Vengeful researcher drops ShieldBreak Windows zero-day on Patch Wednesday
In summary Nightmare Eclipse has released a proof of concept called ShieldBreak, a zero-day flaw in Defender that allows privilege escalation to SYSTEM with no…
Author: Cybernoz
WordPress 7.0.4 Patches Remote Code Execution Vulnerability
WordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely. Tracked as CVE-2026-65640 (CVSS score of 8.8),…
U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 13, 2026 U.S. Cybersecurity and Infrastructure…
US government will let private companies hack criminal gangs
The new program, meant to aggressively disrupt costly cybercrime schemes, carries numerous legal and security risks. Source link
A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.
A newly-signed presidential memorandum enlisting private sector companies in federal law enforcement hacking operations against criminal organizations could present a number of legal, practical and…
Attackers target zero-day vulnerability in geospatial data platform GeoServer
If the database runs with administrator permissions on Microsoft SQL Server, the account also has the ability to execute commands on the system, so the…
Private security firms will soon be allowed to hack overseas cybercriminals
The Trump administration is recruiting private security firms to conduct federal government-authorized operations, including cyberattacks, against overseas-based criminal organizations that commit hacks on US persons,…
AWS Certificate Manager will discontinue email validation to prove domain validation for certificates
Today, we’re announcing that AWS Certificate Manager (ACM) will discontinue support for email-validated public certificates by September 30, 2027. If you use email validation for…
Ukraine shuts down 94 fraudulent call centers, seize millions in cash
Authorities in Ukraine shut down 94 fraudulent call centers across the country that lured people into investment scams or tried to obtain access to bank…
Beacon CRM Confirms Full Database Theft After AWS Access Key Breach
Beacon, the customer relationship management (CRM) platform relied on by over a thousand UK charities and non-profit organizations, has confirmed that a threat actor made…
From Detection To Remediation: Automating Cloud Security Fixes In Financial Infrastructure
Modern Cloud Security programs are getting good at finding problems; they can detect exposed storage, vulnerable workloads, excessive permissions, misconfigured networks, risky sign-ins, and policy…
Is AI entering the SOC at the right stage?
By Simon Phillips, CTO, CybaVerse Alert fatigue is an issue that has plagued Security Operations Centres for years. As organisations’ digital estates grow, there is…