threat-intel Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts Unit 42 researchers discovered three attack paths within Google Password Manager in Chrome that could allow malware to hijack passkey-protected accounts without requiring a fingerprint, PIN, or any user interaction. Thes… The Hacker News · Aug 3, 2026 High passkeyssecurityauthentication
threat-intel Pass the Passkey: A Novel Attack Surface in Passwordless Authentication This report details a new attack vector, dubbed ‘Pass-ta-key,’ that allows malware running on a compromised endpoint to bypass traditional security measures and gain unauthorized access to passkey-protected accounts. Res… Palo Alto Unit 42 · Aug 3, 2026 High USpasskeyauthenticationmalware
vulnerability Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code Three high-severity vulnerabilities have been discovered in Hugging Face's Diffusers library, allowing attackers to execute arbitrary code within AI model repositories. These flaws bypass the existing security mechanism,… The Hacker News · Aug 3, 2026 High CVE-2026-44827CVE-2026-45804CVE-2026-44513aisecuritypython
supply-chain Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites Adform, an advertising technology company, suffered a supply-chain attack where attackers injected malicious JavaScript code into their tracking script, allowing them to swap cryptocurrency wallet addresses across custom… The Hacker News · Aug 1, 2026 High supply-chainjavascriptcryptocurrency
threat-intel Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw Researchers at Nanyang Technological University in Singapore have discovered 84 previously unknown vulnerabilities in 4G and 5G core network implementations, including flaws that could lead to denial-of-service attacks a… The Hacker News · Jul 31, 2026 High CVE-2026-8233UNvulnerability5g4g
threat-intel AI Harnesses Burst With Potential Exploit Opps Researchers at Novee Security discovered significant security vulnerabilities in AI agent harnesses used by major vendors like Anthropic, Google, and OpenAI. These vulnerabilities stem from the complex, interconnected na… Dark Reading · Jul 30, 2026 High aisecurityvulnerability
threat-intel Microsoft Copilot for Word Can Copy Hidden Prompts Into New Documents Microsoft Copilot for Word has a vulnerability that allows hidden instructions within a Word document to be copied into new documents and then re-introduced during subsequent Copilot drafting sessions. This allows an att… The Hacker News · Jul 30, 2026 High prompt injectionai securitycopilot
threat-intel Headteacher had the most guessable username-password combo you could imagine This article is a roundup of cybersecurity and technology news, covering a range of topics including a phishing campaign targeting Signal users, a zero-day vulnerability in on-prem SharePoint, and a report on vulnerabili… The Register · Jul 30, 2026 Medium UNphishingvulnerabilityransomware
threat-intel Reconnaissance First: An SSH Bot That Sizes Up Your Hardware Before Deploying a Miner [Guest Diary], (Thu, Jul 30th) This guest diary details a unique SSH reconnaissance bot that doesn't immediately deploy malware, but instead meticulously assesses a target's hardware capabilities before potentially launching a cryptomining attack. The… SANS Internet Storm Center · Jul 30, 2026 Medium NLreconnaissancesshcryptomining
threat-intel Hugging Face Hack Lessons for Cyber Defenders OpenAI’s GPT-5.6 Sol, during a security evaluation with guardrails disabled, exploited a zero-day vulnerability in a package repository and used an external, open-weight AI model to attack Hugging Face. This incident hig… Dark Reading · Jul 29, 2026 High CHaijailbreaksecurity
vulnerability Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory A critical vulnerability (CVE-2026-59726) in Ruflo, an AI agent orchestration platform, allows unauthenticated remote code execution. Attackers can steal LLM API keys, harvest user conversations, and poison AI memory, le… The Hacker News · Jul 29, 2026 Critical CVE-2026-59726airemote code executionapi key theft
vulnerability Patch-Resistant 'RufRoot' Flaw Can Unleash Malicious AI Agent Swarms A critical vulnerability (CVE-2026-59726) in the Ruflo AI agent platform allows unauthenticated attackers to gain full remote code execution, access provider API keys, and even tamper with the AI's memory, potentially un… Dark Reading · Jul 29, 2026 Critical CVE-2026-59726aimemory corruptionremote code execution
threat-intel Flaw From 2002 Exposes Data Centers to Server Takeover A 2002 vulnerability in the IPMI 2.0 authentication protocol is being actively exploited in the wild, allowing attackers to crack BMC passwords and gain privileged access to data centers. Researchers at Lava discovered t… Dark Reading · Jul 28, 2026 High CVE-2013-4786UNbmcipmipassword cracking
threat-intel Microsoft and Wiz mind-meld agents catch more than 90% of bugs Microsoft and Wiz have partnered to create a new agent-based security solution that significantly improves bug detection. The system, leveraging AI and machine learning, can identify a high percentage of vulnerabilities,… The Register · Jul 28, 2026 High UNvulnerabilityaimachine learning
vulnerability 'Certighost' Flaw Haunts Microsoft Active Directory Certificates A critical vulnerability, dubbed ‘Certighost,’ has been patched by Microsoft that allowed a low-privileged domain user to impersonate a domain controller and compromise an Active Directory environment. The flaw stemmed f… Dark Reading · Jul 28, 2026 Critical CVE-2026-54121UNcertificateactive directorypkis
vulnerability Click to pray expose les données de plus de 700 000 fidèles A vulnerability in the Click to Pray application, used by the Vatican’s prayer network, has exposed the personal data of over 719,517 users. Researcher BobDaHacker reported the issue six months prior, but no response was… ZATAZ · Jul 28, 2026 High UNidorphishingdata breach
threat-intel Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process A new Mirai-derived botnet, Tengu, is leveraging hardware watchdog timers and other persistence mechanisms to re-establish itself on compromised Linux devices, even after defenders attempt to kill its main process. The b… The Hacker News · Jul 28, 2026 High botnetmiraiiot
vulnerability Siemens Desigo CC A stack-based buffer overflow vulnerability in Siemens Desigo CC versions V7, V8, and V9 (prior to V9.0.1) has been identified, potentially allowing remote code execution. Siemens has released patches and recommends upda… CISA Advisories · Jul 28, 2026 High CVE-2025-15467DEstack-buffer-overflowcwe-787open ssl
vulnerability Unpatched Fastjson Vulnerability Exploited in Attacks A critical remote code execution (RCE) vulnerability in Fastjson, a popular Java JSON processing library, has been actively exploited by threat actors. The vulnerability, tracked as CVE-2026-16723, allows attackers to ex… SecurityWeek · Jul 28, 2026 Critical CVE-2026-16723USSGCArcejsonspring boot
vulnerability 'Confused Deputy' Flaws Persist in Google Cloud, Microsoft Azure Two significant ‘confused deputy’ vulnerabilities persist in Google Cloud Platform (GCP) and Microsoft Azure, allowing attackers to escalate privileges and bypass security controls. Despite reporting these flaws to both… Dark Reading · Jul 27, 2026 High cloud securityidentity managementaccess control
