August 4, 2026 A critical security flaw in Gitea, tracked as CVE-2026-59774, allows unauthenticated remote attackers to read arbitrary files from vulnerable servers and potentially escalate the attack to remote …
Critical Adobe Campaign Classic Vulnerabilities Enables Arbitrary Code Execution
August 4, 2026 Adobe has issued a critical security update for Adobe Campaign Classic, addressing multiple flaws that could enable arbitrary code execution on vulnerable systems. The update, tracked as …
A Malicious GitHub Issue Could Turn Google’s AI Agent Against Its Own CI/CD Pipeline
August 4, 2026 A first practical, real-world case of agent-to-agent exploitation inside a production multi-agent system, a novel attack class that turns one AI agent against another to compromise a …
Chinese Military Researchers Use AI Distillation to Train Drone and Battlefield Systems
Chinese military-linked researchers are studying ways to turn the outputs of advanced Western AI systems into smaller, cheaper models for drones, battlefield tools, cyber work, and public-security platforms. The concern …
Fake AI Tool Campaign Turns Developer Interest Into Enterprise Initial Access
August 4, 2026 A new malware campaign is turning interest in artificial intelligence tools into a route for enterprise intrusion. Attackers are cloning trusted GitHub projects, then hiding malicious files …
BINDCLOAK Steals Windows User and Process Tokens to Run Malware With Higher Privileges
August 4, 2026 A newly uncovered Windows backdoor is giving an East Asia-linked espionage operation a quiet way to deepen control inside targeted networks. Named BINDCLOAK, the modular implant is …
Apache NiFi Vulnerabilities Enable Authorization Bypass Attacks
Apache NiFi users should upgrade to version 2.11.0 after the project disclosed four security vulnerabilities affecting the NiFi Web API and Parameter Context authorization controls. The flaws could enable authorization …
Critical cPanel Vulnerability Allows Execution of SQL Commands as Root User
August 4, 2026 A critical privilege-escalation flaw in cPanel & WHM has been disclosed that could allow authenticated hosting users to execute arbitrary SQL commands with full database administrative privileges. …
North Korean Hackers Are Hiding Malware Servers Inside Empty Crypto Transfers
August 4, 2026 North Korean-linked attackers are using a new way to hide the servers that control malware. The method places a command server address inside an empty Ethereum transaction, …
Check Point Authentication Bypass Flaw Enables Full Compromise of Security Management System
August 4, 2026 Check Point has released security updates for a high-severity authentication-bypass vulnerability (CVE-2026-18574) that could allow attackers to compromise vulnerable Security Management environments fully. This issue affects both …