AliExpress was found silently running WebAudio-based fingerprinting scripts in the browser, which even interfered with a researcher’s Bluetooth multipoint headphones while appearing to play no visible media. The hidden tracking code, tied to Alibaba’s AWSC anti-abuse tooling, also collected canvas, WebGL, hardware, and user interaction data for telemetry and fraud detection….
South Korea’s government-backed startup platform, Modu-ui Changup, suffered a data breach after an API exposed an encryption key, allowing encrypted personal information and startup idea summaries to be disclosed. The incident shows that encryption is not enough without secure key management, and authorities linked the leak to about 5,000 successful applicants and continued investigating possible AI-based crawling activity. #Modu-uiChangup #MinistryofSMEsandStartups #D.AMO #PentaSecurity
Microsoft is introducing a new Teams meeting protection policy that can automatically block identified external bots from joining meetings, adding stronger controls beyond the June update that required organizer approval in the lobby. The rollout begins as a targeted release through August and will reach general availability in late September, helping reduce risk from third-party bots and malicious apps used by threat actors in Teams-based attacks. #Microsoft #Teams
ReliaQuest confirmed that one employee was targeted in a social engineering attack involving a fake SSO page, with the attacker using a lookalike .claims domain and vishing tactics. The company says the incident was contained with no customer data accessed, while ShinyHunters publicly claimed the attack and posted evidence of access to a ReliaQuest Okta SSO account. #ReliaQuest #ShinyHunters #Okta
FFKR Architects, a leading US architecture and interior design firm with offices in Utah, Arizona, and Idaho, reported a ransomware incident attributed to the incransom threat actor. The attack impacted operations across the United States. #UnitedStates
Criba (AR) in Argentina reported a ransomware claim by threat actor dragonforce, with leaked data reportedly covering Argentina, Uruguay, and other countries, including financial and client documentation and a large volume of information not intended for public disclosure. #ArgentinaUruguay
Frato in Brazil was targeted by the dragonforce ransomware threat actor, with the release claiming exposure of data spanning the entire group of companies across all operating countries. The leaked materials reportedly include financial documentation, shareholder information, and personal data for employees and clients. #Brazil
Broadcom’s Spring framework received patches for 91 vulnerabilities, including a critical flaw in Spring Security’s embedded UnboundID LDAP server and other issues affecting widely used Spring projects. Sonatype noted that the fixes span more than 200,000 software components, with two standout bugs in Spring for GraphQL and Spring AI drawing particular…
Dutch data protection authorities fined Uber 825 million euros for using automated software to suspend driver accounts without human review, citing violations of the EU’s GDPR. The regulator said Uber also failed to properly inform drivers about automated decision-making, while Uber said it disagreed and will appeal. #Uber #DutchDataProtectionAuthority #GDPR…
CISOs are often judged differently than other C-suite leaders: recruited for technical strength, then evaluated by boards on cost, growth, and customer trust. The article argues that security must be tied to measurable business outcomes like faster deals, stronger trust, and market expansion to be seen as strategic rather than overhead….
Microsoft confirmed that the August 2026 .NET Framework cumulative update is causing printing and PDF/XPS export failures in some WPF applications, with errors affecting certain fonts such as Calibri. A temporary AppContext switch workaround is available, but Microsoft warns it disables protections added by the update and should only be used until a permanent fix is released. #.NETFramework #WPF #Calibri #Windows10 #Windows11 #WindowsServer2025
The ransomware claim attributed to threat actor qilin impacted A&E + SMA Design in the United Arab Emirates by encrypting or disrupting files and systems. The affected organization is reported in #UnitedArabEmirates
Panzer ransomware targeted Senvibe, aiming to disrupt operations of the SENVIBE project focused on building Serbia’s national educational capacities and expertise in environmental and occupational noise and vibration engineering. The incident impacted #Serbia
A Venezuelan national, Juan Manuel Gouveia-Aguilera, was sentenced to 8 years in prison for his role in an ATM jackpotting scheme that caused more than $3.5 million in losses. The case is tied to a wider Nebraska investigation involving 119 defendants believed to be working on behalf of Tren de Aragua….
On August 21, 2026, BizLink Holding Inc. detected a targeted cybersecurity incident that affected a limited portion of its IT systems, prompting immediate isolation of the impacted systems and restoration efforts with external experts. Preliminary assessments indicate no significant impact on overall operations or finances, while insurance claims are still being evaluated. #BizLinkHoldingInc