GitLab administrators are being urged to patch immediately after security researchers observed attempts to exploit CVE-2026-19478, a critical…
Australian hotel chain leaks guests’ PII after breach at third-party database operator
Unknown parties know where you stayed last summer, down under, across 120 Quest properties
US Bank Investigating Data Breach Following LockBit Ransomware Claim
US Bank is investigating LockBit’s claims of a breach and data theft, with the ransomware group threatening to publish the alleged stolen files on…
OpenAI’s overhead will rise 20 percent for some workloads as it hardens security
Expanded multistage chain of thought monitoring makes frontier model work more expensive
Claude Opus 5 Routes Around Obfuscated Binaries Instead of Defeating the Protection
Claude Opus 5 did not crack hardened binaries in a reverse-engineering experiment. Instead, it sought easier ways to recover hidden information, showing…
Scammers Use WhatsApp Groups to Coordinate Millions in Victim Trades and Pump Real Stocks
Scammers are using WhatsApp groups to turn ordinary investors into an unwitting buying force. The operation does not need a hacked trading account or a…
Critical WordPress Plugin Vulnerability Exposes Sites to RCE Attacks
A critical security flaw in the Elementor Pro WordPress plugin could allow unauthenticated attackers to upload malicious PHP files and execute code on…
AI Proves Decades-Old Math Problems With Machine-Checkable Results
The cost of generating new results on some of mathematics’ long-standing open problems has dropped dramatically, with OpenAI claiming that its Astra model…
Hackers Hide Agent Tesla JScript Behind Unicode Emojis to Evade Detection
Hackers are using Unicode emoji characters to hide an Agent Tesla JScript dropper in a business email compromise campaign aimed at finance teams. The…
100,000 WordPress Sites Affected by Privilege Escalation Vulnerability in Pods WordPress Plugin
On August 10th, 2026, we received a submission for an Unauthenticated Privilege Escalation vulnerability in Pods, a WordPress plugin with more than…
Chinese Hackers Use AI Agents to Exploit Web Servers and Automate Attacks
A Chinese-speaking cybercrime group is using AI-assisted tools to turn vulnerable web servers into entry points. It shows how familiar flaws become more…
IT Security News Hourly Summary 2026-08-21 18h : 10 posts
10 posts published in the last hour 15:31In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug 15:31Phishing-as-a-Service Is Turning Credential Theft Into a Scalable Cybercrime Business 15:31Defense contractors’ CMMC confidence lags, even…
In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug
Other noteworthy stories that might have slipped under the radar: Threema DDoS attack, Evooo1Bot Linux botnet, Crypto4A secures top-tier NIST…
Phishing-as-a-Service Is Turning Credential Theft Into a Scalable Cybercrime Business
Phishing is no longer limited to technically skilled criminals building fraudulent campaigns from scratch. Through phishing-as-a-service (PhaaS),…
Defense contractors’ CMMC confidence lags, even as self-assessments improve
A “confidence disconnect” is plaguing the industry, a consulting firm said.
Malware Attacks Google-Synced Passkeys
Security researchers have uncovered three attack techniques that could allow malware on compromised Windows computers to abuse passkeys synchronized…
Microsoft confirms maximum severity flaw in Entra ID targeted for exploitation
The company said the remote-code execution vulnerability has been fully mitigated and no further action is necessary.
BTMOB Android RAT Ecosystem Expands With Resellers, Source-Code Sellers and Impersonators
The Android remote access trojan known as BTMOB most likely began as a centralized malware-as-a-service operation but transformed into a wider ecosystem,…
Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini
Researchers say the new ‘Cryptographic Context Injection’ technique conceals malicious instructions until they are decrypted inside a trusted execution…
Hackers poison popular Rust crates to steal developers’ credentials
Malicious updates turned routine builds into a delivery system for infostealer malware
Zombie Card: An expired Visa credit card can be used for purchases
Scientific research showed that the expiration date on some Visa credit cards can be manipulated in so-called Zombie Card attacks.
IT Security News Hourly Summary 2026-08-21 17h : 10 posts
10 posts published in the last hour 14:31Federal Agencies Warn of Active Attacks on Siemens Industrial Controllers 14:31The Expiry Illusion: Why Fresh Evidence Can Still Be Wrong 14:31Inside NIST SP 1353: The New Quick-Start Guide for AI-Powered CSF Analysis 14:31Alation…
Federal Agencies Warn of Active Attacks on Siemens Industrial Controllers
Evolving Threats to Industrial Systems The recent joint advisory issued by federal agencies highlights a concerning escalation in how threat actors target…
The Expiry Illusion: Why Fresh Evidence Can Still Be Wrong
In discussions about safety, assurance, and governance, evidence is often treated as a matter of age. A certificate issued ten years ago is viewed…