Samsung’s August Update Patches 56 Security Vulnerabilities Across Galaxy Devices
Samsung is starting August with a security sweep that patches dozens of flaws across Galaxy phones and tablets. The company...
that
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication
Ravie LakshmananAug 08, 2026Zero-Day / Vulnerability Metabase has warned that a maximum-severity security flaw impacting its business intelligence and data...
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution – Patch ASAP
WordPress has fixed a pre-authentication reflected cross-site scripting (XSS) flaw in its login screen that affects every version of the...
OnePlus 10T Is Out of Security Support: Should You Keep Using Yours?
The OnePlus 10T has reached the end of its guaranteed security-support window, but that does not mean owners need to...
Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
Swati KhandelwalAug 07, 2026Endpoint Security / Vulnerability Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in...
Enterprise passkey security under threat from malware
The Palo Alto report showed attacks that, it said, “demonstrate how malware on a compromised endpoint can misuse onboarding, recovery...
Fake IRS letters target cryptocurrency holders
Do you hold cryptocurrency? Have you received a letter telling you that you must register with a so-called "Digital Asset...
Vulnerabilities in Car Anti-Theft Device
Vulnerabilities in Car Anti-Theft Device This is disturbing: …a team of security researchers at UC San Diego, who found that...
‘Apple is one of the greatest companies of all time,’ says OpenAI
Apple’s complaint is more detailed than that. Among many other things, it claims Tan allegedly directed job candidates still at...
Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks
A credential-stealing npm worm that first appeared in keyv@6.0.0 spread beyond the Keyv and Cacheable namespaces into hundreds of packages...
Fake Adobe and Zoom Updates Install ScreenConnect for Persistent Remote Access
Cybersecurity researchers have disclosed details of an active, multi-wave campaign that employs social engineering lures themed around Adobe and Zoom...
When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted
The cybersecurity industry has spent decades assuming that offensive capability scales with technical expertise. That assumption is starting to break....
Gmail’s New Feature Warns You Before Revealing You Were BCC’d
One careless click on Reply All can reveal more than you intended, including the fact that you were never meant...
Why Apple’s Recent Crypto Lawsuit Should Worry Australian IT Leaders
Australian security teams that trust software marketplaces to vet software before it reaches employees’ phones or enters production pipelines are...
New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root
Swati KhandelwalAug 04, 2026Vulnerability / Database Security cPanel has patched a flaw that let an authenticated hosting customer execute SQL...
