The Cybersecurity Apocalypse Is Coming in ‘Months,’ AI Giants Warn
You may have noticed that Flock Safety’s automatic license plate reader cameras—and the cops who misuse them—are getting a lot of coverage lately. This week,…
Month: August 2026
Critical Gogs Flaw Enables Remote Code Execution Through Path Traversal
A critical vulnerability in Gogs, the self-hosted Git service, could allow authenticated attackers to execute commands on the server by abusing path traversal during creation.…
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following…
Hasbro Data Breach Exposed Employee Personal Information
Toy and game giant Hasbro is notifying employees that their personal information may have been compromised in a data breach. The notifications sent to affected…
Hack One Robot, Reach the Next: Unitree G1 Security Flaws
Hack One Robot, Reach the Next: Unitree G1 Security Flaws Pierluigi Paganini August 29, 2026 A researcher chained two Unitree G1 flaws to gain root…
OpenPrinting CUPS Vulnerabilities: Analysis of related CVEs
The security researcher Simone Margaritelli (evilsocket), disclosed details of several vulnerabilities impacting CUPS and IPP packages: CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, and CVE-2024-47177. These vulnerabilities are unlikely…
UEBA & entity analytics: Why entity record quality matters
There’s an uncomfortable truth in security analytics that nobody talks about at conferences: The quality of your detections, alerts, and investigations is only as good…
68-year-old imprisoned after making $1.3 million by pirating IPTV services
A 68-year-old has been sentenced in the U.K. to more than six years in prison for operating an illegal IPTV (Internet Protocol Television) service that…
Malvertising Is Moving From Deceptive Content to Weaponized Infrastructure
Malvertising is becoming harder to identify by looking at the ad itself. A growing share of malicious advertising activity now depends on what happens after…
The Artificial Adversary – Cyber Defense Magazine
Cybersecurity has spent decades focused on the human adversary. We built models for nation-state actors, cybercriminal gangs, insiders, access brokers, ransomware affiliates, and fraud operators.…
Hackers Compromise TanStack Query npm Package to Steal Developer Credentials
A supply-chain worm has compromised multiple releases of @7nohe/openapi-react-query-codegen, an npm package that generates type-safe TanStack Query hooks. Aikido Security said it identified 10 malicious…
Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers
Ravie LakshmananAug 28, 2026Cellular Security / Encryption Google on Thursday announced new network security protections in Android 17 to bolster connection privacy, address cellular vulnerabilities,…