UK AI tests found 19 unauthorized agent actions involving Anthropic and OpenAI models
AI agents crossed the line during cyber evaluation. The U.K.’s AI Security Institute (AISI) said it uncovered 19 instances of...
Security
AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day
Swati KhandelwalAug 07, 2026Web Security / Vulnerability PortSwigger says HTTP Terminator, an artificial intelligence (AI)-assisted research system built by James...
New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
Swati KhandelwalAug 07, 2026Network Security / Vulnerability Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network...
Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
Swati KhandelwalAug 07, 2026Endpoint Security / Vulnerability Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in...
ICE Is Buying Access to Credit Card Records
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Swati KhandelwalAug 06, 2026Virtualization Security / Linux Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges...
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs
Ravie LakshmananAug 06, 2026Network Security / Vulnerability Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst...
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Swati KhandelwalAug 06, 2026OT Security / Vulnerability Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit...
Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses
Ravie LakshmananAug 06, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool...
Apple Photos Privacy Case Advances, With Up to $32.5 Billion Alleged Exposure
Court clears path for multibillion-dollar Apple biometric privacy lawsuit. The iPhone maker is facing a potential $32.5 billion class-action lawsuit...
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Swati KhandelwalAug 06, 2026Database Security / Endpoint Security Attackers broke into an organization's Oracle database through a SQL injection flaw...
AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model
Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an...
Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells
Ravie LakshmananAug 06, 2026IoT Security / Malware Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least...
CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild
Ravie LakshmananAug 06, 2026Vulnerability / Enterprise Security A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come...
Apple Briefly Removes Telegram From App Store Over Reported CSAM Violation
Telegram briefly disappeared from Apple’s App Store after a child sexual abuse material violation, showing how quickly a moderation failure...
