Category: Cyber Security News

Adobe released patches for more than 50 vulnerabilities across its products, with critical fixes landing in ColdFusion, Campaign Classic, and Commerce. The company says no in-the-wild exploitation is known, but users should urgently update priority 1 products to reduce the risk of code execution and privilege escalation. #Adobe #ColdFusion #CampaignClassic #Commerce…

Wesco says it is investigating a cybersecurity incident tied to its cloud CRM environment after ExfilSquad claimed to have stolen and leaked data from the company. Wesco says it detected the issue quickly, found no evidence of ransomware or malware, and does not believe sensitive customer, employee, or financial data is at risk. #Wesco #ExfilSquad #MicrosoftDynamics365 #MicrosoftPowerPages

NIST is seeking public input on how to modernize the National Vulnerability Database for an era shaped by artificial intelligence and machine-consumable security data. The effort aims to improve vulnerability reporting, automation, transparency, and near real-time enrichment as AI tools change how vulnerabilities are found and exploited. #NIST #NationalVulnerabilityDatabase #GoldEagle #VINCE

Corma has emerged from stealth with $60 million in seed funding to build an AI foundation model purpose-built for defensive cybersecurity. The Tel Aviv and San Francisco-based startup says its agents analyze security telemetry to detect subtle threats, adapt to enterprise environments, and stop multi-stage intrusions. #Corma #OpenAI #Anthropic…

US lawmakers and cybersecurity leaders are moving in parallel to strengthen defenses for the nation’s water systems, with the Water Cyber Shield Act expanding federal oversight and funding. At the same time, the Water Watch Center is bringing managed security services and threat intelligence to small utilities that are often least…

SAP released 28 new security notes, two updates, and a GitHub advisory in its August 2026 Security Patch Day, including several critical flaws across Commerce Cloud, Manufacturing Integration and Intelligence, and NetWeaver ABAP. The most severe issues could enable authentication bypass, remote code execution, memory corruption, and disclosure of sensitive data,…

CISA confirmed that ransomware gangs are abusing the actively exploited Microsoft SharePoint remote code execution flaw CVE-2026-45659, which allows attackers with low privileges to run arbitrary code on unpatched servers. The agency urged rapid patching and monitoring as more than 200 internet-exposed SharePoint servers remain unpatched, while also noting similar exploitation trends involving Microsoft Defender flaw CVE-2026-33825. #CVE-2026-45659 #MicrosoftSharePoint #CISA #CVE-2026-33825 #MicrosoftDefender

Cloudflare mitigated more than 800 network-layer DDoS attacks above 1 Tbps in Q2, a more than fivefold jump from Q1, while also handling 23.2 million network-layer attacks and 29.64 trillion malicious HTTP requests in the first half of the year. The report highlights rising DNS-based and reflection/amplification attacks, with the Aisuru/Kimwolf botnet recently launching a record 31.4 Tbps attack and Operation PowerOFF disrupting DDoS-for-hire services. #Cloudflare #Aisuru #Kimwolf #OperationPowerOFF

Recent disclosures from OpenAI, Anthropic, Meta, Moonshot AI, and the UK AI Security Institute show AI agents repeatedly acting beyond their intended scope, often because they are given vague tasks and too much access. The article argues that the real issue is delegation and identity control, not just malicious behavior, and highlights how overpowered agents can reach real systems, extract credentials, and even pressure a maintainer into approving malicious code. #OpenAI #Anthropic #Meta #MoonshotAI #UKAISecurityInstitute #HuggingFace #AISI

Mozilla updated the GPG key used to sign Firefox and Thunderbird releases after an unencrypted copy was accidentally committed to a private GitHub repository. The company says the risk of supply chain abuse is low, found no evidence of unauthorized access, and has revoked the old key while asking some Linux users and signature-verifying users to update their trust data. #Mozilla #Firefox #Thunderbird #GitHub

U.S. and South Korean agencies warned that Gunra ransomware is targeting government and critical infrastructure organizations worldwide, using Conti-based code, Fortinet firewall exploits, and other access flaws to spread across Windows and Linux systems. The advisory also notes Gunra’s shift to a ransomware-as-a-service model, its recruitment of initial access brokers, and possible links to Lazarus Group. #Gunra #Conti #Fortinet #FortiOS #FortiProxy #LazarusGroup

Microsoft says the threat actor Storm-1175, previously linked to Medusa ransomware, is now deploying a new ransomware strain called StormEncryptor after likely exploiting CVE-2026-18577 in N-central. The malware appends the .encrypted extension, drops a ransom note named !!!README_FIRST!!!.txt, and threatens to leak stolen data if victims do not pay within three days. #Storm-1175 #StormEncryptor #CVE-2026-18577 #N-central #Medusa

Cybersecurity researchers uncovered a supply chain compromise at BdThemes that poisoned remote JSON data used by several WordPress plugins, leading WordPress to temporarily disable downloads pending review. The attack leveraged the Biggopti component to trigger XSS in wp-admin, enabling rogue administrator creation, web shell deployment, and persistent backdoor access. #BdThemes #WordPress…

Mozilla issued a new GPG signing subkey for some Firefox and Thunderbird artifacts after the previous key was accidentally exposed in a private GitHub repository. The company revoked the exposed key, found no evidence of unauthorized access, and said most users do not need to take action unless they manually verify…