Hackers Started to Exploit Critical SAP Commerce Cloud, Still No Public PoC

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Threat actors have begun actively probing and attempting to exploit a maximum-severity flaw in SAP Commerce Cloud, just three days after official security fixes were released. Defused honeypot telemetry captured the first wave of unauthenticated remote-execution traffic …

Shell Investigating Data Breach Following Cl0p Ransomware Group Claim

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Multinational energy giant Shell has launched an active investigation after the notorious Cl0p ransomware syndicate claimed responsibility for exfiltrating sensitive internal data. Security researchers and enterprise defenders are closely monitoring the situation as forensic teams work to …

Microsoft to Make Passkeys Default in Entra ID and Retires SMS and Voice Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Microsoft will make passkeys the default authentication experience in Microsoft Entra ID as part of a broader move away from phishing-prone sign-in methods. The company will also retire Microsoft-provided SMS and voice authentication for multifactor authentication, pushing …

VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 14, 2026 Selidan, USA, August 14th, 2026, CyberNewswire New report examines suspicious Reddit activity, coordinated YouTube content and BBB Scam Tracker entries influencing how the vehicle history platform appears across Google and AI systems VINclarity has published a new …

Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 14, 2026 TP-Link has disclosed multiple high-severity vulnerabilities affecting ISP-managed Aginet networking products, including mesh systems, routers, PON devices, and xDSL modems. The flaws could allow attackers with network access to bypass authentication, escalate privileges, steal sensitive information, read …

Bring Your Own EDR Attack Turns SentinelOne Into PPL-Protected Trojan Horse to Shield Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 14, 2026 A “Bring Your Own EDR” attack abuses trusted SentinelOne components to turn endpoint protection into a powerful malware shield. The research was presented at DEF CON 34 in Las Vegas, and SentinelOne fixed the reported issue in …

AI Agents Don’t Stop When Malware Fails, They Write Another Tool and Keep Attacking

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 14, 2026 AI agents are changing the shape of cyberattacks. Instead of relying on a fixed piece of malware, an agent can test an approach, see it fail, write a replacement tool, and continue toward the same goal. Recent …

Dysphoria Botnet Turns Compromised Routers and Cameras Into DDoS Bots and C2 Relay Nodes

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 14, 2026 Dysphoria has turned a large number of everyday internet-connected devices into a potential attack network. The botnet is linked to roughly 296,000 compromised devices, placing routers, cameras, gateways, and other connected equipment at risk of being used …

DCRat Campaign Hides Malware Archive Inside SVG Using HTML Smuggling

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 14, 2026 A new DCRat campaign is using a familiar image format to hide a dangerous malware archive. The operation begins with phishing emails that pose as legal notifications and urge recipients to open an attached SVG file. The …

Who’s Tracking You? Use This New Service to Find Out

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

It can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and …