Safepal Confirm Hackers Gained Access to Customer Order Information

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 SafePal has confirmed a security incident in which unauthorized parties accessed customer order information through a flaw in an order-tracking plug-in. The company said the incident affected approximately 39,798 customers who placed orders between March 2, 2025 …

Apple Screen Sharing Vulnerability Exploited to Execute Command as Root

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 17, 2026 A newly disclosed logic flaw in macOS Screen Sharing shows how a feature meant only to grant screen-viewing access can be twisted into a path for full root command execution. The issue, tracked as CVE-2026-43760, affects the …

Cyber Security Weekly Newsletter – Outlook RCE, Palo Alto, Cisco 0-day and Windows 0-Day Flaws +20 Stories

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

This week’s roundup covers a record-setting Microsoft Patch Tuesday, an actively exploited Cisco firewall zero-day, a Lazarus-linked Windows kernel bug, and critical flaws across TP-Link, Palo Alto Networks, Fortinet, and VMware — plus a first-of-its-kind autonomous AI agent “hack” and …

Microsoft Begins to Merge Consumer and Enterprise Copilot Apps to Make New Super App

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 16, 2026 Microsoft is moving closer to a unified Copilot experience by merging key elements of its consumer AI assistant with the Microsoft 365 productivity environment. The change positions Copilot as a single application for personal tasks, workplace productivity, …

AWS Certificate Manager to Discontinue Email Validation for Public Certificates

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 16, 2026 AWS Certificate Manager to Discontinue Email Validation for Public Certificates AWS Certificate Manager (ACM) has announced plans to permanently discontinue email-based domain control validation (DCV) for public certificate renewals by September 30, 2027. The deprecation aligns AWS …

McDonald’s, Vodafone Hit by Azure Credential Theft Campaign Exposing Millions of Enterprise Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 16, 2026 A sprawling Azure data exfiltration campaign is unfolding across the dark web, with a threat actor systematically selling off internal employee directories stolen from some of the world’s largest corporations. The seller, operating under the alias “TheHatman,” …

Post-Hugging Face Reflections: The Agentic Attacker Is Already Here 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Bill Robbins, CEO of Menlo Security  An AI agent broke out of the sandbox built to contain it and put itself on the open internet. Then it attacked another company. The attack wasn’t executed by a human. Instead, the AI agent …

Hackers Started to Exploit Critical SAP Commerce Cloud, Still No Public PoC

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Threat actors have begun actively probing and attempting to exploit a maximum-severity flaw in SAP Commerce Cloud, just three days after official security fixes were released. Defused honeypot telemetry captured the first wave of unauthenticated remote-execution traffic …

Shell Investigating Data Breach Following Cl0p Ransomware Group Claim

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Multinational energy giant Shell has launched an active investigation after the notorious Cl0p ransomware syndicate claimed responsibility for exfiltrating sensitive internal data. Security researchers and enterprise defenders are closely monitoring the situation as forensic teams work to …

Microsoft to Make Passkeys Default in Entra ID and Retires SMS and Voice Authentication

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 15, 2026 Microsoft will make passkeys the default authentication experience in Microsoft Entra ID as part of a broader move away from phishing-prone sign-in methods. The company will also retire Microsoft-provided SMS and voice authentication for multifactor authentication, pushing …