Multiple ClamAV Vulnerabilities Allow Remote Attacker to Trigger DoS Condition

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Cisco has disclosed multiple high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning operations and cause denial-of-service conditions. The flaws affect the ClamAV parsers used by Cisco Secure Endpoint Connector on Windows, …

Anthropic to Add Invisible Watermarks to All Claude AI Outputs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Anthropic has announced plans to add invisible watermarks and signed metadata to content created by Claude AI. The move follows the company’s decision to sign the European Union AI Act’s Article 50(2) Code of Practice on Transparency …

New Phishing Attack Leverage SSL/TLS Certificates to Target High-value Brands Customers Via Whatsapp

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 A phishing operation is using web certificates and chosen web addresses to target customers of high-value brands through WhatsApp. The activity is designed to make fraudulent pages look normal at a glance, turning a familiar security signal …

OpenAI Expands Daybreak Cyber with GPT-5.6 for Exploit Validation, Pentesting, and Red Teaming

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 OpenAI has expanded its Daybreak program to give vetted security defenders deeper access to frontier AI models, introducing two access tiers—Daybreak Blue and Daybreak Red—alongside a new specialized model, GPT-5.6-Cyber, purpose-built for exploit validation, vulnerability research, and …

Gunra Ransomware Exploits Fortinet VPN Flaws to Bypass MFA and Steal Enterprise Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 A joint cybersecurity advisory from the FBI, CISA, the Department of Defense Cyber Crime Center, the NSA, the U.S. Secret Service, and South Korea’s National Police Agency has exposed a dangerous new wave of attacks by the …

HP ThinPro TPM Disk Encryption Flaw Lets Attackers Extract LUKS Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 A security researcher has disclosed a boot-chain weakness in HP ThinPro 8 and 9 that could allow attackers with physical access to a thin client to extract its LUKS disk-encryption key. The issue affects HP thin clients …

Pass-the-Passkey Attacks Expose Windows 11 and Microsoft Entra ID, Bypassing MFA

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Pass-the-Passkey Attacks Expose Windows 11 and Microsoft Entra ID Weaknesses That Can Bypass Phishing-Resistant MFA A new “Pass-the-Passkey” family of attack techniques demonstrates how systemic implementation flaws surrounding WebAuthn can undermine passkey security even when cryptographic private …

CISA Warns of Progress LoadMaster Command Injection Vulnerability Exploited in Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 CISA has added a critical Progress LoadMaster vulnerability to its Known Exploited Vulnerabilities catalog after attackers were observed targeting exposed devices. Tracked as CVE-2026-8037, the flaw affects Progress LoadMaster and Progress ADC products. It is a command …

Windows WalletService Vulnerability Allows Attackers to Escalate Privileges – PoC Released

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 Microsoft has patched a Windows WalletService vulnerability that could let local attackers gain SYSTEM privileges, with a public proof of concept urging organizations to deploy the July 2026 security updates. Tracked as CVE-2026-49176, the issue is an …

GitHub Expands Supply Chain Malware Detection From npm to 8 Package Registries

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 GitHub has expanded its malware detection capabilities beyond npm, providing developers with broader protection against malicious open-source packages. Dependabot alerts can now identify harmful dependencies across 8 major package ecosystems: npm, PyPI, Maven, RubyGems, NuGet, Go, crates.io, …