LiteLLM Supply Chain Attack Potentially Exposes 2,500 Companies and 434,000 CI/CD Pipelines

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 A LiteLLM compromise has raised concern over how a trusted AI software component can become an entry point into a network. The supply chain incident placed build systems, cloud accounts and source code at risk, although the …

CISA Warns of SonicWall SMA1000 Vulnerabilities Exploited in Attacks to Deploy Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The U.S. Cybersecurity and Infrastructure Security Agency warned that two SonicWall SMA1000 vulnerabilities, CVE-2026-15409 and CVE-2026-15410, are being exploited in ransomware attacks and have been added to its KEV catalog. CISA has also marked both vulnerabilities as known to be …

Hackers Actively Scanning to Exploit VMware VCenter Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Attackers are scanning VMware vCenter after critical vulnerabilities were disclosed, with DefusedCyber’s honeypots recording increased vCenter fingerprinting activity. The activity includes requests to the /sdk/ endpoint using RetrieveServiceContent and exploration of the /websso single sign-on path. The …

Abyssos RAT Includes RDPWrap-Related Module for Expanded Remote Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 A new remote access trojan called Abyssos lets attackers control infected Windows systems. The malware can steal credentials, collect files, and open remote viewing sessions, while its modular design allows operators to add functions after an infection. …

Multiple ClamAV Vulnerabilities Allow Remote Attacker to Trigger DoS Condition

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Cisco has disclosed multiple high-severity vulnerabilities in ClamAV that could allow unauthenticated remote attackers to disrupt antivirus scanning operations and cause denial-of-service conditions. The flaws affect the ClamAV parsers used by Cisco Secure Endpoint Connector on Windows, …

Anthropic to Add Invisible Watermarks to All Claude AI Outputs

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 Anthropic has announced plans to add invisible watermarks and signed metadata to content created by Claude AI. The move follows the company’s decision to sign the European Union AI Act’s Article 50(2) Code of Practice on Transparency …

New Phishing Attack Leverage SSL/TLS Certificates to Target High-value Brands Customers Via Whatsapp

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 A phishing operation is using web certificates and chosen web addresses to target customers of high-value brands through WhatsApp. The activity is designed to make fraudulent pages look normal at a glance, turning a familiar security signal …

OpenAI Expands Daybreak Cyber with GPT-5.6 for Exploit Validation, Pentesting, and Red Teaming

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 11, 2026 OpenAI has expanded its Daybreak program to give vetted security defenders deeper access to frontier AI models, introducing two access tiers—Daybreak Blue and Daybreak Red—alongside a new specialized model, GPT-5.6-Cyber, purpose-built for exploit validation, vulnerability research, and …

Gunra Ransomware Exploits Fortinet VPN Flaws to Bypass MFA and Steal Enterprise Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 A joint cybersecurity advisory from the FBI, CISA, the Department of Defense Cyber Crime Center, the NSA, the U.S. Secret Service, and South Korea’s National Police Agency has exposed a dangerous new wave of attacks by the …

HP ThinPro TPM Disk Encryption Flaw Lets Attackers Extract LUKS Keys

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

August 10, 2026 A security researcher has disclosed a boot-chain weakness in HP ThinPro 8 and 9 that could allow attackers with physical access to a thin client to extract its LUKS disk-encryption key. The issue affects HP thin clients …