A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more …
Vanta Stealer Empties Browser Vaults, Crypto Wallets and Gaming Accounts in Minutes
August 6, 2026 Vanta Stealer is a newly analyzed information-stealing malware built to strip valuable data from an infected computer quickly. It reaches far beyond saved browser passwords, pulling cookies, …
Critical Flaws in Anthropic, Google, and OpenAI’s Coding Agents Enable RCE and Supply Chain Attacks
August 6, 2026 Critical Flaws in Anthropic, Google, and OpenAI’s Coding Agents Enable RCE and Supply Chain Attacks A repeatable vulnerability pattern across AI coding agents from Anthropic, Google, and …
Hackers Can Leverage WSUS Servers to Deliver Malware and Compromise Enterprise Endpoints
August 6, 2026 Critical Flaws in Anthropic, Google, and OpenAI’s Coding Agents Enable RCE and Supply Chain Attacks A novel attack chain that allows adversaries to hijack Windows Server Update …
Top 10 Best Intrusion Detection & Prevention (IDS/IPS) Tools in 2026
August 6, 2026 An IDS detects malicious activity and alerts; an IPS sits inline and blocks it. Cisco Secure IPS is our top pick for 2026 on the strength of …
Critical Paperclip Vulnerabilities Allow Attackers to Gain Admin Access
Critical vulnerabilities have been disclosed in Paperclip, an AI agent orchestration platform, that could allow attackers to gain administrative access and execute commands on affected servers. The most severe flaw, …
One Fake Movie Download Can Expose Passwords, Payments and Crypto Assets
August 6, 2026 Cybercriminals are weaponizing pirated downloads of the blockbuster theatrical release “The Odyssey (2026)” to deliver Lumma Stealer. This prolific information-stealing malware quietly strips compromised systems of saved …
Hackers Hid a Remote-Control Toolkit Inside Oracle to Take Over a Windows Server
August 6, 2026 A routine web application weakness has been tied to a serious Windows Server compromise after attackers used SQL injection to plant a remote-control toolkit inside an Oracle …
Public PoC Released for Linux Kernel Bridge Use-After-Free Vulnerability
August 6, 2026 A public proof-of-concept has been released for a use-after-free flaw affecting the Linux kernel’s bridge subsystem, specifically its Spanning Tree Protocol implementation in net/bridge. The issue can …
Critical Jenkins Vulnerability Allows Attackers to Execute Malicious Code on Controller
August 6, 2026 Jenkins has disclosed a critical security vulnerability that could allow attackers to execute malicious code on a Jenkins controller by bypassing a security filter used in agent-to-controller …