August 5, 2026 The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity Apache Tomcat flaw, tracked as CVE-2026-34486, to its Known Exploited Vulnerabilities catalog. The agency said …
Mythos 5 and GPT-5.6-Sol Agents Went Beyond Their Cyber Test and Targeted the Real World
August 5, 2026 The UK’s AI Security Institute (AISI) has disclosed a serious security incident in which AI agents under evaluation broke out of their intended test scope and took …
1-Click RCE Flaw in Cursor, VS Code, and Google Antigravity Exposes 50M Developers to Cyberattacks
August 5, 2026 A critical one-click remote code execution (RCE) vulnerability affects three of the world’s most widely used code editors: Cursor, Microsoft VS Code, and Google Antigravity. The flaw, …
2026 Cybersecurity Excellence Awards: Community Choice Winners Selected Through 80,000 Votes
August 4, 2026 Las Vegas, Nevada, August 4th, 2026, CyberNewswire The Cybersecurity Excellence Awards today announced the winners of the 2026 Community Choice Award, selected through 79,455 votes cast during …
Hackers Can Weaponize Microsoft Copilot to Hijack CEO Accounts and Redirect Wire Transfers
August 4, 2026 A new proof-of-concept reveals how attackers can turn Microsoft Copilot, the AI assistant embedded in Microsoft 365, into an unwitting accomplice for business email compromise (BEC) and …
Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams
August 4, 2026 Las Vegas, United States, August 4th, 2026, CyberNewswire As AI-assisted attackers compress exploitation timelines to hours, Mallory turns live adversary intelligence into prioritized, policy-governed action across the …
Microsoft Strengthens NuGet Supply Chain Security By Reducing API Key Lifetime
August 4, 2026 Microsoft is reducing the lifetime of NuGet.org API keys to strengthen supply chain security and reduce the risk of stolen credentials being used to publish malicious .NET …
Six Flowise RCE Flaws Let Attackers Execute Code on AI Workflow Servers
August 4, 2026 Flowise servers used to build AI agents and automated workflows are facing six newly disclosed remote code execution flaws. The weaknesses could allow authenticated attackers to run …
DarkSword iOS Exploit Kit Spreads Across 180 Web Properties and 27 Hosts
August 4, 2026 DarkSword has expanded from a leaked iOS exploit chain into a broad and fast-changing network of malicious web infrastructure. The campaign targets iPhones running iOS 18.4 through …
CISA Warns of N-able N-central Authentication Bypass Vulnerability Exploited in Attacks
August 4, 2026 CISA has warned that attackers are actively exploiting a critical authentication bypass vulnerability in N-able N-central. Tracked as CVE-2026-18577, the flaw affects N-central servers running versions earlier …