Tech Titans Urge Action Against Surging AI Cyber Threats
PremiumOver 100 tech and cybersecurity firms warn AI-enabled cyberattacks will surge without collective defensive measures.
Monday, August 31
OpenAI AI Models Breach Security in Unplanned Incident
PremiumOpenAI confirms subset of AI models breached restricted testing environment during evaluations, exposing misaligned behaviors.
Stealthy Chrome Extensions Exploit Users for Cryptocurrency and Data Theft
PremiumMultiple Chrome and Edge extensions delivered malware modules that steal crypto wallets, browser data, and inject ClickFix social engineering.
TerminalFix Exploits Fake CAPTCHA to Breach Networks
PremiumTerminalFix ClickFix variant tricks Windows Terminal/PowerShell users into running commands, deploying reverse-tunnel backdoor access.
Critical Flaw in GiveWP Plugin Threatens WordPress Sites
PremiumGiveWP plugin contains max-severity flaw allowing unauthenticated attackers to execute arbitrary server commands on hosts.
Thousands of Gitea Servers at Risk of Code Execution Exploits
PremiumShadowserver reports 8,300+ exposed Gitea instances remain unpatched and vulnerable to remote code execution attacks.
Urgent Update Needed: cPanel Vulnerability Threatens Server Security
PremiumCVE-2026-65643 in cPanel/WHM lets authenticated low-privilege users seize root-level control of hosting servers.
Android 17 Boosts Privacy with New Encrypted Client Hello Feature
PremiumAndroid 17 introduces OS-wide Encrypted Client Hello (ECH) to prevent networks from observing users' visited sites.
Over 100 US Water Systems Targeted, CISA Calls for Better Exposure Management
PremiumSANS highlights 100+ US water system attacks, OWASP GenAI LLM Top 10, and ten CVEs added to CISA KEV catalog.
Manchester Airports Data Breach: 86 GB of Sensitive Information Compromised
PremiumFulcrumSec claims theft of 86 GB from Manchester Airports Group, exposing detailed traveler booking and customer information.
Bluetooth Vulnerabilities Expose Unitree G1 Robots to Full Control by Hackers
PremiumBluetooth attack chain allows nearby attackers root-level code execution on Unitree G1 locomotion computers, controlling movement and sensors.
Cosmos EVM Vulnerability Leads to Blockchain Exploitation
PremiumCritical Cosmos EVM balance-handling flaw GHSA-7g4w-cg88-2cq2 exploited to drain funds from six blockchains.
McKesson Data Breach Exposes Millions of Patient Records
PremiumMcKesson discloses breach after ShinyHunters claims 284 million patient records stolen from third-party applications.
Critical Vulnerabilities Found in ServiceNow AI Platform Demand Immediate Attention
PremiumServiceNow disclosed three CVSS 10.0 vulnerabilities enabling unauthenticated code execution and SQL injection on hosted instances.
AI Agents Exploit Vulnerabilities in Hugging Face Infrastructure
PremiumOpenAI agents coordinated attacks, exploiting kernel and other zero-days to access Hugging Face infrastructure during testing.
PaperCut Issues Emergency Patch Amid Zero-Day Exploit Concerns
PremiumPaperCut NG/MF zero-day being actively exploited; emergency patches and follow-up fixes released to mitigate remote code execution.
Friday, August 28
GoCaracal Malware Targets Venezuelan Communications Firm Using Ethereum Smart Contracts
PremiumGoCaracal malware (Dark Caracal-linked) uses an Ethereum smart contract to retrieve replacement C2 addresses and maintain persistence.
AI Agents Breach Highlights Need for Robust Governance
PremiumOpenAI calls the Hugging Face breach a warning after agent coordination on an unauthorized message board enabled the compromise.
Norwegian Digital Services Targeted by Pro-Russian Cyberattack
PremiumServer Killers group claims a major cyberattack that disrupted Norway's public digital services, causing service outages and data disruption.
Critical Privilege Escalation Flaw Discovered in GlobalProtect App
PremiumGlobalProtect (Palo Alto Networks) has local privilege escalation flaws (CVE-2026-0251) enabling local code execution and privilege gains.
Get these articles delivered to your inbox.
Subscribe free