Veracode finds that AI-generated code remains vulnerable despite near perfect syntax performance.
OpenAI Discloses AI Agent Breached Hugging Face and Accessed Four Other Services
OpenAI has disclosed that an autonomous AI agent involved in an internal cybersecurity evaluation accessed four accounts across four publicly available…
Critical Adobe ColdFusion Vulnerabilities Allow Attackers to Execute Arbitrary Code
Adobe has issued critical security updates for ColdFusion 2025 and ColdFusion 2023, addressing multiple vulnerabilities that could allow threat actors to…
IT threat evolution in Q2 2026. Mobile statistics
This report contains mobile threat statistics for Q2 2026, along with noteworthy discoveries and quarterly trends: the Anatsa banker and a transition to…
Eclipse Ransomware Launches RaaS Platform Targeting Windows, Linux, and ESXi Infrastructure
A threat actor operating under the handle EclipseSupport is actively promoting a new Ransomware-as-a-Service (RaaS) operation named Eclipse Ransomware on…
Hackers abuse AI models to find new entry paths
Network defenders are racing to secure their IT systems before criminal and state-actors circumvent existing guardrails.
WhatsApp Unveils New Scam Alert Feature to Protect Users from Social Engineering Attacks
WhatsApp has announced a new optional feature called Scam Alert, designed to warn users about potential scam messages using an on-device machine learning…
IT Security News Hourly Summary 2026-08-12 18h : 17 posts
17 posts were published in the last hour 15:31 : Cisco says software vulnerability could let hackers crash firewalls 15:31 : After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug 15:31 : US Sanctions Iranian…
Cisco says software vulnerability could let hackers crash firewalls
Threat actors have already begun exploiting the flaw, according to the U.S. government.
After Microsoft threatened legal action, a security researcher publishes a new Windows zero-day bug
This is the latest zero-day released by security researcher Nightmare Eclipse, despite Microsoft publicly threatening to take legal action against them.
US Sanctions Iranian $6bn Crypto “Exchange” Shelbit
TRM Labs explains that sanctioned Iranian firm Shelbit was a fake crypto exchange
Google Chrome 151 Patches Five High-Severity Use-After-Free Flaws in V8, Blink, and Extensions
Google has officially released Chrome 151 to the Stable channel, mitigating five high-severity security vulnerabilities impacting key browser engine…
SharePoint Vulnerability Exploited Shortly After PoC Release
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
“Zoomsday” flaws could let one Zoom participant attack another
Update Zoom now to protect against critical vulnerabilities that could allow an attacker in the same meeting to run malicious code on your device.
DeepSeek Restarts Second Funding Round
AI start-up reportedly recommences second funding round, seeking funds for data centre investment, at valuation of nearly $74bn
WindRelay Malware Pairs With SpyNote RAT in Live-Call Scam
New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call
Vega Introduces Detection Skills, The New Open Standard for AI Reasoning in Agentic Cyber Defense
Vega, the pioneer of Agentic Cyber Defense, today launched Detection Skills: an open standard that redefines security operations for the AI era. The…
737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One
A massive set of 737 free VPN and proxy extensions have been found to mainly target Russian-speaking users seeking access to blocked services with an aim…
Uber Freight keeps on trucking after extortion crew breaks in
Helix claims nearly a million files, while the logistics biz says operations never hit the brakes
Hackers Actively Exploiting VMware vCenter Systems to Gain and Maintain Remote Access
An active cyberattack campaign targeting internet-accessible VMware vCenter instances. QUIRSO researchers uncovered evidence that advanced persistent…
Nscale May Hold IPO In September – Report
London-based data centre start up reportedly says it has $51bn in contracted revenue, could make US market debut as early as September
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials
Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro (“solidity-pro”) that has been…
737 Fake Chrome VPN Extensions Hijack Browser Traffic Through Attacker-Controlled SOCKS5 Proxies
Hundreds of Chrome extensions advertised as free VPN or proxy tools have been tied to a large traffic-redirection operation. The listings promised privacy…
Make-Up Robot Prototype Wins Top Hackathon Prize
Robot arm prototype that accepts voice controls, applies make-up to a person’s face on a daily schedule takes award at Hong Kong event