NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs
NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs Pierluigi Paganini August 20, 2026 NSA, CISA, FBI, DOE, and…
Month: August 2026
Early 764 member sentenced to 77 years, longest prison term to date for a nihilistic violent extremist
An original member of 764 and leader of one of its offshoots was sentenced to 77 years in prison, the longest imprisonment ever imposed on…
More than 153,000 students, staff affected in Canvas data breach: privacy watchdog
More than 153,000 students and staff from four tertiary institutions in Hong Kong have been affected by a data breach on the online learning management…
ACSC warns of active exploitation targeting N-able N-central in Australia
The Australian Cyber Security Centre (ACSC) has issued a high alert warning that it is aware of active exploitation in Australia of vulnerabilities affecting N-able…
Critical flaw patched in popular JavaScript sandbox used in AI projects
A critical sandbox escape vulnerability was discovered and patched in isolated-vm, a library for running JavaScript code inside an isolated process. If exploited, the vulnerability…
Someone targeted security researchers using a fake crypto conference as a lure
If you are a malicious hacker, cybersecurity professionals may very well be the worst people in the world to try to hack, as there is…
Grok exfiltrates user data when malicious instructions are encrypted
Adversa used a similar technique in a Gemini jailbreak attack, meaning making the Google LLM ignore its internal safety rules. Here, the ciphertext was decrypted…
From all-or-nothing to task-based OAuth consent
Since June, developers have created thousands of third-party OAuth apps on Cloudflare, with more than a million authorizations since. OAuth makes delegated access possible. It…
From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS
Acknowledgments: Special thanks to Bryan Masters and Stuart Ashenbrenner for their contributions to this investigation and write–up. TL;DR: If you’re running Screen Sharing on macOS…
Hackers poison arrayref Rust crate to push infostealer malware
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers’ systems during compilation. Within a 23-minute…
CRLF-Powered Desync Lets Attackers Poison CDN Cache and Serve XSS to Live Users
A limited CRLF injection flaw can be escalated into a severe HTTP desynchronization attack, poisoning CDN caches and delivering XSS payloads to users on legitimate…
Inside A CISO’s Playbook: What Agentic Security Looks Like In Practice
Cyberhaven’s Office of the CISO is setting a higher standard for cybersecurity by embracing a new paradigm: autonomous, agent-driven security. Faced with an ever-widening gap…