Certighost and the Privilege Hiding in Your Certificate Authority
Author: Len Noe, Solutions Architect, BeyondTrust Every mature Active Directory environment has a component that quietly holds more power than the people running it usually…
Month: August 2026
Critical GitLab GraphQL Vulnerability Allow Attackers to Delete Public Projects
GitLab has released urgent security updates to fix a critical GraphQL vulnerability that could allow unauthenticated attackers to modify or delete public projects and user…
Hackers Turn Claude Code and Codex Into AI-Powered Tools for Credential Theft and Cloud Attacks
Threat actors are increasingly using coding assistants as operational tools. Detailed research from Gambit Security highlights three campaigns where Claude Code, OpenAI Codex, and large…
Google’s open-source HEIR lets AI work with data it can’t see
Google’s researchers and engineers developed the Homomorphic Encryption Intermediate Representation (HEIR) compiler project, an open-source compiler toolchain and development platform for homomorphic encryption. It can…
A week in security (August 10 – August 16)
Last week on Malwarebytes Labs: Apple now uses iPhone alerts for targets of mercenary spyware WhatsApp is testing a new warning for scam messages New…
Forminator WordPress Flaw Can Enable Unauthenticated RCE via Malicious PHP Uploads
Ravie LakshmananAug 17, 2026Vulnerability / Website Security A critical security flaw has been disclosed in Forminator Forms, a WordPress plugin with more than 600,000 active…
CBA upgrades its third-party risk management
In summary CBA is five to six weeks from migrating 5000 suppliers onto ServiceNow’s third-party risk management platform, completing a shift that began with non-supplier…
Recent macOS Screen Sharing Vulnerability Exploited in Attacks
Threat actors are exploiting a recently patched macOS vulnerability to gain root access and deploy cryptominers. The exploited bug, tracked as CVE-2026-65400, is a high-severity…
Akira Ransomware Uses Safe Mode to Bypass EDR
Akira Ransomware Uses Safe Mode to Bypass EDR Pierluigi Paganini August 17, 2026 Akira attackers used Safe Mode to disable EDR before deploying ransomware, but…
Fix Execution, Not the SOP
AI is multiplying the problem of us having far too many inputs. I’m becoming viscerally aware of the fact that I already know what to…
Irregular says ‘human oversight’ responsible for AI sandbox escape incidents
A company that runs AI testing labs involved in a series of breaches carried out by Anthropic and OpenAI’s cyber-focused models said the incident happened…
Zhipu AI’s answer to Project Glasswing marks shift for Chinese cyber safety: researcher
Zhipu AI’s launch of China’s first answer to Project Glasswing signals a shift in how the country’s top artificial intelligence labs approach global cybersecurity, according…