Intelligence Insights: August 2026 | Red Canary
= trending up from previous month= trending down from previous month = no change in rank from previous month *Denotes a tie Four fresh faces:…
Month: August 2026
Critical Elementor Pro bug exposes WordPress sites to RCE attacks
A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code execution on the server. Identified as…
AWS Shows How to Stop a Hijacked AI Agent From Reading Data the User Cannot Access
Enterprises are racing to deploy AI agents that pull from databases, document repositories, SaaS platforms, and internal knowledge bases to automate workflows. But a quiet…
Black Hat 2026: The Supply-Chain Trust Series
Black Hat 2026 Series Introduction — Cyber Defense Magazine By Dr. Arun Lakhotia Black Hat 2026: The Supply-Chain Trust Series. This is the series home. It…
Why compliance does not guarantee cyber resilience
Cyber security has become one of the most audited and regulated areas of enterprise technology. Yet an organisation can satisfy every requirement on paper and…
New CRLF Desync Attack Lets Hackers Steal HTTPOnly Cookies and Hijack Accounts
Security researchers Tom Stacey from PortSwigger and Tobia Righi from TurtleSec have introduced a new category of HTTP request smuggling attacks known as “CRLF-Powered Desync…
Fake Gemini installer delivers Vidar infostealer via Google Colab lure
A malicious executable masquerading as a Google Gemini installer was used to deliver the Vidar infostealer on a company network in the EMEA region, according…
Twitch wants your content for Amazon AI training. Here’s how to opt out
The Dutch Autoriteit Persoonsgegevens (AP) has advised Twitch users to opt out of sharing data with Amazon AI. Twitch launched as a live-video platform and…
Rust Supply Chain Attack Puts Build-Time Malware in Crates with 245 Million Downloads
The Rust Project has deleted malicious versions of three widely used Rust crates from crates.io after a compromised maintainer account published releases that added a…
Starling Bank adds AI-powered skills to customer-facing chatbot
Starling Bank has introduced “smart tools”, a suite of artificial intelligence (AI) tools that act as skills for the Starling Assistant. The tools are being…
Superloop turning AI savings into security and compliance boost
Superloop has revealed that it has started diverting cost savings generated by its investments in AI-based customer service into other areas of its technology budget.…
Threat Actor Hacks 14,000 IP Cameras in Ukraine and Russia
A threat actor has conducted a mass-hacking campaign against Dahua IP cameras, compromising over 14,000 of them across Ukraine and Russia, Hunt.io reports. The activity,…