TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore
The threat actor known as Head Mare has been observed weaponizing security flaws in unpatched TrueConf servers once again in attacks targeting Russian companies spanning…
Month: August 2026
Security Affairs newsletter Round 590 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 590 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini August 16, 2026 A new round of the weekly Security Affairs newsletter…
Welcoming Our New CFO & President
Today the Wiz executive team expands as we officially welcome its newest member: Fazal Merchant, who joins as CFO & President. 2024 brought so many…
AI ‘watermark removers’ flood the web. Almost none can prove they work.
A market for removing AI watermarks has sprung up days after Anthropic disclosed switching on invisible marks in everything Claude writes, spanning a GitHub project…
New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the cryptography they rest on. Passkeys are designed to replace reusable…
Sophisticated Cyberattack Exposes Data of 678,000 French Taxpayers
Sophisticated Cyberattack Exposes Data of 678,000 French Taxpayers Pierluigi Paganini August 16, 2026 France’s tax agency says hackers stole data on 678,000 taxpayers, including income…
Wiz Research Identifies Exploitation in the Wild of Aviatrix Controller RCE (CVE-2024-50603)
Updated on 2025-01-19 to include additional investigation findings related to Sliver and Mirai infections. CVE-2024-50603 is a critical code execution vulnerability impacting Aviatrix Controller with…
Microsoft patches LegacyHive Windows zero-day vulnerability
Microsoft has released security patches to address a Windows zero-day vulnerability known as “LegacyHive,” disclosed after the July 2026 Patch Tuesday. The security flaw was…
Dysphoria Botnet Turns Compromised Routers and Cameras Into DDoS Bots and C2 Relay Nodes
Dysphoria has turned a large number of everyday internet-connected devices into a potential attack network. The botnet is linked to roughly 296,000 compromised devices, placing…
New Bring Your Own EDR Attack Turns SentinelOne Into Trojan Horse to Bypass Windows PPL
Security researchers have introduced a new technique called “Bring Your Own EDR” (BYOEDR) that exploits legitimate SentinelOne components to bypass Windows Protected Process Light (PPL)…
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
Ravie LakshmananAug 11, 2026Supply Chain Attack / Vulnerability Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content…
There Is Only One Technology
Had a thought about technology yesterday: The moment we used plant twine to attach a chipped stone to a stick, AI became inevitable. There is…