Critical SAP Vulnerabilities Let Attackers Inject Malicious Code and Corrupt Memory

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 SAP’s August 2026 Security Patch Day has delivered a substantial round of fixes, addressing 28 new security notes and one GitHub security advisory, alongside two updates to previously released notes. Released on August 11, 2026, this patch …

Hackers Can Turn Off Refrigeration While the Temperature Display Still Looks Normal

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Claroty Team82 has uncovered 23 vulnerabilities in Copeland’s XWEB Pro supervisory controllers, widely used to manage commercial refrigeration in supermarkets, warehouses, and hospitals. Of these, 21 are rated high severity, and together they allow an unauthenticated attacker …

Mozilla Revokes Firefox and Thunderbird Signing Key After Unencrypted Subkey Was Committed to GitHub

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Mozilla has rotated a GPG signing subkey used for selected Firefox and Thunderbird release artifacts after an unencrypted copy of the previous subkey was accidentally committed to a private GitHub repository. The exposed key was used to …

Plug and Pwn Attack Abuses Windows PnP Drivers to Gain SYSTEM With Zero Clicks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Plug and Pwn attack details that the Windows Plug and Play driver installation can lead to execution as NT AUTHORITYSYSTEM. The technique, published by researchers Alejandro Hernando and Borja Martínez, does not rely on a Windows kernel zero-day. …

Alert Fatigue Is Hitting US SOCs Hard: How to Cut Through the Noise 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

US SOC teams are dealing with a growing volume of alerts, while analyst time and security budgets remain limited. Too much of that time is spent checking signals that turn out to be low-risk, which slows investigations and makes it easier for serious …

Compromised FortiGate VPN Opens First Step in Multi-Network Polish Energy Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Poland’s energy sector attack has revealed how one compromised remote-access device can become the first step in a wider industrial intrusion. The campaign moved from a wind-farm network into a heat and power plant, turning trusted connectivity …

New ‘Ghostjacking’ Attack Lets Hackers Hijack AI Agents to Run Their Code on Developer Machines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 A new AI-agent attack technique called “Ghostjacking,” can trick coding agents into running attacker-controlled commands, changing cloud settings, stealing credentials, and creating persistent backdoors. The research was presented by Tenet Security at DEF CON 34 in Las …

Horizon3 Accelerates Partner-Led Growth with $20 Million Ecosystem Investment

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Horizon3 Accelerates Partner-Led Growth with $20 Million Ecosystem Investment Proactive AI-native security vendor Horizon3 has announced a major $20 million investment into its global partner ecosystem. The funding reinforces the company’s channel-first commercial strategy, which aims to …

Chinese-speaking Hacking Group Attacking Users With Fake DeepSeek Page to Deliver Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Chinese-speaking cybercriminals are using fake software pages that imitate popular artificial intelligence tools to infect Windows users with remote access malware. The campaign turns interest in DeepSeek into a trap, offering what looks like a normal download …

DeadLock Ransomware Stores C2 Configuration on Polygon Blockchain to Resist Takedowns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 DeadLock ransomware has emerged as a financially motivated threat that locks files while threatening to publish stolen information. First observed in July 2025, it had listed more than 80 alleged victims on its leak site by July …