Daily News

Cybersecurity Headlines — August 18, 2026 Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware — Internet Chinese AI company Zhipu claims its new model is a better bug-finder than Anthropic, OpenAI — Theregister.com Chinese AI company Zhipu claims its new is a better bug-finder than Anthropic, OpenAI — Theregister.com Stopping a cyberattack while walking your dog - defensive AI security CEO says it’s not ruff to do — Theregister.com Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day — Help Net Security A phone company just lost 1.6 million records to a phone call — The Next Web Dark Web Intelligence Claims US Fitness Data Exposure Involving Body20 — Undercodenews.com The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure — Tenable.com Frontier AI Threats Drive Companies to Boost Security Budgets — pymnts.com Max severity SAP Commerce Cloud flaw now targeted in attacks — BleepingComputer From the Trenches As a cybersecurity practitioner, I’m seeing a disturbing trend of Chinese companies making headlines for all the wrong reasons. The latest exploit to grab my attention is the suspected China-Nexus Actor’s use of a VMware vCenter flaw to deploy Babuk-Derived Ransomware. This is a clear example of nation-state sponsored attacks, and it highlights the need for organizations to prioritize patching their VMware infrastructure. ...

Cybersecurity Headlines — August 17, 2026 A phone company just lost 1.6 million records to a phone call — The Next Web Dark Web Intelligence Claims US Fitness Data Exposure Involving Body20 — Undercodenews.com The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure — Tenable.com Frontier AI Threats Drive Companies to Boost Security Budgets — pymnts.com Max severity SAP Commerce Cloud flaw now targeted in attacks — BleepingComputer Shell investigates ‘potential incident’ after Clop data theft claims — BleepingComputer Hacking Group Claims Mass Data Theft From Shell, Philips, GE, Fiserv, Others — Insurance Journal China’s AI model approaches Anthropic’s Mythos 5 in cyber-defense tests — Crypto Briefing You’re easier to find than you think — Americanthinker.com Nozomi partners with Sophos to put operational technology data in IT consoles — SiliconANGLE News From the Trenches As a cybersecurity practitioner, I’ve been keeping an eye on the latest developments in the world of threat intelligence and incident reporting. One story that caught my attention is the claim by Dark Web Intelligence that US fitness data has been exposed on the Body20 platform. This raises serious concerns about the security posture of fitness companies and their ability to protect sensitive customer information. ...

Cybersecurity Headlines — August 16, 2026 The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure — Tenable.com Frontier AI Threats Drive Companies to Boost Security Budgets — pymnts.com Max severity SAP Commerce Cloud flaw now targeted in attacks — BleepingComputer Shell investigates ‘potential incident’ after Clop data theft claims — BleepingComputer Hacking Group Claims Mass Data Theft From Shell, Philips, GE, Fiserv, Others — Insurance Journal China’s AI model approaches Anthropic’s Mythos 5 in cyber-defense tests — Crypto Briefing You’re easier to find than you think — Americanthinker.com Nozomi partners with Sophos to put operational technology data in IT consoles — SiliconANGLE News Letters to the editor — TheJournal.ie CISA just changed the rules. Is your vulnerability program ready? — Nextgov From the Trenches As a cybersecurity practitioner, I’m seeing a surge in AI-powered threats that’s making it increasingly difficult for companies to keep up with security measures. The latest reports from Tenable.com and Crypto Briefing highlight two particularly concerning trends: the Agentic AI threat cluster and China’s advancements in AI model development. ...

Cybersecurity Headlines — August 15, 2026 You’re easier to find than you think — Americanthinker.com Nozomi partners with Sophos to put operational technology data in IT consoles — SiliconANGLE News Letters to the editor — TheJournal.ie CISA just changed the rules. Is your vulnerability program ready? — Nextgov GAO official suggests addressing AI risks through existing legislation — Nextgov Curiouser and Curiouser — Talosintelligence.com Microsoft patches LegacyHive Windows zero-day vulnerability — BleepingComputer U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog — Securityaffairs.com U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog — Securityaffairs.com What I Learned Securing Sniffnet with the GitHub Secure Open Source Fund — Sniffnet.app From the Trenches As a cybersecurity practitioner, I’ve seen firsthand how quickly vulnerabilities can be exploited by attackers. Recently, I came across an article that made me think twice about my own security posture - “You’re easier to find than you think” (Americanthinker.com). The idea that I’m more vulnerable than I realize is a sobering one, and it’s a reminder that no system is completely secure. ...

Cybersecurity Headlines — August 14, 2026 Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349) — Help Net Security Palo Alto Networks to run OpenAI cyber models inside customer networks — SiliconANGLE News ‘Near-autonomous’ AI agents attack Taiwan’s nuclear safety agency — Theregister.com Coalition for Health AI Mounts Effort Against Cyberattacks — pymnts.com Disgruntled Researcher Discloses New Zero-Day in Windows Antivirus — PCMag.com LiteLLM Attack Affected 2,500 Companies, 434,000 CI/CD Pipelines: CloudSEK — DevOps.com Lazarus hackers exploited Windows zero-day to target defense firms — BleepingComputer Chinese Hackers Created a ‘Near-Autonomous’ Attack Using Open-Source AI — PCMag.com Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure — Infosecurity Magazine A dangerous Zoom screen-sharing bug could have let hackers hijack other devices on a call — TechRadar From the Trenches The latest batch of cybersecurity news is out, and it’s clear that the threat landscape is getting more complex by the day. Two stories that caught my attention are Palo Alto Networks’ decision to run OpenAI cyber models inside customer networks, and a new zero-day vulnerability in Windows Antivirus. ...

Cybersecurity Headlines — August 13, 2026 Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS — Internet IT Outsourcing And Cybersecurity Habits Of Thriving Businesses — Addicted2success.com How Successful Founders Leverage Managed IT For Growth — Addicted2success.com Banking’s Next AI Risk Is Cyber Autonomy — pymnts.com California Building ‘AI Cyber Defense Fund’ to Protect Critical Infrastructure From Hackers — Gizmodo.com Frontier AI raises the cybersecurity bar: Why prediction must become prevention — SiliconANGLE News Rapid7 cuts 12% of workforce as it invests more in AI tools; CEO says it is a ‘good company ready to be great’ — The Times of India Zoom flaw let an attacker take over your device, including iPhone and Mac — 9to5Mac Blumira launches Hearth, an AI command center that spans rival security tools — SiliconANGLE News From the Trenches As a cybersecurity practitioner, I’ve been keeping an eye on the latest developments in the industry, and today’s headlines are particularly concerning. The exploitation of a vulnerability in Cisco ASA and FTD devices that can trigger remote denial-of-service (DoS) attacks on the internet is a serious issue. This type of attack can have significant consequences for organizations with large networks and critical infrastructure, and it’s essential that these vulnerabilities are patched as soon as possible. ...

Cybersecurity Headlines — August 12, 2026 OpenAI expands Daybreak with GPT-5.6-Cyber model as AI cyber breaches surge — Business Standard BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins — Internet Opinion: Europe needs to start treating the climate emergency as a threat to our national security — The Irish Times Cybersecurity jobs available right now: August 11, 2026 — Help Net Security Corma launches with $60M in funding for defensive cybersecurity AI — SiliconANGLE News Hackers talked their way into Levi’s, and three computers were enough — The Next Web OpenAI expands Daybreak cybersecurity initiative as AI agent threats evolve — CNBC OpenAI unveils Daybreak Blue and Daybreak Red cybersecurity models — Crypto Briefing China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw — Internet ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors — Internet From the Trenches As a cybersecurity practitioner, I’m seeing an alarming trend emerging - AI-powered cyber breaches are on the rise. OpenAI’s expansion of its Daybreak initiative with the introduction of GPT-5.6-Cyber model is a clear indication that AI agents are becoming increasingly sophisticated and threatening to our digital security. The fact that these AI models can be used to breach systems is a wake-up call for organizations to reassess their approach to cybersecurity. ...

Cybersecurity Headlines — August 11, 2026 North Korean hacking groups are building AI-powered cyberattack tools, and the results are already showing up in the wild — Crypto Briefing The AI safety test is becoming a safety risk | TechCrunch — TechCrunch Security Affairs newsletter Round 589 by Pierluigi Paganini – INTERNATIONAL EDITION — Securityaffairs.com Week in review: Cisco fixes IMC bug, Patch Tuesday forecast, Black Hat USA 2026 — Help Net Security OpenAI Trained Models While They Were Coordinating Exploits via Message Boards — Substack.com Hugging Face hack marks start of dangerous AI cyber era and many firms ‘don’t even know it’ — CNBC U.S. CISA adds a Progress LoadMaster flaw to its Known Exploited Vulnerabilities catalog — Securityaffairs.com N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist — Internet Water Utilities Group Partners With DEF CON Offshoot For Water Watch Center — Slashdot.org UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data — Internet From the Trenches As a cybersecurity practitioner, I’m seeing a disturbing trend emerging from the wild. North Korean hacking groups are building AI-powered cyberattack tools, and the results are already showing up in the real world (Crypto Briefing). This development is particularly concerning given the capabilities of these AI tools - they’re not just limited to reconnaissance or lateral movement, but can now be used to launch sophisticated attacks that could potentially breach even the most robust defenses. ...

Cybersecurity Headlines — August 10, 2026 OpenAI Trained Models While They Were Coordinating Exploits via Message Boards — Substack.com Hugging Face hack marks start of dangerous AI cyber era and many firms ‘don’t even know it’ — CNBC U.S. CISA adds a Progress LoadMaster flaw to its Known Exploited Vulnerabilities catalog — Securityaffairs.com N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist — Internet Water Utilities Group Partners With DEF CON Offshoot For Water Watch Center — Slashdot.org UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data — Internet Hackers use simple phone trick to hold Wall Street giants hostage in ransom plot: report — New York Post HackerOne Extends Platform Reach to Remediate Source Code Vulnerabilities — DevOps.com What the Recent Water Systems Cyber Attacks Reveal About Critical Infrastructure Security — Offsec.com In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall Street — Securityweek.com From the Trenches As a cybersecurity practitioner, I’m seeing a disturbing trend emerging that could mark the beginning of a new era of AI-powered attacks. The recent hack on Hugging Face’s systems, which exposed thousands of models to exploitation via message boards (Substack.com), is just the tip of the iceberg. This incident highlights the vulnerability of open-source AI models and the ease with which malicious actors can exploit them. ...

Cybersecurity Headlines — August 09, 2026 N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist — Internet Water Utilities Group Partners With DEF CON Offshoot For Water Watch Center — Slashdot.org UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data — Internet Hackers use simple phone trick to hold Wall Street giants hostage in ransom plot: report — New York Post HackerOne Extends Platform Reach to Remediate Source Code Vulnerabilities — DevOps.com What the Recent Water Systems Cyber Attacks Reveal About Critical Infrastructure Security — Offsec.com In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall Street — Securityweek.com Shared context turns production data into faster risk response — SiliconANGLE News What do cybersecurity leaders want in staff? These 3 skills beat certifications and experience — ZDNet Agentic AI for Cyber Defenders: What Security Teams Built at Black Hat USA 2026 — Tenable.com From the Trenches As a cybersecurity practitioner, I’ve been keeping an eye on the latest news, and there are two stories that really caught my attention. First, N-able’s recent hotfix for N-central has revealed some disturbing information about attackers reaching managed systems and persisting. This is a stark reminder of how easily threat actors can gain access to our networks and stay hidden. It highlights the need for continuous monitoring and regular patching to prevent such breaches. ...