Bugtraq Is Back: The Original Full Disclosure Mailing List Is Live Again

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 8, 2026 Sophia Antipolis, France, August 7th, 2026, CyberNewswire At DEF CON 34 in Las Vegas, security researcher Jonathan Brossard, known in the community as endrazine, announced the rebirth of the original Bugtraq mailing list. Established in 1993, Bugtraq …

OpenAI Slows Down New Astra Model Development to Measure Cybersecurity Capabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 8, 2026 OpenAI has announced that it is deliberately slowing the development of Astra, its upcoming frontier AI model, after internal evaluations revealed advancements in agentic coding and cybersecurity that could push the system into “Critical” risk territory. The …

WordPress XSS2Shell Flaw Chains Pre-Auth Login XSS to PHP Remote Code Execution

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 A critical vulnerability chain in WordPress Core, tracked as CVE-2026-64638 and nicknamed XSS2Shell, that turns a single failed login attempt into full remote code execution on the underlying server. Because the flaw sits in code that has …

18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Full Root on Host

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 A newly disclosed Linux kernel vulnerability, dubbed SCTPhantom and tracked as CVE-2026-64564, allows attackers to escalate from unprivileged local access to full root and even escape containers to compromise the underlying host. The flaw is a use-after-free …

Malware Abuses Windows Hello for Business Key to Authenticate Microsoft Entra ID

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 A newly demonstrated technique shows how malware in a compromised Windows user session can abuse Windows Hello for Business (WHFB) cryptographic keys to authenticate to Microsoft Entra ID, enabling attackers to gain cloud access without the victim’s …

CVE-2026-64561 Zapscape Lets KVM Guests Escape to Linux Host With Root Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 A Linux kernel vulnerability, tracked as CVE-2026-64561 and named Zapscape, could allow attackers to escape a KVM virtual machine and take control of its underlying Linux host with root privileges. The issue affects KVM/x86, a virtualization technology …

Google Chrome 151 Fixes 41 Security Flaws, Including 6 Critical Memory Bugs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Google has released Chrome 151 to the Stable channel, fixing 41 security vulnerabilities, including six critical memory-safety flaws that could enable browser crashes, memory corruption, or malicious code execution. Chrome 151.0.7922.108/.109 is rolling out for Windows and …

Hackers Breach Swiss Government SharePoint Servers, Compromise 200 Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Swiss federal authorities have confirmed a cyberattack targeting SharePoint servers operated by the Federal Office for Information Technology and Telecommunication (BIT). The incident resulted in the compromise of login credentials linked to approximately 200 user and technical …

Claude in Chrome Prompt Injection Steals Gmail Codes to Hijack Slack, X, and Claude.ai Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 An indirect prompt injection vulnerability in Claude on Chrome can be exploited to steal email verification codes and hijack accounts on platforms like Slack, X, and Claude.ai. The attack begins with a malicious email that lands in the victim’s …

Fake PDFs and Chat Apps Let Patchwork Spy on PCs and Android Phones

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 7, 2026 Patchwork, also known as Dropping Elephant, is using fake documents and chat applications to spy on computer and phone users. The long-running espionage group has built separate attack paths for Windows systems and Android devices, allowing it …