> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals several pressing threats and trends. The UK's National Cyber Security Centre (NCSC) warns of impending AI-powered attacks on critical infrastructure, emphasizing the need for improved resilience against vulnerabilities. A resurgence of supermarket fridge attacks has compromised over 100 stores across Europe, indicating the ongoing risk of IoT device exploitation. Additionally, the NIS2 directive holds board members accountable for access control decisions, underscoring a shift towards greater corporate responsibility in cybersecurity. Meanwhile, a critical vulnerability in Siemens IoT2050 devices and an unpatched flaw in a CryptoPayment Gateway plugin are actively being exploited by attackers. Lastly, a dismantled botnet involving 1.3 million compromised Android TV boxes highlights the ongoing issues with malicious software proliferation.
|
// AI-powered summary generated at 08:00
The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.
The post Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure appeared first on SecurityWeek.
German and Brazilian police dismantled an international bank fraud ring blamed for a €30 million cyberattack on a German financial institution, arresting four people in Brazil and pursuing three more suspects in Spain and Bulgaria. Brazilian police named the operation “Klonen.” On August 13, agents...
A seller claims 1.7M McDonald’s employee records were stolen from Azure. An 8,000-row sample appears genuine, but its age and full size remain unconfirmed. A seller on a data-trading forum posted an 8,000-row sample this week claiming it came from McDonald’s own Azure tenant, part of a supposed 1.7...
Cybersecurity researchers have attributed the exploitation of a newly patched security flaw in Broadcom VMware vCenter to a suspected China-nexus advanced persistent threat (APT).
The attacks involve the exploitation of CVE-2026-59310 (CVSS score: 9.8), a severe directory-traversal vulnerability in...
On this week's episode of The Reg's Kettle podcast, we revisit 'hacker summer camp,' where the hottest topic was ... sigh... agentic AI
Flashpoint data reveals infostealers were responsible for taking 1.7 billion credentials in the first half of 2026
Akira attackers used Safe Mode to disable EDR before deploying ransomware, but memory issues caused the encryptor to fail. An Akira ransomware affiliate broke into a company through an MFA-less SonicWall VPN on August 4, stole credentials and file shares, and then rebooted the compromised host into...
A list of topics we covered in the week of August 10 to August 16 of 2026
A threat actor is claiming the exfiltration of millions of records from McDonald’s, TCS, Vodafone, and other large organizations.
The post Fortune 500 Companies Hit in Azure Data Theft Campaign appeared first on SecurityWeek.
Researchers from the University of Birmingham and Durham University have found a way to knock down some of the toughest protections in Windows 11 without physically opening or modifying the target machine. The attack assumes the attacker has already gained privileged access to the system. A chip tha...
Hazmat is an open-source tool that runs AI coding agents inside a separate account on your own machine. It wraps the harnesses people use: Claude Code, Codex, OpenCode, Cursor Agent, and several more, plus any script you write yourself. An agent launched the ordinary way runs as you, which means it...
ScamNet: Anti-Scam Suite is a consumer security app from Synaptrex Technologies that helps users detect and block scams involving phone calls, text messages, websites, and other suspicious content. The app is available for iPhone, iPad, and Mac, with features varying by platform. Call protection is...
Companies that provide specific evidence of how they use AI tend to record stronger revenue growth. Researchers at Carnegie Mellon University and Larridin examined a study universe of 564 companies across 12 industry sectors. Individual analyses used smaller samples depending on data availability. T...
A few days ago, a paper named “Stealing Reasoning Traces from Proprietary LLM APIs” was published. It describes a simple, yet super elegant way to recover encrypted LLM reasoning traces.
Naturally, I had to try it.
Background
AI labs like OpenAI and Anthropic send reasoning traces back and forth as...
Dealing with machine-made bug backlog makes it hard to find a moment to deliver promised subscription service
PLUS: HCL, TCS, admit data breaches; Google, Apple, India bans some rideshare tips; and more!
Euskal Moneta, l'association gérant la monnaie locale Eusko, a été victime d'une cyberattaque détectée le 17 août 2026. Les attaquants ont obtenu un accès important à l'infrastructure informatique, ce qui signifie qu'une consultation ou une copie de données personnelles des adhérents ne peut être to...
Outdated protocols, forgotten configurations, and legacy dependencies continue to create opportunities for attackers in modern environments. This research explores how NetNTLMv1 can still be leveraged today and how improvements in attack tooling are reducing the cost and complexity of exploiting it.