---

Avast Threat Labs

• A 12 KB Backdoor Hid Its C2 Domain in desktop.ini Whitespace
  August 14, 2026 by Milánek
• The phishing link that died on purpose
  August 11, 2026 by Jan Kořínek
• Threat Report H1 2026
  July 15, 2026 by Threat Research Team
• Fake invoices are moving from inboxes to shopping apps
  June 24, 2026 by Luis Corrons, Jakub Vavra
• Inside Vidar’s ABE Bypass: From Memory Scanning to APC Injections
  June 18, 2026 by Vojtěch Krejsa

---

Bleeping Computer

---

Bloomberg Tech

• Nvidia Has $21 Billion SpaceX Stake, $30 Billion in Intel Shares
  August 14, 2026
• Anthropic Revenue Ahead of IPO Surges Over 14-Fold in Second Quarter
  August 14, 2026
• Amazon’s New User Agreement Seeks to Curb Class-Action Suits
  August 14, 2026
• UK Issues Emergency Phone Alert as Heat Raises Wildfire Risk
  August 14, 2026
• Gas Pipeline for Proposed Oracle Data Center Delayed to 2027
  August 14, 2026

---

Center for Internet Security

• Multiple Vulnerabilities in SonicWall GMS Could Allow for Remote Code Execution
  August 12, 2026
• Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution
  August 12, 2026
• A Vulnerability in Zoom Clients Could Allow for Remote Code Execution
  August 12, 2026
• Critical Patches Issued for Microsoft Products, August 11, 2026
  August 11, 2026
• Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution
  August 11, 2026

---

CERT Vulnerability BD

• VU#431093: TCG TPM 2.0 reference code found vulnerable to information leakage and timing side-channel attacks
  August 11, 2026
• VU#614868: Opencart ecommerce platform contains directory traversal vulnerability
  August 10, 2026
• VU#987105: The nothings stb TrueType library, up to version 1.26, contains a heap buffer overflow vulnerability
  August 7, 2026
• VU#487613: Alinto SOGo v5.12.7 vulnerable to cross-site scripting via malformed ICS calendar invitations
  August 6, 2026
• VU#243636: VPS.org one-click deployment templates contain multiple vulnerabilities
  July 31, 2026

---

Checkpoint Research

• The State of Ransomware Q2 2026
  August 13, 2026
• Shattering the Dream – When a Job Offer Becomes a Zero-Day Attack
  August 11, 2026
• 10th August – Threat Intelligence Report
  August 10, 2026
• When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers
  August 6, 2026
• 3rd August – Threat Intelligence Report
  August 3, 2026

---

CISA

---

Cisco Talos

---

Citizen Lab

• Inside the Fake Copyright Racket Silencing News Outlets
  August 7, 2026 by Anna Mackay
• Immigration Policy: The Backdoor to Transnational Repression
  August 5, 2026 by Anna Mackay
• A Roadmap for Confronting the Chilling Effects of Censorship, Surveillance and New Technology
  August 4, 2026 by Anna Mackay
• Kate Robertson on the Risks That Lie Behind Canada’s Unexpected Signing of the UN Cybercrime Convention
  July 31, 2026 by Anna Mackay
• Co-Founder of Controversial Spyware Firm Had Israeli Diplomatic Passport
  July 28, 2026 by Anna Mackay

---

Cloud7

---

Computer Weekly

• Quintas Energy deploys AI through Box to power workflows
  August 14, 2026
• CW@60: Still amazed – three times computers changed my life
  August 14, 2026
• Why sexualisation of women by Grok’s GenAI is a data privacy issue
  August 12, 2026
• Nearly 60% of people regretted taking social media financial advice
  August 11, 2026
• Gartner: Why cyber security must shift to outcomes against AI-led attacks
  August 7, 2026

---

Criminal IP

• WordPress Vulnerability CVE-2026-64638: Login Page XSS to Server-Side Code Execution
  August 13, 2026
• Unauthenticated Server File Read in Gitea: CVE-2026-59774 Analysis
  August 12, 2026
• N-able N-central Authentication Bypass: CVE-2026-18577 Analysis
  August 10, 2026
• Multi-Product Visibility and Certificate Risk Detection Update
  August 7, 2026
• Arbitrary File Read via Image Upload: An Analysis of Ruby on Rails CVE-2026-66066
  August 5, 2026

---

Crowdstrike Blog

• August 2026 Patch Tuesday: One Exploited Zero-Day and 62 Critical Vulnerabilities Among 415 CVEs
  August 11, 2026 by Falcon Exposure Management Team
• CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
  August 7, 2026 by Erez Goldberg
• Expanding AI Benchmarks in Cybersecurity Beyond Vulnerability Discovery
  August 6, 2026 by Keegan Hines – Chase Midler
• Secure Agent Harness Execution: Preventing Escape
  August 4, 2026 by Jim Holt – Donato Onofri – Lukasz Woznicki – Dan Dinca – Chase Midler
• CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates
  August 3, 2026 by Counter Adversary Operations

---

Cybercrime Magazine

• BreachLock: CISO Conversations Revealed At Black Hat USA 2026
  August 14, 2026 by Taylor Fox
• Kai: The Agentic AI Platform Built To Fight AI-Enabled Attacks
  August 13, 2026 by Taylor Fox
• Convicted Hacker Turned Retro Gaming Manufacturer, Online Retailer
  August 12, 2026 by Taylor Fox
• It Takes A Village To Raise A Cybersecurity YouTube Channel
  August 11, 2026 by Taylor Fox
• Top 5 B2B Cybersecurity YouTube Channels In 2026
  August 10, 2026 by Taylor Fox

---

CSO Online

• Salesforce, ServiceNow data targeted in ‘City-Forum’ attacks
  August 14, 2026
• Oracle’s new database security tool is free — for six months
  August 14, 2026
• Akira ransomware reboots into Windows Safe Mode to knock EDR offline
  August 14, 2026
• The cybersecurity backlog is not a security problem
  August 14, 2026
• How CSOs can turn cybersecurity into a business growth strategy
  August 14, 2026

---

CVE ThreatInt

• Invisible Anti-Spam & CAPTCHA
  August 15, 2026
• Cookie Banner for GDPR / CCPA
  August 15, 2026
• Invisible Anti-Spam & CAPTCHA
  August 15, 2026
• Invisible Anti-Spam & CAPTCHA
  August 15, 2026
• KiviCare
  August 15, 2026

---

Cyberdefense Magazine

• Cybersecurity Professionals Who Ignore AI Are Arming Their Enemies
  August 13, 2026
• From Detection To Remediation: Automating Cloud Security Fixes In Financial Infrastructure
  August 13, 2026
• White House Authorizes Offensive Cyber Operations Against Foreign Syndicates
  August 13, 2026
• De-Risking Enterprise AI In Healthcare: A Cybersecurity Perspective
  August 12, 2026
• Defending Against Gunra: Key Takeaways from the Joint CISA Advisory
  August 12, 2026

---

DarkReading.com

---

Distributed Email of Secrets

• Release: LexipolLeaks (68GB)
  February 13, 2025 by Distributed Denial of Secrets
• Joint statement on Israeli sanctions against the media
  December 10, 2024 by Distributed Denial of Secrets
• Release: Moustass leaks (2 GB)
  November 12, 2024 by Distributed Denial of Secrets
• Release: Israel Ministry of Justice (245 GB)
  July 28, 2024 by Distributed Denial of Secrets
• Release: Cyprus Confidential
  July 2, 2024 by Distributed Denial of Secrets

---

Google Online Sec

• AI threats in the wild: The current state of prompt injections on the web
  April 23, 2026 by Kimberly Samra
• Bringing Rust to the Pixel Baseband
  April 10, 2026 by Edward Fernandez
• Protecting Cookies with Device Bound Session Credentials
  April 9, 2026 by Google
• Google Workspace’s continuous approach to mitigating indirect prompt injections
  April 2, 2026 by Kimberly Samra
• VRP 2025 Year in Review
  March 31, 2026 by Kimberly Samra

---

Hack Noon

• TCP RST Injection: Diagnosing Carrier-Grade Traffic-Shaping Outages
  August 14, 2026 by Vitaliy Gribko
• The Problem With Using AI to Review AI-Written Code
  August 13, 2026 by Vanna W
• How to Make Your Repository Ready for AI Coding Agents
  August 13, 2026 by Médéric Hurier (Fmind)
• YOLO26 Object Detection: A Practical Guide
  August 12, 2026 by aimodels44
• Reclaim Security Names Stephen Wadsworth VP of Sales as Cybersecurity Shifts From Exposure Discovery
  August 11, 2026 by ruth_hasson

---

Hacker News

• Attackers Exploit SharePoint Authentication Bypass After Public PoC Release
  August 13, 2026
• Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor
  August 12, 2026
• 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
  August 12, 2026
• OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models' Reasoning
  August 12, 2026
• Enterprise Defenses Recovered at the Edge and Collapsed Inside
  August 12, 2026

---

HackerOne

---

Have I Been Pwned

• RingCentral – 1,596,490 breached accounts
  August 13, 2026
• Alcon – 218,395 breached accounts
  August 9, 2026
• Brinks Home – 732,162 breached accounts
  August 8, 2026
• Exact Sciences – 10,869,543 breached accounts
  August 7, 2026
• Inter-Con Security – 276,114 breached accounts
  August 5, 2026

---

Infosec Magazine

• Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations
  August 14, 2026
• New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies
  August 14, 2026
• Novel macOS Infostealer AmnesiaStealer Spread via ClickFix
  August 14, 2026
• Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations
  August 14, 2026
• Exposed AWS Access Key Linked to Data Breach Affecting 1500+ UK Charities
  August 13, 2026

---

Linux Security RedHat

• Red Hat: RHSA-2023-5538-01 Important: libvpx Heap Overflow and Crash
  October 9, 2023
• Red Hat Enterprise Linux 8.2 RHSA-2023-5527 Important: Bind DoS Risk
  October 9, 2023
• Important Advisory RHSA-2023-5539-01 for libvpx Crash and Heap Overflow
  October 9, 2023
• Red Hat Enterprise Linux 8.2 RHSA-2023-5534-01 Important: libvpx Issues
  October 9, 2023
• Red Hat: RHSA-2023-5530-01 Critical: OpenSSL Security Fix
  October 9, 2023

---

Malware News

• As warfare becomes engineering, the era of the digital mercenary dawns
  August 15, 2026 by MalBot
• TheGentlemen Ransomware Attack on Safeware Inc
  August 15, 2026 by MalBot
• TheGentlemen Targets KFC Kosova in Ransomware Attack
  August 15, 2026 by MalBot
• TheGentlemen Ransomware Group Attacks Plaza Auto Mall
  August 15, 2026 by MalBot
• TheGentlemen Ransomware Attack Targets Avanta Maroc
  August 15, 2026 by MalBot

---

Malwarebytes

• Apple now uses iPhone alerts for targets of mercenary spyware
  August 14, 2026
• WhatsApp is testing a new warning for scam messages
  August 14, 2026
• New Android malware lets criminals use your bank card in real time
  August 13, 2026
• Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits
  August 13, 2026
• “Zoomsday” flaws could let one Zoom participant attack another
  August 12, 2026

---

MIT News

• How MIT students are helping to prevent cyberattacks
  July 13, 2026 by Nicole Estvanik Taylor | Department of Urban Studies and Planning
• To study how chips really work, MIT researchers built their own operating system
  June 10, 2026 by Rachel Gordon | MIT CSAIL
• Enabling privacy-preserving AI training on everyday devices
  April 29, 2026 by Adam Zewe | MIT News
• New chip can protect wireless biomedical devices from quantum attacks
  April 23, 2026 by Adam Zewe | MIT News
• Enhancing maritime cybersecurity with technology and policy
  February 25, 2026 by Stefanie Koperniak | Division of Graduate and Undergraduate Education

---

Mozzila Blog

• Updated GPG key for signing Firefox and Thunderbird Releases
  August 10, 2026 by Ben Hearsum
• Improving Transparency and Assurance in the Web PKI: Mozilla Root Store Policy v3.1
  June 29, 2026 by Ben Wilson
• Firefox Security Response to pwn2own 2025
  May 17, 2025 by Frederik Braun
• Updated GPG key for signing Firefox Releases
  April 1, 2025 by Julien Cristau
• Enhancing CA Practices: Key Updates in Mozilla Root Store Policy, v3.0
  March 12, 2025 by Ben Wilson

---

Microsoft Security Blog

• Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise 
  August 10, 2026 by Srikanth Shoroff
• DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure
  August 10, 2026 by Microsoft Threat Intelligence
• ​​Microsoft named a Leader in the KuppingerCole Leadership Compass for Cloud Native Application Protection Platforms (CNAPP)
  August 5, 2026 by Ran Rosin
• From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide
  August 5, 2026 by Microsoft Security Research and Srinivasan Govindarajan
• ChainDrop supply chain compromise: Anatomy of a self-propagating worm
  August 4, 2026 by Microsoft Security Research, Ravikant Tiwari, Sagar Patil and Suriyaraj Natarajan

---

OSIT News

• The OSINT Newsletter – Issue #118
  August 11, 2026 by The OSINT Newsletter
• The OSINT Newsletter – Issue #117
  August 6, 2026 by The OSINT Newsletter
• Episode 22: Reply Guys and Robot Toolsmiths: Mining Forums for Long-Term History and Building an OSINT Tool That Improves Itself
  July 31, 2026 by The OSINT Newsletter
• The OSINT Newsletter – Issue #116
  July 30, 2026 by The OSINT Newsletter
• The OSINT Newsletter – Issue #115
  July 21, 2026 by The OSINT Newsletter

---

Rapid7

• Metasploit Wrap Up: Lot of summer shells and fit http profiles
  August 14, 2026 by Rapid7 Labs
• AI is Working in the SOC. So Why are Security Executives More Worried Than Ever?
  August 12, 2026 by Rapid7
• Patch Tuesday – August 2026
  August 11, 2026 by Adam Barnett
• Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)
  August 11, 2026 by Stephen Fewer
• CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)
  August 11, 2026 by Stephen Fewer

---

RedHat

• Why IT security’s future is more than just AI models
  August 6, 2026
• Same goals, different clocks: What Red Hat’s 2025 Risk Report reveals about global compliance gaps
  July 31, 2026
• Lights on! Real-time threat response with Red Hat Advanced Cluster Security
  July 29, 2026
• No time to lose: Why post-quantum security for financial services must start now
  July 29, 2026
• Substituting IP address evaluation with hardware-rooted sovereign zero trust
  July 28, 2026

---

Rekt

• Transparent When You Want It, Private When You Need It
  April 9, 2026
• Why Privacy Matters More Than Ever in 2026
  February 23, 2026
• Social Recovery Wallets are Broken by Design
  June 9, 2025
• The Inflation Game – Why Emissions-Heavy Protocols Die Before They Grow
  May 6, 2025
• The Fake Treasury Playbook – How Protocols Inflate Their War Chests
  April 28, 2025

---

Security Boulevard

---

Tech Spot

• Another Ryzen 7 7800X3D reportedly burns out despite AMD's voltage fix
  August 14, 2026
• Marvel's Wolverine arrives complete on disc, just as physical gaming fades
  August 14, 2026
• Anthropic is heading toward the largest IPO ever, at a possible $2 trillion valuation
  August 14, 2026
• Audacity remains one of the best free tools for editing audio
  August 14, 2026
• Enterprise SSDs now consume 48% of global NAND flash supply
  August 14, 2026

---

Tenable

• The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure
  August 14, 2026
• Microsoft's August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)
  August 11, 2026
• Coordinated "cyberattack" on U.S. water utilities: What you need to know
  July 28, 2026
• Oracle July 2026 Critical Patch Update Addresses 1235 CVEs
  July 21, 2026
• wp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Core
  July 20, 2026

---

WatchTowr

• You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452(?))
  August 14, 2026 by Sina Kheirkhah (@SinSinology)
• It’s 37oC, And All We Can Think About Is ColdFusion (Adobe ColdFusion Security Bulletin APSB26-68 CVE Bonanza)
  July 2, 2026 by Sina Kheirkhah (@SinSinology)
• CitrixBleed To Infinity And Beyond (Citrix NetScaler Pre-Auth Memory Overread CVE-2026-8451)
  June 30, 2026 by Aliz Hammond
• Enterprise Tech In, Shell Out (Progress Kemp LoadMaster Uninitialized Heap to Pre-Auth RCE CVE-2026-8037)
  June 29, 2026 by Sina Kheirkhah (@SinSinology)
• Why Use App-Level Auth When Every Database Has Auth? (Splunk Enterprise CVE-2026-20253 Pre-Auth RCE)
  June 12, 2026 by Piotr Bazydlo (@chudyPB)

---

Zero Day

• ZDI-26-526: (0Day) PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability
  August 14, 2026
• ZDI-26-569: Linux Kernel Net Scheduler True Link Equalizer Race Condition Local Privilege Escalation Vulnerability
  August 13, 2026
• ZDI-26-571: Linux Kernel Net Scheduler Packet Classifier API Use-After-Free Local Privilege Escalation Vulnerability
  August 13, 2026
• ZDI-26-573: Linux Kernel KSMBD Response Header Out-Of-Bounds Read Information Disclosure Vulnerability
  August 13, 2026
• ZDI-26-572: Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability
  August 13, 2026

---

---