Microsoft Begins to Merge Consumer and Enterprise Copilot Apps to Make New Super App

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 16, 2026 Microsoft is moving closer to a unified Copilot experience by merging key elements of its consumer AI assistant with the Microsoft 365 productivity environment. The change positions Copilot as a single application for personal tasks, workplace productivity, …

AWS Certificate Manager to Discontinue Email Validation for Public Certificates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 16, 2026 AWS Certificate Manager to Discontinue Email Validation for Public Certificates AWS Certificate Manager (ACM) has announced plans to permanently discontinue email-based domain control validation (DCV) for public certificate renewals by September 30, 2027. The deprecation aligns AWS …

McDonald’s, Vodafone Hit by Azure Credential Theft Campaign Exposing Millions of Enterprise Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 16, 2026 A sprawling Azure data exfiltration campaign is unfolding across the dark web, with a threat actor systematically selling off internal employee directories stolen from some of the world’s largest corporations. The seller, operating under the alias “TheHatman,” …

Post-Hugging Face Reflections: The Agentic Attacker Is Already Here 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Bill Robbins, CEO of Menlo Security  An AI agent broke out of the sandbox built to contain it and put itself on the open internet. Then it attacked another company. The attack wasn’t executed by a human. Instead, the AI agent …

Hackers Started to Exploit Critical SAP Commerce Cloud, Still No Public PoC

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Threat actors have begun actively probing and attempting to exploit a maximum-severity flaw in SAP Commerce Cloud, just three days after official security fixes were released. Defused honeypot telemetry captured the first wave of unauthenticated remote-execution traffic …

Shell Investigating Data Breach Following Cl0p Ransomware Group Claim

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Multinational energy giant Shell has launched an active investigation after the notorious Cl0p ransomware syndicate claimed responsibility for exfiltrating sensitive internal data. Security researchers and enterprise defenders are closely monitoring the situation as forensic teams work to …

Microsoft to Make Passkeys Default in Entra ID and Retires SMS and Voice Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Microsoft will make passkeys the default authentication experience in Microsoft Entra ID as part of a broader move away from phishing-prone sign-in methods. The company will also retire Microsoft-provided SMS and voice authentication for multifactor authentication, pushing …

VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 14, 2026 Selidan, USA, August 14th, 2026, CyberNewswire New report examines suspicious Reddit activity, coordinated YouTube content and BBB Scam Tracker entries influencing how the vehicle history platform appears across Google and AI systems VINclarity has published a new …

Multiple TP-Link Vulnerabilities Allow Attackers to Bypass Authentication and Escalate Privileges

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 14, 2026 TP-Link has disclosed multiple high-severity vulnerabilities affecting ISP-managed Aginet networking products, including mesh systems, routers, PON devices, and xDSL modems. The flaws could allow attackers with network access to bypass authentication, escalate privileges, steal sensitive information, read …

Bring Your Own EDR Attack Turns SentinelOne Into PPL-Protected Trojan Horse to Shield Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 14, 2026 A “Bring Your Own EDR” attack abuses trusted SentinelOne components to turn endpoint protection into a powerful malware shield. The research was presented at DEF CON 34 in Las Vegas, and SentinelOne fixed the reported issue in …