I added hover over text, it messed up some of the formatting. But whatever, I gotta go write my TPS report.<h2>Krebs on Security</h2><h2>Dark Reading</h2><h2>The Hacker News [ THN ] - Best Security Blog</h2>2026-08-04 - <a href="https://thehackernews.com/2026/08/cisa-adds-exploited-n-able-n-central.html" title="The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild.

The vulnerability, tracked as CVE-2026-18577 (CVSS score: 8.2), is a case of incomplete patching for CVE-2026-18556 (CVSS score: 8.2) that allows">CISA Adds Exploited N-able N-central Flaw to KEV After Customer Compromises</a><br>2026-08-04 - <a href="https://thehackernews.com/2026/08/18-malicious-npm-packages-deliver-cross.html" title="Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) as part of a sophisticated, targeted software supply chain attack targeting Chinese-speaking environments.

One of the packages in question is "lib-mtop," an unscoped package with the same name as a private Alibaba package">18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users</a><br>2026-08-03 - <a href="https://thehackernews.com/2026/08/google-password-manager-attacks-could.html" title="Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all appearing on the victim's screen.

Unit 42 detailed three attack paths against Chrome's Google Password Manager cloud authenticator, which it calls Pass-ta-key, Silver Pass-ta-key and Golden Pass-ta-key; the strongest targets the master key">Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts</a><br>2026-08-03 - <a href="https://thehackernews.com/2026/08/inc-ransomware-emerges-as-dominant.html" title="The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances.

In a report published over the weekend, Resecurity said it observed the INC Ransomware accelerating its activity since the beginning of August 2026, listing multiple victims on its data leak site. Per">INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws</a><br>2026-08-03 - <a href="https://thehackernews.com/2026/08/weekly-recap-rogue-ai-models-88m.html" title="This week kept coming back to permission. A model crossed a boundary. A wallet trusted bad randomness. Webmail kept an intruder around. Public systems, package feeds, hotel networks, and login flows all gave away more than intended.

Some of it was clever. Most of it was just access left lying around: old bugs, exposed gear, poisoned dependencies, weak defaults, and tooling that moved from">⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks</a><br>2026-08-03 - <a href="https://thehackernews.com/2026/08/fomo-in-soc-where-ai-platforms-like.html" title="AI is moving incredibly fast, and every security leader is feeling the pressure to keep up.

AI platforms like Claude, Codex and Cursor are already helping security teams write detections, investigate alerts, summarize incidents, and automate repetitive work. The conversation has evolved from whether AI belongs in the SOC, to where each type of AI delivers the most value.

With so many new AI">FOMO in the SOC: Where AI Platforms like Claude Actually Fit</a><br>2026-08-03 - <a href="https://thehackernews.com/2026/08/chinese-threat-actor-uses-leaked.html" title="An unknown Chinese-speaking threat actor has been observed running a campaign targeting Apple iOS devices by leveraging a publicly leaked version of the DarkSword exploit kit.

Attack surface management platform Censys said it identified the threat actor running more than 100 web properties, most of which are fake Amazon Web Services (AWS) sign-in pages on a domain that also hosts the exploit">Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS</a><br>2026-08-03 - <a href="https://thehackernews.com/2026/08/pnld-breach-exposes-uk-police-and.html" title="The Police National Legal Database (PNLD) has confirmed that police, government and customer contact information was compromised and published on the dark web.

The data included names, organisations and work email addresses belonging to police officers, police staff, criminal justice professionals, government partners and customers.

The incident, identified on July 26, also exposed some names">PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web</a><br>2026-08-03 - <a href="https://thehackernews.com/2026/08/thermo-fisher-patches-flaw-that-could.html" title="Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them.

The vendor's July 31 security bulletin says nearly undetectable changes to .fsa and .hid outputs could occur if laboratory controls are circumvented.

Thermo Fisher tracks the issue as CVE-2026-17583 and rates it">Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable</a><br>2026-08-03 - <a href="https://thehackernews.com/2026/08/n-able-says-attackers-take-over-n.html" title="N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers.

Its first fix was incomplete. CVE-2026-18577 affects N-central builds prior to 2026.3.1.7. N-able shipped build 2026.3.1.7 on August 2 as the first unaffected version.

N-central is the remote monitoring and management platform">N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete</a><br>2026-08-03 - <a href="https://thehackernews.com/2026/08/hugging-face-diffusers-flaws-could-let.html" title="Three high-severity security flaws have been disclosed in Hugging Face's Diffusers library that could allow crafted model repositories to stealthily execute arbitrary code on machines that load it, opening the artificial intelligence (AI) supply chain to security risk.

"These vulnerabilities are bypassing trust_remote_code, the safeguard designed to stop unreviewed code from running in the">Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code</a><br>2026-08-01 - <a href="https://thehackernews.com/2026/08/coldcard-hardware-wallet-flaw-linked-to.html" title="An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite.

A March 2021 firmware integration error routed seed generation to a deterministic software pseudorandom number generator (PRNG">Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes</a><br>2026-08-01 - <a href="https://thehackernews.com/2026/08/hackers-poison-adform-script-to-swap.html" title="Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses.

Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported it to authorities.

Anyone who visited a site carrying the affected script on July 27 and copied a Bitcoin,">Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites</a><br>2026-08-01 - <a href="https://thehackernews.com/2026/08/adobe-campaign-classic-cvss-100-flaw.html" title="Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution.

The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system.

It has been described as a case of incorrect authorization that could result in">Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction</a><br>2026-08-01 - <a href="https://thehackernews.com/2026/08/hijacked-hotel-wi-fi-pushes-fake.html" title="A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report.

Researchers track the operation as CaptiveCrunch and attribute it to Storm-2945. It assesses Storm-2945 to be an operational sub-cluster of Midnight Blizzard, also known as">Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware</a><br>2026-08-01 - <a href="https://thehackernews.com/2026/08/suspected-chinese-speaking-hackers.html" title="A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025.

These targeted organizations operate across several sectors, such as healthcare, research, government offices,">Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk</a><br>2026-07-31 - <a href="https://thehackernews.com/2026/07/hollowframe-loader-deploys-matryoshka.html" title="Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka.

According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted archive, which holds a Windows Shortcut (LNK). Executing the file triggers a multi-stage chain that">HollowFrame Loader Deploys Matryoshka Backdoor in Spear-Phishing Attack on Law Firm</a><br>2026-07-31 - <a href="https://thehackernews.com/2026/07/cheap-android-tv-boxes-pose-as-phones.html" title="Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then click ads on websites run by the same operators.

Researchers named the operation Fuyao and attributed it to Zhejiang Fengwo IoT Technology Co., Ltd., a mainland China company founded in 2019.

The same apps have a second job. When a box">Cheap Android TV Boxes Pose as Phones and Turn Owners’ Broadband Into Proxies</a><br>2026-07-31 - <a href="https://thehackernews.com/2026/07/three-recent-chrome-releases-fix-1442.html" title="Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined.

Both versions were released last month. In its latest patch for Chrome 151, released Wednesday, the tech giant resolved 370 flaws, out of which 349 were reported by Google itself. Seven of the">Three Recent Chrome Releases Fix 1,442 Flaws, More Than Prior 23 Updates Combined</a><br>2026-07-31 - <a href="https://thehackernews.com/2026/07/researchers-report-84-flaws-in-4g-and.html" title="An academic study has disclosed a "widespread class" of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service (DoS) attacks and even session hijacking, allowing an attacker to seize control of a user's network session.

The findings have been released by a group of researchers from Singapore's Nanyang Technological University">Researchers Report 84 Flaws in 4G and 5G Cores, Including a Session Hijacking Flaw</a><br>2026-07-31 - <a href="https://thehackernews.com/2026/07/6-reasons-why-device-code-phishing-is.html" title="Device code phishing - the abuse of the OAuth 2.0 device authorization grant to steal access tokens - has evolved from a niche red-team technique to an industrial-scale threat in under six months.

Designed for input-constrained devices like smart TVs, printers, and so on, the device authorization login flow has been adopted by a wide range of apps and use-cases that it wasn't originally">6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026</a><br>2026-07-31 - <a href="https://thehackernews.com/2026/07/chinese-hacker-commands-deepseek-via.html" title="Palo Alto Networks' Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously.

After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session.

The operator, tracked through the aliases knaithe and KnYuan,">Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks</a><br>2026-07-31 - <a href="https://thehackernews.com/2026/07/anthropic-says-claude-mistook-open.html" title="Anthropic on Thursday became the latest artificial intelligence (AI) company to reveal that three of its models, including Claude Opus 4.7, Mythos 5, and an unnamed research model, had breached three unnamed organizations during cybersecurity testing without its knowledge.

The AI firm said the earliest incidents date back to April 2026, adding it made the discoveries after launching a ">Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three Organizations</a><br><h2>Schneier on Security</h2>2026-08-03 - <a href="https://www.schneier.com/blog/archives/2026/08/more-on-the-openai-agents-attack-on-hugging-face.html" title="<p>Hugging Face has <a href="https://huggingface.co/blog/agent-intrusion-technical-timeline">published</a> a detailed timeline of the attack. From the summary:</p>
<blockquote><p>The agent was running an internal OpenAI cyber-capability evaluation based on the ExploitGym benchmark, which tasks an AI agent with finding and exploiting software vulnerabilities. OpenAI ran this on its own infrastructure, and the ExploitGym maintainers and their infrastructure had no involvement in the deployment or operation of that evaluation environment. As far as we were able to infer, across the course of being evaluated on this benchmark, the agent inferred that Hugging Face may host that benchmark&#8217;s models, datasets, and reference solutions. We believe the entire intrusion was, from the agent&#8217;s point of view, an attempt to cheat the evaluation: reach our production systems and steal the test solutions rather than solve the challenge on its own...</p></blockquote>">More on the OpenAI Agent’s Attack on Hugging Face</a><br>2026-08-03 - <a href="https://www.schneier.com/blog/archives/2026/08/the-openai-hack-shows-the-genie-is-out-of-the-bottle.html" title="<p><em>This essay originally appeared in <a href="https://foreignpolicy.com/2026/07/30/openai-hack-genie-bottle-defense/">Foreign Policy</a>.</em></p>
<p>Earlier this month, two of OpenAI&#8217;s models broke out of their containment sandbox and attacked another AI company. The <a href="https://www.nytimes.com/2026/07/21/technology/openai-attack-hugging-face.html">story</a> is kind of <a href="https://simonwillison.net/2026/Jul/22/openai-cyberattack/">wild</a>. OpenAI was running security tests on two of its models: GPT-5.6 Sol and an unreleased model that is almost certainly GPT-6. In particular, it was running the <a href="https://arxiv.org/abs/2605.11086">ExploitGym</a> benchmark, which measures how good a model is at turning security vulnerabilities into working exploits: basically, offensive cyberattacks.</p>
<p>Since these were internal tests, OpenAI locked those models in a secure sandbox that denied them access to the internet. But it was running the models without any safety filters that would prevent them from offensive cyber-actions. That meant that there was nothing to prevent the models from trying to ...</p>">The OpenAI Hack Shows the Genie Is Out of the Bottle</a><br>2026-07-31 - <a href="https://www.schneier.com/blog/archives/2026/07/friday-squid-blogging-squid-helps-discover-new-marine-species.html" title="<p>The Squid is a new <a href="https://www.theguardian.com/environment/2026/jun/26/marine-expedition-uncovers-31-new-species-two-weeks-brazil">scientific machine</a>:</p>
<blockquote><p>One of the technological breakthroughs was the onboard use of a spinning wheel confocal microscope, nicknamed the Squid, which uses lasers to scan microscopic details of how organisms are put together. &#8220;That opens up a whole new world of exploring. We could see cells interacting with each other, exchanging material and building skeletons. And we could do that live on the ship, when usually it takes a couple of weeks of staining and mounting to see anything,&#8221; Osborn said.</p></blockquote>
<p>The expedition discovered thirty-one new marine species in two weeks. The article doesn&#8217;t say if any of them were new species of squid...</p>">Friday Squid Blogging: Squid Helps Discover New Marine Species</a><br>2026-07-31 - <a href="https://www.schneier.com/blog/archives/2026/07/anthropics-opus-5-is-better-at-resisting-prompt-injection.html" title="<p>The <a href="https://www-cdn.anthropic.com/c5fbac3f0b1280a933ebd26d3cb8bb9f5bdeaf48/Claude%20Opus%205%20System%20Card.pdf#page=73">chart</a> is interesting.</p>
<blockquote><p>On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 (5.9% at k=15) and Mythos 5 (2.6%), making it the most robust model evaluated. Opus 5 also outperformed all non-Claude models on this benchmark. The most robust non-Claude model was Muse Spark at 16.5% within 15 attempts&#8212;more than eight times Opus 5’s rate. The most capable GPT 5.6 variant, Sol, was comparable to its predecessor GPT 5.5 (20.0% versus 20.8% within 15 attempts), and was 10 times as likely to be successfully attacked as Claude Opus 5 at 2.0%. The other GPT 5.6 variants are less robust, at 30.4% (Terra) and 43.9% (Luna). A single attempt against GPT 5.6 Sol succeeded 3.1% of the time, higher than the 2.0% an attacker achieved against Opus 5 after fifteen attempts...</p></blockquote>">Anthropic’s Opus 5 Is Better at Resisting Prompt Injection</a><br>2026-07-31 - <a href="https://www.schneier.com/blog/archives/2026/07/facial-recognition-at-madison-square-garden.html" title="<p>Last month, the story <a href="https://www.404media.co/madison-square-garden-made-dossier-on-activists-who-opposed-facial-recognition/">broke</a> (alternate <a href="https://archive.ph/ZGqfH">link</a>) that Madison Square Garden uses facial recognition software on everyone entering the facility, and&#8212;among other groups&#8212;flags activists that oppose using facial recognition.</p>
<p>Turns out that the system was <a href="https://www.wired.com/story/for-taylor-swift-madison-square-gardens-controversial-cameras-briefly-went-dark/">shut off</a> for Taylor Swift&#8217;s wedding.</p>
<p>Evan Greer&#8212;one of the people that MSG alerts on&#8212;<a href="https://www.ms.now/opinion/taylor-swift-and-travis-kelce-got-to-buy-msgs-privacy-her-fans-arent-so-lucky">comments</a>:</p>
<blockquote><p>Ironically, Swift herself has <a href="https://www.rollingstone.com/music/music-news/taylor-swift-facial-recognition-concerts-768741/">reportedly</a> used facial recognition at her own concerts to identify stalkers. This &#8220;privacy for me, surveillance for thee&#8221; attitude feels like a perfect encapsulation of the future we&#8217;re already living in: one where wealthy elites can afford privacy, while the rest of us are forced to live in a corporate surveillance panopticon...</p></blockquote>">Facial Recognition at Madison Square Garden</a><br><h2>ThreatPost</h2><h2>Sydney Morning Herald</h2><h2>New York Times</h2>2026-08-03 - <a href="https://www.nytimes.com/2026/08/03/technology/spacex-lockup-stock-market.html" title="On Thursday, employees and other insiders at Elon Musk’s rocket company will be released from their first stock “lockup” and can start selling some of their shares.">SpaceX’s Stock Lockup Is Expiring. Prepare for a Bumpy Ride.</a><br>2026-08-03 - <a href="https://www.nytimes.com/2026/08/03/business/economy/ai-spending-tokenomics.html" title="A new field of “tokenomics” has emerged to measure the return on all the money companies are pouring into artificial intelligence.">What Are Companies Getting for All That A.I. Spending?</a><br>2026-08-03 - <a href="https://www.nytimes.com/2026/08/03/technology/ai-tech-firms-swag-merchandise.html" title="Over the years, tech workers have proudly worn nerdy company-branded gear. But this generation of hot companies is getting fancy with its merch.">If You Can’t Beat A.I., Outdress It, Tech Firms and Their Swag Say</a><br>2026-07-31 - <a href="https://www.nytimes.com/2026/07/31/podcasts/open-source-google.html" title="“It just seems like the temperature is rising on Silicon Valley.”">Open Model Wars + Claire Stapleton’s Dishy Google Memoir + Substack’s Slop Fight</a><br>2026-08-03 - <a href="https://www.nytimes.com/2026/08/02/technology/google-earth-ai-satellite-images.html" title="A new Google Earth tool allowed the creation of A.I. deepfake maps. The company quickly pulled it back after users noted there were no safeguards to prevent content that could be harmful.">Google Earth Disables A.I. Tool After One Day Over Disinformation Concerns</a><br>2026-07-31 - <a href="https://www.nytimes.com/2026/07/31/magazine/takeaways-larry-ellison-oracle-ai.html" title="The billionaire’s company took on ominous loads of debt to build data centers around the world. The implications go far beyond Oracle.">Five Takeaways From the Times Investigation Into Larry Ellison’s A.I. Gamble</a><br>2026-07-31 - <a href="https://www.nytimes.com/2026/07/31/style/errands-should-be-the-most-boring-show-on-the-internet.html" title="Fighting a traffic ticket. Hanging a curtain. Installing an air-conditioner. With his cult-hit online series, Noah Blau has made the mundane fascinating.">We All Do Errands. Noah Blau Films Them.</a><br>2026-08-02 - <a href="https://www.nytimes.com/2026/07/31/magazine/larry-ellison-ai-oracle.html" title="Inside the 81-year-old billionaire’s risky, debt-fueled scramble to transform his data empire into an A.I. juggernaut.">Larry Ellison Bet It All on the A.I. Boom. Will He Be the Face of the A.I. Bubble?</a><br>2026-07-31 - <a href="https://www.nytimes.com/2026/07/31/business/energy-environment/plug-in-solar-panel-guide.html" title="You can now buy panels that plug into electrical outlets, but there are some important safety issues to consider when picking and installing a system.">What You Need to Know About Installing Plug-In Solar Panels</a><br>2026-08-02 - <a href="https://www.nytimes.com/2026/07/31/business/germany-mercedes-bmw-volkswagen.html" title="The country’s iconic carmakers are struggling with tariffs, the growth of electric vehicles and intense competition from Chinese companies.">The German Auto Industry, a Pillar of the National Psyche, Is Trembling</a><br>2026-08-03 - <a href="https://www.nytimes.com/2026/07/31/business/energy-environment/plug-in-balcony-solar.html" title="Ten U.S. states have legalized systems that can be plugged into standard wall outlets. The technology typically does not require permits or electricians.">Plug-In Solar Panels Are Starting to Sprout in U.S. Backyards</a><br>2026-08-01 - <a href="https://www.nytimes.com/2026/07/31/us/politics/trump-iran-economy-media-critics.html" title="Once united in support of President Trump, right-wing influencers are embroiled in feuds and losing viewers, creating a problem for Republicans in the midterm elections.">How the Pro-Trump Media Ecosystem Is Splintering Ahead of the Midterms</a><br>2026-07-31 - <a href="https://www.nytimes.com/2026/07/30/technology/anthropic-ai-hack.html" title="The disclosure followed OpenAI’s report last week that its own artificial intelligence had hacked into the network of an online library.">Anthropic Says Its A.I. Systems Broke Into Computers at 3 Organizations</a><br>2026-07-31 - <a href="https://www.nytimes.com/2026/07/30/technology/amazon-google-ai-data-center-spending.html" title="Amazon joined a procession of tech giants that ramped up their spending on artificial intelligence, as its capital expenditures soared 69 percent. Concerns over the industry’s spending are mounting.">Big Tech’s A.I. Spending Keeps Rising. So Do the Jitters.</a><br>2026-08-03 - <a href="https://www.nytimes.com/2026/07/30/technology/ai-heated-rivalry-fan-fiction.html" title="An anonymous X account posted a detailed breakdown of chatbot text in 38 popular stories inspired by the hockey romance. The fandom spiraled.">When A.I. Invaded ‘Heated Rivalry’ Fan Fiction, the Meltdown Was Epic</a><br><h2>Wall Street Journal</h2><h2>BBC</h2>2026-08-03 - <a href="https://www.bbc.co.uk/news/articles/c872r52x7jgo?at_medium=RSS&at_campaign=rss" title="Buyers of AI services are struggling to control costs and sellers are not sure how much to charge.">Tokenomics: Why making AI pay is tricky</a><br>2026-08-03 - <a href="https://www.bbc.co.uk/news/articles/czjlvrd9e43o?at_medium=RSS&at_campaign=rss" title="Xbox consoles now cost significantly more in the UK, with one model increasing in price by 43%.">Xbox Series X price hiked by £170 due to rising memory chip costs</a><br>2026-07-31 - <a href="https://www.bbc.co.uk/news/articles/c77g6dm5pr8o?at_medium=RSS&at_campaign=rss" title="Snapchat, YouTube, LinkedIn, and Substack are trying to combat the proliferation of fake AI content.">Snapchat joins other popular platforms in fight against 'AI slop'</a><br>2026-07-31 - <a href="https://www.bbc.co.uk/news/articles/cr7k49xjzzeo?at_medium=RSS&at_campaign=rss" title="Clement Delangue said he didn't want cyber attacks on other companies to become "normalised".">AI firms must answer for rogue bots, says boss of hacked company</a><br>2026-07-31 - <a href="https://www.bbc.co.uk/news/articles/cp87m46g392o?at_medium=RSS&at_campaign=rss" title="Billions of dollars are being poured into a new wave of AI technology. But will it pay off?">Amazon and Apple just told us more about their AI plans - here are three things we learned</a><br>2026-07-31 - <a href="https://www.bbc.co.uk/news/articles/cn0nqpy1rk4o?at_medium=RSS&at_campaign=rss" title="Cyber Prevent is targeting predominantly boys and young men at risk of being drawn to cyber criminality.">How police are trying to divert teen hackers away from crime</a><br>2026-08-01 - <a href="https://www.bbc.co.uk/iplayer/episode/m002zxt1?at_medium=RSS&at_campaign=rss" title="New technologies measuring forests and exclusive access to a hacker rehab programme.">Tech Now</a><br><h2>SecurityBrief AU</h2><h2>ITNews AU</h2>2026-08-04 - <a href="https://www.itnews.com.au/news/russia-linked-midnight-blizzard-group-hijacks-hotel-wi-fi-with-captivecrunch-627911?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="Hacked hotel wireless harvests credentials and delivers malware.">Russia-linked "Midnight Blizzard" group hijacks hotel wi-fi with CaptiveCrunch</a><br>2026-08-04 - <a href="https://www.itnews.com.au/news/visa-snaps-up-biocatch-627902?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="Bolsters cyber security offerings.">Visa snaps up BioCatch</a><br>2026-08-03 - <a href="https://www.itnews.com.au/news/arch-linux-halts-package-adoptions-after-malware-hijacking-wave-627870?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="As supply chain attack on code repository continues.">Arch Linux halts package adoptions after malware hijacking wave</a><br>2026-07-31 - <a href="https://www.itnews.com.au/news/microsoft-cant-kill-dogged-researchers-copilot-for-word-worm-627830?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="Self-propagating prompt injection attack survives months of mitigation efforts.">Microsoft can't kill dogged researcher's Copilot for Word worm</a><br>2026-07-31 - <a href="https://www.itnews.com.au/gallery/in-pictures-security-in-the-age-of-shadow-ai-security-centric-roundtable-627836?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="A selection of photos from a recent iTnews roundtable lunch at Bambini Trust restaurant in Sydney.">In Pictures: Security in the age of shadow AI Security Centric roundtable</a><br><h2>BleepingComputer</h2>2026-08-03 - <a href="https://www.bleepingcomputer.com/news/security/hotel-wi-fi-attacks-use-custom-malware-to-breach-microsoft-365-accounts/" title="Microsoft has linked a global campaign targeting hospitality Wi-Fi networks to the Russian threat actor Midnight Blizzard, also known as APT29. [...]">Hotel Wi-Fi attacks use custom malware to breach Microsoft 365 accounts</a><br>2026-08-03 - <a href="https://www.bleepingcomputer.com/news/security/new-pass-ta-key-attacks-let-malware-hijack-google-synced-passkeys/" title="Security researchers have discovered three attacks that allow malware on already-compromised Windows devices to abuse Google Password Manager's synced passkeys to take over accounts, bypass user verification, and extract passkey private keys. [...]">New Pass-ta-key attacks let malware hijack Google-synced passkeys</a><br>2026-08-03 - <a href="https://www.bleepingcomputer.com/news/security/new-doublecup-clickfix-service-hides-malware-in-browser-cache-images/" title="A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims' browsers, ultimately delivering CountLoader to Windows and macOS devices and a new remote access trojan named DeviceManager to Windows systems. [...]">New DOUBLECUP ClickFix service hides malware in browser cache images</a><br>2026-08-03 - <a href="https://www.bleepingcomputer.com/news/security/fake-roblox-xeno-script-launcher-pushes-infostealer-rat-malware/" title="Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information. [...]">Fake Roblox Xeno script launcher pushes infostealer, RAT malware</a><br>2026-08-03 - <a href="https://www.bleepingcomputer.com/news/security/n-able-warns-of-n-central-auth-bypass-flaw-exploited-in-attacks/" title="N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-central servers. [...]">N-able warns of N-central auth bypass flaw exploited in attacks</a><br>2026-08-03 - <a href="https://www.bleepingcomputer.com/news/security/exfilsquad-hackers-leak-info-of-over-100-000-uk-police-officers-staff/" title="A cyberattack on the U.K.'s Police National Legal Database (PNLD) has compromised contact data of more than 100,000 police officers and other criminal justice professionals. [...]">ExfilSquad hackers leak info of over 100,000 UK police officers, staff</a><br>2026-08-03 - <a href="https://www.bleepingcomputer.com/news/security/inside-the-underground-business-of-btmob-rat/" title="Flare researchers analyzed thousands of underground posts to examine how the BTMOB Android malware operation evolved into a fragmented ecosystem of resellers, source-code vendors, custom versions, and competing sales channels. [...]">Inside the Underground Business of the Android BTMOB RAT malware</a><br>2026-08-02 - <a href="https://www.bleepingcomputer.com/news/artificial-intelligence/openai-teases-astra-its-next-major-ai-model-after-it-solves-10-long-standing-math-problems/" title="OpenAI has revealed Astra, an unreleased model designed to tackle complex, long-running tasks, after an internal version produced ten significant advances in mathematics and theoretical computer science. [...]">OpenAI teases Astra, its next major AI model, after it solves 10 long-standing math problems</a><br>2026-08-02 - <a href="https://www.bleepingcomputer.com/news/security/coldcard-wallet-rng-flaw-likely-linked-to-88-million-bitcoin-theft/" title="A vulnerability in COLDCARD hardware wallet firmware allowed attackers to steal an estimated $88.6 million in Bitcoin from thousands of wallets whose seeds were generated using a flawed random number generator. [...]">COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft</a><br>2026-08-02 - <a href="https://www.bleepingcomputer.com/news/google/google-chrome-may-soon-block-new-tab-hijacker-extensions-by-default/" title="Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page or changing the default search engine. [...]">Google Chrome may soon block New Tab hijacker extensions by default</a><br>2026-08-01 - <a href="https://www.bleepingcomputer.com/news/security/rails-patches-critical-active-storage-flaw-with-rce-potential/" title="A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). [...]">Rails patches critical Active Storage flaw with RCE potential</a><br>2026-07-31 - <a href="https://www.bleepingcomputer.com/news/security/amgen-says-cloud-data-breach-exposed-patient-health-proprietary-info/" title="Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers. [...]">Amgen says cloud data breach exposed patient health, proprietary info</a><br>2026-07-31 - <a href="https://www.bleepingcomputer.com/news/security/arch-linux-disables-aur-package-adoption-to-stop-malware-flood/" title="The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. [...]">Arch Linux disables AUR package adoption to stop malware flood</a><br>2026-07-31 - <a href="https://www.bleepingcomputer.com/news/security/online-ad-firm-adforms-script-compromised-to-steal-cryptocurrency/" title="Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors' clipboards with ones controlled by an attacker. [...]">Online ad firm Adform’s script compromised to steal cryptocurrency</a><br>2026-07-31 - <a href="https://www.bleepingcomputer.com/news/artificial-intelligence/openai-says-its-new-gpt-56-models-are-becoming-more-cost-efficient/" title="OpenAI says it has reduced the price of two GPT-5.6 models, cutting Luna's API price by 80% and Terra's by 20% as it works to make its models more efficient. [...]">OpenAI says its new GPT 5.6 models are becoming more cost-efficient</a><br><h2>/r/NetSec</h2>2026-08-01 - <a href="https://www.reddit.com/r/netsec/comments/1vcngz2/rnetsec_monthly_discussion_tool_thread/" title="<!-- SC_OFF --><div class="md"><p>Questions regarding netsec and discussion related directly to netsec are welcome here, as is sharing tool links.</p> <h1>Rules &amp; Guidelines</h1> <ul> <li>Always maintain civil discourse. Be awesome to one another - moderator intervention will occur if necessary.</li> <li>Avoid NSFW content unless absolutely necessary. If used, mark it as being NSFW. If left unmarked, the comment will be removed entirely.</li> <li>If linking to classified content, mark it as such. If left unmarked, the comment will be removed entirely.</li> <li>Avoid use of memes. If you have something to say, say it with real words.</li> <li>All discussions and questions should directly relate to netsec.</li> <li>No tech support is to be requested or provided on <a href="https://www.reddit.com/r/netsec">r/netsec</a>.</li> </ul> <p>As always, the content &amp; discussion guidelines should also be observed on <a href="https://www.reddit.com/r/netsec">r/netsec</a>.</p> <h1>Feedback</h1> <p>Feedback and suggestions are welcome, but don't post it here. Please send it to the moderator inbox.</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/albinowax"> /u/albinowax </a> <br /> <span><a href="https://www.reddit.com/r/netsec/comments/1vcngz2/rnetsec_monthly_discussion_tool_thread/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1vcngz2/rnetsec_monthly_discussion_tool_thread/">[comments]</a></span>">r/netsec monthly discussion & tool thread</a><br>2026-08-03 - <a href="https://www.reddit.com/r/netsec/comments/1vet23a/jackpot_a_browser_lab_of_10_deliberately/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/callmejackfrost1"> /u/callmejackfrost1 </a> <br /> <span><a href="https://hego.red/jackpot">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1vet23a/jackpot_a_browser_lab_of_10_deliberately/">[comments]</a></span>">Jackpot: a browser lab of 10 deliberately vulnerable LLM apps, one per OWASP LLM Top 10 category</a><br>2026-08-03 - <a href="https://www.reddit.com/r/netsec/comments/1veedqw/sqlite_critical_cves_or_llm_slop/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/si9int"> /u/si9int </a> <br /> <span><a href="https://research.jfrog.com/post/sqlite-critical-cves-or-llm-slops/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1veedqw/sqlite_critical_cves_or_llm_slop/">[comments]</a></span>">SQLite Critical CVEs or LLM Slop?</a><br>2026-08-03 - <a href="https://www.reddit.com/r/netsec/comments/1veba08/cruising_for_shells_in_flowise_elttam/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/AnimalStrange"> /u/AnimalStrange </a> <br /> <span><a href="https://www.elttam.com/blog/cruising-for-shells-in-flowise">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1veba08/cruising_for_shells_in_flowise_elttam/">[comments]</a></span>">Cruising for Shells in Flowise - elttam</a><br>2026-08-02 - <a href="https://www.reddit.com/r/netsec/comments/1vdqe9d/the_risk_of_finetuned_openweight_models_msec/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/S3cur3Th1sSh1t"> /u/S3cur3Th1sSh1t </a> <br /> <span><a href="https://www.msecops.de/blog/posts/backdoored-llms/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1vdqe9d/the_risk_of_finetuned_openweight_models_msec/">[comments]</a></span>">The Risk of Fine-Tuned Open-Weight Models · MSec Operations Blog</a><br>2026-07-31 - <a href="https://www.reddit.com/r/netsec/comments/1vc3djn/investigating_three_realworld_incidents_in/" title="<!-- SC_OFF --><div class="md"><p>In three incidents across six runs, the agents treated real systems as simulated targets and tried weak passwords or unauthenticated endpoints.</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/luckokkkk"> /u/luckokkkk </a> <br /> <span><a href="https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1vc3djn/investigating_three_realworld_incidents_in/">[comments]</a></span>">Investigating three real-world incidents in Anthropic's evaluations</a><br>2026-07-31 - <a href="https://www.reddit.com/r/netsec/comments/1vbnvo5/full_rails_rce_technical_writeup_kindarails2shell/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/hakluke"> /u/hakluke </a> <br /> <span><a href="https://ethiack.com/info-hub/research/kindarails2shell-how-a-matlab-file-reads-your-secrets-and-pops-a-shell-on-ruby-on-rails">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1vbnvo5/full_rails_rce_technical_writeup_kindarails2shell/">[comments]</a></span>">Full Rails RCE technical writeup... KindaRails2Shell: How a MATLAB file reads your secrets and pops a shell on Ruby on Rails | Ethiack</a><br>2026-07-31 - <a href="https://www.reddit.com/r/netsec/comments/1vbs8hf/predictable_rng_fallback_and_32bit_reseed_in/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/_vavkamil_"> /u/_vavkamil_ </a> <br /> <span><a href="https://engineering.block.xyz/blog/predictable-rng-fallback-and-32-bit-reseed-in-coldcard-firmware">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1vbs8hf/predictable_rng_fallback_and_32bit_reseed_in/">[comments]</a></span>">Predictable RNG Fallback and 32-Bit Reseed in COLDCARD Firmware</a><br><h2>/r/InfoSecNews</h2><h2>
</h2>