Zoom Zero-Click RCE: AI Helped Build an Exploit in Under 24 Hours
A critical Zoom vulnerability chain could have allowed an attacker to take control of another participant’s device simply by joining...
Cybersecurity
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks
Cybersecurity and intelligence agencies from South Korea and the U.S. warned of Gunra ransomware attacks targeting critical infrastructure sectors and...
Klaviyo Sign-Up Bug May Have Exposed Passwords to Ad Trackers
Klaviyo has fixed a website configuration bug that may have exposed new customers’ sign-up data, including passwords, to third-party trackers...
77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data
Seventy-seven counterfeit extensions appeared on Open VSX between July 26 and Aug. 1, impersonating legitimate Visual Studio Code Marketplace tools...
Fake The Odyssey Downloads Are Hiding Password-Stealing Malware
Cybercriminals are exploiting interest in The Odyssey to distribute Lumma Stealer through fake movie downloads. Bitdefender researchers identified malicious files...
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Ravie LakshmananAug 10, 2026Malware / Cybercrime Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named...
Samsung’s August Update Patches 56 Security Vulnerabilities Across Galaxy Devices
Samsung is starting August with a security sweep that patches dozens of flaws across Galaxy phones and tablets. The company...
Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
Ravie LakshmananAug 08, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity...
15 AI Security Lessons From Black Hat and Ai4 2026
On July 29, 2026, Kiteworks published the 2026 Data Security and Compliance Risk: Annual Survey Report, a survey of 459...
Google Begins Restoring Blogger Sites After False Malware Alerts
Google’s effort to keep malware off Blogger briefly ended up locking out legitimate publishers instead. Beginning Tuesday, August 4, hundreds...
UK AI tests found 19 unauthorized agent actions involving Anthropic and OpenAI models
AI agents crossed the line during cyber evaluation. The U.K.’s AI Security Institute (AISI) said it uncovered 19 instances of...
Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails
Cybersecurity researchers have called attention to an active "widespread email-driven phishing campaign" that employs adversary-in-the-middle (AitM) techniques to take control...
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories
Ravie LakshmananAug 06, 2026Hacking News / Cybersecurity News Apparently, opening the thing is now enough. A repo can run before...
Apple Briefly Removes Telegram From App Store Over Reported CSAM Violation
Telegram briefly disappeared from Apple’s App Store after a child sexual abuse material violation, showing how quickly a moderation failure...
Apple Challenges UK Demand For Access To Encrypted iCloud Data
Apple’s encryption dispute with the U.K. government is heading back into a legal forum. The company has challenged the U.K....
