a user's name,...
Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
Ravie LakshmananAug 20, 2026Vulnerability / Application Security Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source...
Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
Ravie LakshmananAug 20, 2026Network Security / Enterprise Security Citrix has released updates to address two security flaws impacting NetScaler ADC...
Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
Ravie LakshmananAug 20, 2026Vulnerability / Email Security A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation...
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
Swati KhandelwalAug 19, 2026Cloud Security / Vulnerability Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked...
