The Outsized Shadow: Why 5% of AI Users Are Your Biggest Security Risk

August 24, 2026 at 05:00PM Big security risks come in small packages. While enterprise security teams focus on policing the proli…

UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit

August 24, 2026 at 01:38PM Cybersecurity researchers have disclosed details of a Chinese-speaking cybercrime group dubbed UAT-101…

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

August 22, 2026 at 08:02PM The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 mil…

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

August 22, 2026 at 12:23AM Cybersecurity researchers have discovered a set of trojanized npm packages that masquerade as working …

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution

August 21, 2026 at 11:36AM Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exp…

Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads

August 21, 2026 at 01:52AM The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after …

Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts

August 21, 2026 at 01:29AM Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitim…

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

August 20, 2026 at 10:53PM A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. S…

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

August 20, 2026 at 02:12PM A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masq…

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

August 20, 2026 at 11:34AM Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plu…

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

August 19, 2026 at 11:36PM OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artifici…

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

August 19, 2026 at 11:09AM A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in …