Microsoft Plugs Nearly 400 Security Holes
Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including...
Security
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
Swati KhandelwalAug 11, 2026AI Security / Cyber Attack A malicious tool server connected to an AI coding assistant can quietly...
Sophos Working with OpenAI on security from AI, with AI, and for AI
The Sophos AI Security 2026 report, released last month, just showed us the current state of AI-enhanced cyberattacks: Timelines are...
Klaviyo Sign-Up Bug May Have Exposed Passwords to Ad Trackers
Klaviyo has fixed a website configuration bug that may have exposed new customers’ sign-up data, including passwords, to third-party trackers...
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
Ravie LakshmananAug 10, 2026Cybersecurity / Hacking A lot of security problems still begin with someone doing a completely normal thing....
77 Counterfeit Open VSX Extensions Collected Developer and CI/CD Data
Seventy-seven counterfeit extensions appeared on Open VSX between July 26 and Aug. 1, impersonating legitimate Visual Studio Code Marketplace tools...
Fake The Odyssey Downloads Are Hiding Password-Stealing Malware
Cybercriminals are exploiting interest in The Odyssey to distribute Lumma Stealer through fake movie downloads. Bitdefender researchers identified malicious files...
Meta Ordered to Pay $567M and Overhaul Teen Safety on Facebook, Instagram
Meta’s latest legal headache comes with a $567 million price tag and a five-year to-do list for Facebook and Instagram....
Samsung’s August Update Patches 56 Security Vulnerabilities Across Galaxy Devices
Samsung is starting August with a security sweep that patches dozens of flaws across Galaxy phones and tablets. The company...
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
Swati KhandelwalAug 08, 2026Email Security / Vulnerability New research shows content inside an email can escape its message boundary and...
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Ravie LakshmananAug 08, 2026Zero-Day / Vulnerability Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data...
Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts
Ravie LakshmananAug 08, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity...
OnePlus 10T Is Out of Security Support: Should You Keep Using Yours?
The OnePlus 10T has reached the end of its guaranteed security-support window, but that does not mean owners need to...
15 AI Security Lessons From Black Hat and Ai4 2026
On July 29, 2026, Kiteworks published the 2026 Data Security and Compliance Risk: Annual Survey Report, a survey of 459...
Google Begins Restoring Blogger Sites After False Malware Alerts
Google’s effort to keep malware off Blogger briefly ended up locking out legitimate publishers instead. Beginning Tuesday, August 4, hundreds...
