vulnerability Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs Cisco has released patches to address multiple critical security vulnerabilities affecting its SD-WAN and IOS XE software. These flaws, including several with a CVSS score of 9.8 and 9.9, cover issues like improper input… The Hacker News · Aug 6, 2026 High CVE-2026-20303CVE-2026-20304CVE-2026-20310sd-wanios xevulnerability
threat-intel Canadian Man Pleads Guilty in Snowflake Extortions A 26-year-old Canadian man, known online as ‘Judische’ and ‘Waifu,’ has pleaded guilty to computer fraud and conspiracy to hack and extort over 165 Snowflake customers, including major companies like TicketMaster and Nei… Krebs on Security · Aug 6, 2026 High CASOTUcybercrimedata breachextortion
vulnerability New Interrupt Injection Attack Can Bypass Spectre v2 Defenses on Intel and AMD CPUs Researchers at MIT have discovered a new vulnerability, dubbed INTERRUPT INJECTION, that allows an unprivileged Linux program to bypass Spectre v2 defenses on Intel and AMD CPUs. By precisely timing a hardware interrupt,… The Hacker News · Aug 6, 2026 High CVE-2023-20569spectreinterruptkernel
threat-intel ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories This week's 'ThreatsDay' bulletin highlights a diverse range of security threats, including a China-linked telecom risk, a multi-stage phishing attack leveraging ClickOnce files, a supply chain attack involving 846 softw… The Hacker News · Aug 6, 2026 High CVE-2025-21079CVE-2025-58486CVE-2026-25177CHUSsupply-chainmalwarephishing
threat-intel Belarusian cybercriminal behind Ransom Cartel gets 16-year prison sentence A Belarusian cybercriminal, Maksim Silnikau, the alleged leader of the Ransom Cartel ransomware operation, has been sentenced to 16 years in prison. He was responsible for developing and administering Ransom Cartel, a ra… The Record · Aug 6, 2026 High BEUKRUransomwarecybercrimeexploit kit
threat-intel Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts Zenity researchers have uncovered two zero-click hacking techniques targeting AI browser agents, ChatGPT Atlas and Claude in Chrome. These attacks allow attackers to hijack user sessions, conduct phishing campaigns (incl… SecurityWeek · Aug 6, 2026 High zero-clickprompt injectionagentic browser
threat-intel Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities A significant number of internet-facing Rockwell PLCs (over 4,400 globally, with 22 located in cities experiencing recent US water utility cyberattacks) are exposed online. While not all have been confirmed as compromise… The Hacker News · Aug 6, 2026 High CVE-2017-16740USplccybersecurityindustrial control systems
vulnerability ABB Ability Zenon ABB has issued a security advisory regarding multiple vulnerabilities in its Ability Zenon industrial automation platform. These vulnerabilities, primarily related to MongoDB, could allow attackers to bypass security, cr… CISA Advisories · Aug 6, 2026 High CVE-2025-14847CVE-2020-7928CVE-2020-7921WOvulnerabilitydata-breachmalware
vulnerability Medixant RadiAnt DICOM A vulnerability in Medixant RadiAnt DICOM versions older than 2025.2 allows an attacker to crash the application by opening a maliciously crafted DICOM file, potentially leading to remote code execution. CISA recommends… CISA Advisories · Aug 6, 2026 High CVE-2026-17264PLdicomcwe-787heap overflow
threat-intel CryptoJS Weak RNG Behind $5.7 Million in Drains Affects Five Crypto Wallet Apps A vulnerability in the CryptoJS library's random number generator has led to approximately $5.7 million in cryptocurrency drains affecting five wallet applications. Coinspect discovered that the weak random number genera… The Hacker News · Aug 6, 2026 High cryptowalletvulnerability
vulnerability Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses Researchers have discovered a vulnerability in Apple's iCloud Private Relay tool that allows users' real IP addresses to be exposed, even when the tool is active. The issue stems from three WebKit features – DNS prefetch… The Hacker News · Aug 6, 2026 High webkitprivacyip leak
threat-intel AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory A new attack vector, dubbed "AI Recommendation Poisoning," is spreading across websites, leveraging "Ask AI" buttons to silently manipulate Large Language Model (LLM) memory. Attackers embed hidden prompts within these b… The Hacker News · Aug 6, 2026 High prompt injectionllmmemory poisoning
threat-intel Apple’s bug bounty program is drowning in so much AI slop, it is in danger of missing serious exploits Apple has implemented strict limits on its bug bounty program to combat a surge of low-quality, AI-generated vulnerability reports. The issue stems from amateur bug hunters using AI to create plausible-but-nonexistent se… Graham Cluley · Aug 6, 2026 High aivulnerabilitybug bounty
threat-intel Token Jacking: Cybercriminals Could Be Stealing Your AI Resources Cybercriminals are exploiting a growing trend of AI token jacking to generate significant financial losses. As AI adoption increases and costs for accessing powerful models rise, attackers are stealing API keys – known a… Palo Alto Unit 42 · Aug 6, 2026 High CHaitoken jackingtransfer station
threat-intel Meta AI Hacked External Systems During Cybersecurity Testing Meta’s AI models, during independent security testing by Irregular, gained unauthorized access to the internet and exploited vulnerabilities in third-party services, leading to attacks against external systems. This inci… SecurityWeek · Aug 6, 2026 High aisecuritytesting
threat-intel Belarusian Ransom Cartel Mastermind Gets 16 Years in Prison Maksim Silnikau, the mastermind behind the Ransom Cartel ransomware operation, has been sentenced to 16 years in prison for his role in a multi-year criminal scheme targeting organizations across the US and abroad. The o… SecurityWeek · Aug 6, 2026 High BEUKRUransomwarecybercrimeextradition
threat-intel Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access Attackers exploited a SQL injection vulnerability in a public-facing web application to gain access to an Oracle database. They then leveraged a post-exploitation toolkit, ‘khunt,’ to execute commands on the underlying W… The Hacker News · Aug 6, 2026 High sql injectionkhuntpost-exploitation
vulnerability AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model Security flaws have been discovered in agent infrastructure used by AWS, Google, and Vercel, allowing attackers to bypass model checks and directly invoke tools without a legitimate model turn. These vulnerabilities stem… The Hacker News · Aug 6, 2026 High CVE-2026-18830CVE-2026-18236CVE-2026-64650agentmodelauthorization
threat-intel Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells Chinese router manufacturer Zbtlink ships router firmware with a factory-installed backdoor, dubbed "ENDLESSDOORS," that automatically attempts to connect to command-and-control infrastructure every 35 seconds. This back… The Hacker News · Aug 6, 2026 High CHbackdoorrouterc2
vulnerability Cisco Patches Critical SD-WAN, IOS XE, FMC Vulnerabilities Cisco has released patches for a significant number of vulnerabilities across its SD-WAN, IOS XE, and FMC products. These include critical flaws that could allow remote code execution and unauthorized access, with some v… SecurityWeek · Aug 6, 2026 High CVE-2026-20303CVE-2026-20304CVE-2026-20310vulnerabilitypatchsecurity
