FBI, NCAA Warn Hackers Are Targeting College Athletes’ Private Photos
The FBI and NCAA are teaming up to combat cyber-enabled sexual exploitation targeting college athletes as criminals break into online...
Security
Cloudflare Report Shows Massive Spike in High-Volume DDoS Attacks: Here Is What the Data Shows
The upper end of DDoS attacks is getting much bigger — and attacks that once looked exceptional are showing up...
US, South Korea Warn of Growing Gunra Ransomware Threat
Gunra ransomware has quickly grown from an emerging threat in South Korea into a broader international concern. U.S. and South...
Zoom Zero-Click RCE: AI Helped Build an Exploit in Under 24 Hours
A critical Zoom vulnerability chain could have allowed an attacker to take control of another participant’s device simply by joining...
Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws
Ravie LakshmananAug 12, 2026Vulnerability / Web Security Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce,...
SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code
Ravie LakshmananAug 12, 2026Enterprise Security / Vulnerability SAP has released patches to address a maximum-severity security flaw impacting Commerce Cloud...
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
Ravie LakshmananAug 12, 2026Zero-Day / Vulnerability The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and...
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
Swati KhandelwalAug 11, 2026Vulnerability / Windows Security Microsoft released its monthly security updates on Tuesday, and one of the flaws...
Microsoft Plugs Nearly 400 Security Holes
Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including...
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
Swati KhandelwalAug 11, 2026AI Security / Cyber Attack A malicious tool server connected to an AI coding assistant can quietly...
Sophos Working with OpenAI on security from AI, with AI, and for AI
The Sophos AI Security 2026 report, released last month, just showed us the current state of AI-enhanced cyberattacks: Timelines are...
Klaviyo Sign-Up Bug May Have Exposed Passwords to Ad Trackers
Klaviyo has fixed a website configuration bug that may have exposed new customers’ sign-up data, including passwords, to third-party trackers...
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
Ravie LakshmananAug 10, 2026Cybersecurity / Hacking A lot of security problems still begin with someone doing a completely normal thing....
77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data
Seventy-seven counterfeit extensions appeared on Open VSX between July 26 and Aug. 1, impersonating legitimate Visual Studio Code Marketplace tools...
Fake The Odyssey Downloads Are Hiding Password-Stealing Malware
Cybercriminals are exploiting interest in The Odyssey to distribute Lumma Stealer through fake movie downloads. Bitdefender researchers identified malicious files...
