Threat actors are opportunistically exploiting two patched MiniOrange SAML 2.0 Single Sign-On vulnerabilities, CVE-2026-61979 and CVE-2026-15981, to bypass authentication on WordPress sites. The silent patching approach and inconsistent versioning for paid editions make it difficult for site owners to know whether they are protected. #CVE-2026-61979 #CVE-2026-15981 #MiniOrange…
Alice raised $140 million to strengthen AI systems against emerging vulnerabilities, bringing its total funding to $280 million. The company uses stress-testing, continuous red-teaming, and its Rabbit Hole dataset to help developers defend against prompt injection, jailbreak attempts, and other adversarial attacks. #Alice #RabbitHole #ActiveFence…
The Linux Foundation has assumed governance of TRACE, an open specification that produces verifiable evidence of how AI agents and confidential workloads run across different environments. Developed with OPAQUE, AMD, Intel, Microsoft, and TII, TRACE combines existing standards to create portable, hardware-backed proof for compliance, security, and AI runtime transparency. #LinuxFoundation…
WhatsApp is rolling out new account security features, including support for multiple passkeys across devices and stronger two-step verification with full alphanumeric passwords. It is also adding more context on call screens for unknown callers to help users spot scam attempts before answering. #WhatsApp #Passkeys
Microsoft has updated PowerToys with Window Hopper, a new utility that lets users switch between windows of the currently focused app using a configurable Alt + backtick shortcut. The release also adds compact mode for Command Palette, linked brightness controls for multiple displays, Shortcut Guide Windows-key activation, DemoMirror, and a new Mouse Highlighter ripple mode. #PowerToys #WindowHopper #CommandPalette #DemoMirror #ZoomIt
Security teams have strengthened logins with MFA and conditional access, but attackers are increasingly targeting onboarding and account recovery instead of the authentication flow itself. The article highlights how groups like Scattered Spider and North Korean IT workers exploit weak identity verification at the service desk, and how Specops Verified ID adds document validation and biometric liveness detection to help stop impersonation. #ScatteredSpider #NorthKoreanITWorkers #SpecopsVerifiedID #M&S
Nutex Health is investigating a data breach after an unauthorized third party allegedly exfiltrated information from its servers, including data that may be private or confidential. The company has activated its incident response process, notified law enforcement, and says it has not yet determined whether patients, employees, or business partners were affected. #NutexHealth #NUTX
A large DDoS attack has disrupted Norway’s shared government digital infrastructure, affecting services run by the Norwegian Digitalization Agency (Digdir) and its provider Vivicta. Digdir says there is no sign of a security breach or personal data compromise, but some services like ID-porten and eSignering remain partially unavailable. #Digdir #Vivicta #ID-porten #eSignering #Altinn #Skatteetaten
On August 19, 2026, threat actor ShadowByt3$ compromised Knottingham Trent University (GB) after gaining access via webapps.ntu.ac.uk and allegedly stole high-risk personal data, including passport details, dates of birth, contact information, home addresses, and academic/employment records. The victim was reportedly locked out, and the attacker threatened to leak the data if the university did not comply, impacting the United Kingdom. #UnitedKingdom
We breached A-Plus Software Limited in the UK (GB) via a SQL injection vulnerability, accessed their backend on 08/18/2026, and downloaded backend and website content, including administrative user data with SHA-1 password hashes and internal account metadata, plus marketing/public web datasets (products, product content, news, and categories). The threat actor involved is ShadowByt3$ and the impacted country is #UnitedKingdom.
Sinar Mas Agribusiness and Food (Golden Agri-Resources) in Indonesia was breached by ShadowByt3$ a few months ago, with 375.66MB of data reportedly stolen. The incident and claimed leak are discussed on darkforums.ru, with details mirrored at https://anonfilesnew.com/s/4t-mBJg9wMy. #Indonesia
IServ, the national school platform in Germany, was hit by a cyberattack affecting a cloud module operated by the provider. Hattingen officials said local schools use the module and may be indirectly affected, but no personal data breach involving students or parents has been confirmed so far. #IServ #Hattingen
The municipal government of San Luis Potosí was hit by a ransomware attack in which the attackers demanded payment in exchange for not releasing stolen information. The city refused to negotiate, filed a federal complaint, and confirmed that while much of the exposed data was already public, its systems were still compromised. #SanLuisPotosí #sanluisgobmx
Sotheby’s International is investigating a cybersecurity incident involving unauthorized access to data stored on a third-party software platform. Potentially exposed information includes names, addresses, email addresses, and phone numbers, while email exchanges, property-related documentation, and financial transaction data were not accessed. #SothebysInternational #Sothebys.com
Kaspersky researchers found what may be the first malware built specifically for car head units, delivered through a compromised update channel on DoFun Android infotainment systems. The campaign appears linked to the BadBox botnet and the MoYu Group, suggesting an expansion of BadBox beyond TV boxes and into vehicle systems. #DoFun…