Reverse-Lookup Service Exposed Millions of Photos of People’s Faces
When someone uploads a photo to the people-search tool ClarityCheck, the website has a clear message: “Your reverse image search is private and secure.” New…
Month: August 2026
659 Stripe Merchant API Keys Leaked Online, Exposing 688,000 Customer Records
A data leak published on a cybercrime data-trading forum has exposed live Stripe API credentials for 659 merchant accounts, along with approximately 35 GB of…
Medusa ransomware gang has hit over 500 organizations, CISA warns
Medusa ransomware has breached more than 500 organizations since it first appeared in June 2021, the FBI, CISA, and the Department of Health and Human…
Update Chrome now: Two critical vulnerabilities fixed
Chrome is rolling out an update for its desktop versions. The update includes 15 security fixes, two of which address critical buffer overflow vulnerabilities. The…
Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure
Microsoft Defender Experts have linked more than 30 web domains to MacSync Stealer, a macOS-focused information stealer, after correlating recurring endpoint and network behaviors across…
How can the UK plan rationally for its AI datacentre future?
What does it mean for a nation to plan rationally for its digital backbone? As artificial intelligence and cloud services become deeply embedded across every…
GitLab Patches Critical CVE-2026-19478 Code Injection Flaw
GitLab has patched two security flaws, including CVE-2026-19478, a critical code injection vulnerability that could allow unauthenticated attackers to remotely modify or delete public projects…
UT San Antonio Cyber Incident Delays Fall Classes
UT San Antonio cyber incident response efforts have prompted the university to delay the start of fall classes by three days, with the semester now…
Google to buy Spirit Airlines’ business data for US$10 million
Key points Google is acquiring internal business data from bankrupt Spirit Airlines for US$10 million ($14 million) to use for product development and AI training.…
943 Patches Rolled Out With Oracle’s August 2026 Security Update
Oracle on Tuesday announced the release of 943 new security patches as part of the August 2026 Critical Security Patch Update (CSPU), its third monthly…
Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains
Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains Pierluigi Paganini August 19, 2026 Microsoft tracked over 30 MacSync Stealer domains by focusing on…
Shadow IT Security and why visibility beats another approval process
A staging site is meant to last a week, but six months later, it still resolves on a company subdomain, runs an old framework, and…