Cybersecurity & AI News

AI security operations gain ground with Tenex

AI security operations gain ground with Tenex  SiliconANGLE

CVE-2026-70556

Hubzilla 11.2.1 CSRF via OAuth2 /authorize Endpoint App Registration

CVE-2026-65551

WordPress Breakdance plugin < 2.7 - Broken Access Control vulnerability

CVE-2026-66732

Sonic 3 A.I.R. Missing Source Address Validation in ConnectionManager

CVE-2026-66733

Sonic 3 A.I.R. Unbounded Memory Allocation DoS via ReceivedPacketCache

CVE-2026-19036

Shibby Tomato wanoptions sub_40F88C os command injection

CVE-2026-19037

WonderTrader Internal Limit Order Book Cache MatchEngine.cpp update_lob behavioral workflow

Agentic AI Security Market Size & Share Report, 2026-2033

Agentic AI Security Market Size & Share Report, 2026-2033  Grand View Research

One-wheeled AI security robot could patrol your property

One-wheeled AI security robot could patrol your property  Fox News

Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities

Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities.…

CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps

Coinspect has identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains. Introduced in the JavaScript…

Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses

Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool that can expose a user's real IP…

IRF - CISA

IRF - CISA  myservices.cisa.gov

ISC Stormcast For Thursday, August 6th, 2026

22 Seconds to Compromise: How Automated SSH Actors Move From Login to Persistence Before You Can Blink [Guest Diary]

[This is a Guest Diary by Daryl Jiminez, an ISC intern as part of the SANS.edu BACS program]

Ransom Cartel ransomware creator sentenced to 16 years in prison

Ransom Cartel ransomware creator sentenced to 16 years in prison  BleepingComputer

Canadian pleads guilty to Snowflake cloud data-theft attacks

Canadian pleads guilty to Snowflake cloud data-theft attacks  BleepingComputer

Hackers run khunt post-exploitation toolkit from Oracle database

Hackers run khunt post-exploitation toolkit from Oracle database  BleepingComputer

Don't Revoke That Token Yet: Inside the keyv/cacheable npm Worm

When you learn that a compromised package executed on one of your build hosts, muscle memory takes over: revoke the…

CISA Adds One Known Exploited Vulnerability to Catalog

CISA Adds One Known Exploited Vulnerability to Catalog  CISA (.gov)

Frontier AI cyber threat considerations for boards of directors

Frontier AI cyber threat considerations for boards of directors  Cyber.gov.au

Acrisure KARR BT and DR-100

Acrisure KARR BT and DR-100  CISA (.gov)

NCSC statement in response to recent incidents resulting from frontier AI evaluations

A statement from Ollie Whitehouse, Chief Technology Officer at the NCSC, on AI security following recent incidents.

Read This Before You Buy That TV Streaming Stick

Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited…

Partner Portal

Partner Portal  Cyber.gov.au

How AI’s Labor Supply Chains Fail Workers

In April, Kenyan data worker Grace\* worked the night shift for Sama --- a San Francisco-based outsourcing firm with physical…

Meta cuts contractors who reported seeing Ray-Ban Meta users have sex

In February, numerous workers from a company that Meta contracted to perform data annotation for Ray-Ban Meta reported viewing sensitive,…

Meta Solved Their Problem With Kenyan Contractors Seeing Footage of AI Glasses Wearers on the Toilet

Remember the appalling but utterly-unsurprising story two months ago where a team of investigative reporters in Sweden uncovered a company…

Making forensic observability the norm for network devices

Progress is being made, but too many network devices still remain difficult to investigate after compromise

When cyber attacks happen: helping organisations recover

A highly disruptive incident can feel overwhelming. New guidance provides a framework for response and recovery.

CI Fortify – Advice for isolating vital systems

CI Fortify – Advice for isolating vital systems  Cyber.gov.au

Ransomware actors are avoiding big business – on purpose

Ransomware actors are avoiding big business – on purpose  Insurance Business

UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisations

UK and partners expose Russian state-supported actors for new ‘zero-click’ phishing campaign targeting Western organisations  National Cyber Security Centre

Unpacking AI: NZ's cyber security chief on hacks, cyber blind spots and the Five Eyes warning

Unpacking AI: NZ's cyber security chief on hacks, cyber blind spots and the Five Eyes warning  Interest.co.nz

LG to Ban Residential Proxies from Smart TV Apps

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart…

Microsoft Patches a Record 570 Security Flaws

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other…