Exposed OT Controllers and Foreign Telecoms Pose Persistent Security Risks
PremiumSANS NewsBites flags exposed OT controllers after water attacks, Chinese telecoms' US presence, and OSAA's SAFE proposal for AI findings sharing.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Monday, August 10
Massive Data Breach at Unlimited Technology Systems Exposes Personal Information of Millions
PremiumUnlimited Technology Systems breach exposed personal, medical and health insurance information for about 3.8 million people.
Phishing Campaign Exploits Microsoft 365 Accounts in Financially Driven Attacks
PremiumActive AitM phishing campaign hijacks Microsoft 365 accounts to collect payroll and finance emails using residential proxies.
Cyberattack Disrupts Operations at North Carolina Ports
PremiumCyberattack disrupted gates and operations across three North Carolina ports, drawing Coast Guard attention.
N-able Enhances Security with New N-central Hotfix Amid Exploitation Concerns
PremiumN-able released hotfixes after active exploitation of N-central enabled persistent attacker access to managed systems.
Google Chrome 151 Update Resolves Critical Security Flaws
PremiumChrome 151 fixes multiple memory-safety bugs, including critical use-after-free issues — prioritize browser updates.
Critical Metabase Vulnerability Exploited to Gain Unauthorized Access
PremiumCritical Metabase SQLi zero-day allows unauthenticated admin access and active data-theft; immediate mitigation required.
Friday, August 7
ChainDrop Worm Infiltrates Hundreds of npm Packages, Threatens Billions of Installs
PremiumChainDrop npm worm compromised 400+ packages, impacting components with combined monthly installs exceeding two billion.
QuickFox Supply Chain Breach Unveils FDMTP Backdoor Deployment
PremiumQuickFox supply-chain compromise trojanized Windows installer to deliver FDMTP backdoor in deployments since at least August 2025.
Critical Vulnerability in Popular Code Editors Puts Millions at Risk
PremiumCritical one-click RCE affecting Cursor, VS Code, and Google Antigravity could compromise developers by executing code via malicious links.
Security Researcher Uncovers Vulnerability in ChatGPT's Sandbox Environment
PremiumResearcher demonstrated a PoC providing C2-style influence over ChatGPT's isolated sandbox, highlighting container escape risks.
AI Coding Agents Expose Critical Vulnerabilities
PremiumRepeatable vulnerabilities across Anthropic, Google, and OpenAI coding agents allow RCE, API credential theft, and supply-chain compromise.
AI Browsers Under Siege: Zero-Click Vulnerabilities Threaten ChatGPT Atlas and Claude
PremiumZero-click prompt injection vulnerabilities let attackers hijack Claude and ChatGPT Atlas via crafted emails and social posts, unpatched as reported.
Severe Paperclip Flaw Exposes Admin Access and Code Execution Risks
PremiumCritical Paperclip flaw allowed unauthenticated admin access and code execution via board-level API and company import feature.
SQL Injection Exploited in Oracle Database for SYSTEM-Level Access
PremiumAttackers used SQL injection to compile khunt toolkit inside Oracle DBs, executing post-exploitation tasks without writing executables to disk.
Critical Security Flaws Fixed in AWS, Google, and Vercel Tools
PremiumAgent infrastructure flaws at AWS, Google, and Vercel allow forged instructions to invoke agent tools without model authorization, bypassing guardrails.
Critical JetBrains TeamCity Flaw Actively Exploited by Hackers
PremiumCritical unauthenticated RCE CVE-2026-63077 in JetBrains TeamCity is being actively exploited for remote code execution.
Cyberattack Disrupts North Carolina Ports, Coast Guard Leads Investigation
PremiumUS Coast Guard investigates cyberattack that disrupted North Carolina Ports, forcing manual operations during remediation.
Thousands of Rockwell PLCs Vulnerable Online, Urgent Action Needed
PremiumForescout found 4,407 internet-exposed Rockwell PLCs worldwide, including 22 in cities impacted by recent water utility attacks.
De Bijenkorf Data Exposure: Cyberattack on Logistics Partner Raises Concerns
PremiumDe Bijenkorf notifies customers of potential exposure after a third-party logistics provider suffered a cyber incident affecting retail data.
Get these articles delivered to your inbox.
Subscribe free