Iranian Hackers Shut Down UK Power Plant in Unprecedented Cyberattack
PremiumIran-linked attackers forced a UK power plant offline for four days, disrupting energy infrastructure operations.
§Source · Cybersecurity News
Cybersecurity News
Every dispatch we have aggregated from Cybersecurity News.
All dispatchesMonday, August 24
Friday, August 21
Microsoft Copilot Vulnerability Exposes Sensitive Data to Single-Click Threat
PremiumCVE-2026-24301 'CoSnitch' in Microsoft Copilot Personal allowed one-click exfiltration of connected-account data; patched Aug 18.
Phishing Scheme Bypasses Microsoft 365 MFA to Redirect Vendor Payments
PremiumPhishing allowed attackers to bypass Microsoft 365 MFA, hijack a finance mailbox, and redirect vendor payments.
Wednesday, August 19
Critical Vulnerability in macOS Screen Sharing Allows Unauthorized Root Access
CVE-2026-43760 logic flaw in macOS Screen Sharing can be exploited to execute commands as root via file-copy helpers.
Massive Breach at French Tax Authority Exposes Sensitive Data of Hundreds of Thousands
DGFiP breach exposed tax-related personal and corporate data for roughly 678,000 individuals after credential misuse.
Critical Vulnerability in MLflow Exploited for Credential Theft
Active exploitation of MLflow SSRF (CVE-2026-64849) leads to cloud credential and secret theft from ML deployments.
Monday, August 17
Unveiling a New Threat: DRAM Scrambling Attack Compromises Key CPU Memory Zones
PremiumResearch demonstrates DRAM scrambling manipulation that undermines protections around SMM, PSP, and CPU microcode memory zones.
AI Agents Pose New Challenge in Cybersecurity Landscape
PremiumAnalysis shows autonomous AI agents can escape sandboxes and execute attacks without direct human operators, changing threat models.
Critical Security Flaws Uncovered Across Major Tech Firms
PremiumNewsletter outlines multiple critical zero-days (Cisco, Windows), Outlook RCE, and high-profile vendor patches and incidents this week.
Apple's Urgent Call: Enable Lockdown Mode Against Spyware Threats
PremiumApple issued high-confidence threat notifications urging selected users to enable Lockdown Mode due to mercenary spyware targeting.
Shell Probes Potential Data Breach Amid Cl0p Ransomware Claims
PremiumShell is investigating Cl0p's claim of exfiltrating 89GB of internal data amid an ongoing potential incident and extortion demand.
SAP Commerce Cloud Vulnerability Under Siege: Immediate Action Required
PremiumMaximum-severity RCE (CVE-2026-58231) in SAP Commerce Cloud is being actively probed and targeted shortly after patch release.
Massive Azure Credential Breach Puts Major Corporations at Risk
PremiumCompromised Azure/Entra credentials exfiltrated employee directories from major corporations, data now offered for sale.
Friday, August 14
Wednesday, August 12
Monday, August 10
CSS Bomb Attacks Exploit Email Vulnerabilities to Steal Passwords
PremiumCSS bomb technique manipulates webmail UI to spy on user activity and capture passwords and tokens without JavaScript.
Levi Strauss Hit by Social Engineering Cyberattack
PremiumLevi Strauss suffered a breach after social-engineering of three employees gave attackers access to internal systems and data.
Critical Metabase Vulnerability Exploited to Gain Unauthorized Access
PremiumCritical Metabase SQLi zero-day allows unauthenticated admin access and active data-theft; immediate mitigation required.
Friday, August 7
Get these articles delivered to your inbox.
Subscribe free