ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw
Microsoft Defender’s latest patch bypass shows a familiar problem. A newly disclosed Microsoft Defender flaw called ShieldBreak shows that fixing one attack path doesn’t always…
Author: Cybernoz
How MCP Servers Can Expose Enterprise Secrets
The Hacker NewsAug 17, 2026AI Security / Identity Security MCP servers can expose enterprise secrets through plaintext configuration files, over-permissioned access and prompt injection, often…
Natural History Museum’s ‘living laboratory’ logs 11 million environmental records in first year
The Natural History Museum’s (NHM’s) “living laboratory” garden has collected more than 11 million environmental data records in its first year, feeding readings from more…
680,000 Impacted by French Tax Authority Data Breach
France’s Directorate General of Public Finances (DGFiP) has disclosed a data breach impacting approximately 680,000 individuals. The incident was disclosed after a threat actor boasted…
McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen
McDonald’s Employee Data Appears in Leak, Seller Claims 1.7M Records Stolen Pierluigi Paganini August 17, 2026 A seller claims 1.7M McDonald’s employee records were stolen…
Zhipu says new coding AI developed advanced cyber skills faster than expected
“After expert review, screening, and deduplication, the model identified 2,436 vulnerabilities across 269 projects, including 1,097 medium-to-high severity issues,” the statement added. The findings cover…
The Closed Loop Remediation Playbook with Wiz
As response windows shrink due to AI-powered exploitation, security teams need to get three historically difficult challenges right: discovering risk, prioritizing it, and fixing it…
Windows Server 2022 reaches end of mainstream support in 60 days
Microsoft has reminded IT administrators that Windows Server 2022 is rapidly approaching its mainstream end date of October 2026, when it will switch to extended…
Threema Secure Messaging Service Hit by Massive DDoS Attack
Threema, a privacy-focused secure messaging service, was hit by a series of large-scale distributed denial-of-service (DDoS attacks) that temporarily disrupted access for users. The incidents…
Misconfigured Microsoft Power Pages Likely Exposed 27 Million Records to ExfilSquad
A suspected Microsoft Power Pages configuration failure has been linked to the exposure of roughly 27 million records across 13 organizations, after the data-extortion group…
SafePal breach affects 39,798 customers, data allegedly for sale
Cryptocurrency wallet maker SafePal disclosed a data breach that exposed order information for 39,798 customers, including names, email addresses, shipping addresses, phone numbers and purchase…
Update your Mac: Screen Sharing vulnerability exploited in the wild
The Dutch National Cyber Security Centre (NCSC) issued a warning after being notified of several incidents where a vulnerability in Apple’s Screen Sharing feature was…