Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Swati KhandelwalAug 06, 2026OT Security / Vulnerability Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit...
found
Leaked n8n API Tokens Exposed Live Instances to Credential Theft
GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could...
Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting...
Vulnerabilities in Car Anti-Theft Device
Vulnerabilities in Car Anti-Theft Device This is disturbing: …a team of security researchers at UC San Diego, who found that...
Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot
Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied...
AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers
Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code,...
Australia’s Teen Social Media Ban Exposes Age Verification Gap
Australia’s under-16 social media ban has a loophole: the honor system. A Reuters-reported study found that major platforms did not...
Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap
Attackers found a Microsoft 365 sign-in path that many MFA policies were not watching. A password spray campaign targeting Azure...
Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages
Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently install...
Meta reuses old RAM in new servers with custom bridge chip
With the cost of new RAM soaring, Meta has found a thrifty way to reuse older memory in newer servers....
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an...
Microsoft Uncovers Widespread Hotel Phishing Campaign in Japan
Fake guest complaints are turning into a security trap for hotels in Japan. Microsoft found phishing emails using room complaints...
AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks
Two researchers have found six security flaws in AirDrop and Quick Share, the wireless features that beam files between nearby...
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
Swati KhandelwalJun 29, 2026Browser Security / Web Security Microsoft has found a malicious Chrome extension that posed as the AI...
Threat Actors Abuse claude.ai Shared Chat for ClickFix Malvertising Campaign
TrendAI™ Research monitoring found weekly campaigns since April 8, with each week introducing new pages, keyword, and geographic targeting. Wave...
