CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
Ravie LakshmananAug 18, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical...
Security
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
Swati KhandelwalAug 17, 2026Vulnerability / DevOps GitLab has released security updates to address a critical vulnerability impacting its Community Edition...
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
Ravie LakshmananAug 17, 2026Vulnerability / Website Security A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin...
How MCP Servers Can Expose Enterprise Secrets
The Hacker NewsAug 17, 2026AI Security / Identity Security MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned...
US Courts To Begin Publishing Spyware Records From 2029
The government’s spyware playbook has had one big problem for the public: there has been no reliable count of how...
France’s Top Court Blocks Under-15 Social Media Ban
France’s plan to block children under 15 from social media has hit a constitutional roadblock. The Constitutional Council on Friday...
Apple Mac Malware Lets Attackers Control Browser Sessions After Infection
A routine-looking download can turn into a much bigger problem for Mac users. Jamf Threat Labs found an AmnesiaStealer campaign...
Nearly 700,000 French Taxpayer Records Reportedly Stolen in Government Cyberattack
France’s Finance Ministry has confirmed that a cyberattack on the country’s tax authority resulted in the theft of personal and...
Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus...
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
Ravie LakshmananAug 15, 2026Vulnerability / Cloud Security A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts....
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency...
WhatsApp Begins Limited Test of AI Scam Alerts for Unknown Senders
WhatsApp is adding a new layer of protection that could stop some scams before users even respond. WhatsApp is rolling...
Microsoft Plans to End SMS and Voice Authentication for Entra ID
Microsoft reportedly plans to phase out SMS and voice authentication for Microsoft Entra ID users, pushing organizations toward passkeys and...
Google Says Chrome Cut 7 Billion Unwanted Android Notifications Per Day
Seven billion unwanted notifications a day is a lot of noise to cut from Android devices. Google says Chrome reduced...
Singapore Is Literally Training People to Get Scammed
Singapore has decided that one way to teach people how not to fall for scams is to let them experience...
