Apple Warns Users in 110 Countries of Mercenary Spyware as iPhone Alerts Get Harder to Miss
Apple’s mercenary spyware warnings are getting harder to miss. The alerts now appear directly on the iPhone Lock Screen and...
Security
FBI Pegasus Records Expose a Blind Spot in US Spyware Oversight
Federal court records show the FBI went beyond simply testing commercial spyware as it considered how the technology could be...
One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
The Hacker NewsAug 18, 2026SaaS Security / Cloud Security A single piece of infrastructure has been pulling records out of...
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
Ravie LakshmananAug 18, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a critical...
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
Swati KhandelwalAug 17, 2026Vulnerability / DevOps GitLab has released security updates to address a critical vulnerability impacting its Community Edition...
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
Ravie LakshmananAug 17, 2026Vulnerability / Website Security A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin...
How MCP Servers Can Expose Enterprise Secrets
The Hacker NewsAug 17, 2026AI Security / Identity Security MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned...
US Courts To Begin Publishing Spyware Records From 2029
The government’s spyware playbook has had one big problem for the public: there has been no reliable count of how...
France’s Top Court Blocks Under-15 Social Media Ban
France’s plan to block children under 15 from social media has hit a constitutional roadblock. The Constitutional Council on Friday...
Apple Mac Malware Lets Attackers Control Browser Sessions After Infection
A routine-looking download can turn into a much bigger problem for Mac users. Jamf Threat Labs found an AmnesiaStealer campaign...
Nearly 700,000 French Taxpayer Records Reportedly Stolen in Government Cyberattack
France’s Finance Ministry has confirmed that a cyberattack on the country’s tax authority resulted in the theft of personal and...
Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus...
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
Ravie LakshmananAug 15, 2026Vulnerability / Cloud Security A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts....
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency...
WhatsApp Begins Limited Test of AI Scam Alerts for Unknown Senders
WhatsApp is adding a new layer of protection that could stop some scams before users even respond. WhatsApp is rolling...
