Adobe released patches for more than 50 vulnerabilities across its products, with critical fixes landing in ColdFusion, Campaign Classic, and Commerce. The company says no in-the-wild exploitation is known, but users should urgently update priority 1 products to reduce the risk of code execution and privilege escalation. #Adobe #ColdFusion #CampaignClassic #Commerce…
Traditional email security focuses on scoring messages after they reach the inbox, but modern attackers build full campaigns with lookalike domains, fake profiles, and backup channels before a phishing email is ever delivered. The article argues that AI-native defenses like Doppel Email Security must trace attacks to external infrastructure and dismantle that infrastructure to stop phishing, smishing, and vishing campaigns at the source. #Doppel #DoppelEmailSecurity #DBIR
![Cybersecurity News | Daily Recap [10 Aug 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [10 Aug 2026]")
Daily Recap, AI security risks are rising as OpenAI’s upcoming Astra model and security gaps in AI accelerators/neo-clouds raise concerns about autonomous abuse and infrastructure blind spots, while new guidance calls for an interaction-aware layer over CASB and DLP to better control prompts and agent behavior. Separately, Cisco warned of high-severity ClamAV issues with a public PoC, Metabase and Progress LoadMaster faced actively exploited flaws, Belgium’s eID software was found to contain critical vulnerabilities affecting 2 million users, and enterprise impact included LexisNexis shutting down services amid suspicious activity. #Astra #ClamAV #Metabase #ProgressLoadMaster #BelgianEID #eID #LexisNexis
Wesco says it is investigating a cybersecurity incident tied to its cloud CRM environment after ExfilSquad claimed to have stolen and leaked data from the company. Wesco says it detected the issue quickly, found no evidence of ransomware or malware, and does not believe sensitive customer, employee, or financial data is at risk. #Wesco #ExfilSquad #MicrosoftDynamics365 #MicrosoftPowerPages
Advancedtaxsolutions.com in the US reported a ransomware incident attributed to threat actor settra, claiming that files from Frank Rim & Associates: Archive of a Tax Consulting Practice were archived/exfiltrated as part of the attack. The prologue described the collection of tax-case information through the initial compromise and subsequent encryption/extortion. #UnitedStates
Profinergy BV (profinrg.nl) in the Netherlands lost control of thousands of files to ransomware attributed to the settra threat actor. The incident impacted files across the Netherlands #Netherlands
QPC Global (Quest Personal Care Global Ltd) in GB reported a ransomware incident attributed to dragonforce, a threat actor targeting organizations to disrupt operations and extort data or access. The attack impacted company systems supporting its global beauty and personal care operations in #UnitedKingdom
NIST is seeking public input on how to modernize the National Vulnerability Database for an era shaped by artificial intelligence and machine-consumable security data. The effort aims to improve vulnerability reporting, automation, transparency, and near real-time enrichment as AI tools change how vulnerabilities are found and exploited. #NIST #NationalVulnerabilityDatabase #GoldEagle #VINCE
Simian, a Groningen-based low-cost printing company, warned customers in the Netherlands and Belgium that a cyberattack may have exposed personal data, including email addresses and hashed passwords. The company said a third-party service provider was involved and reported the incident to the Dutch Data Protection Authority and the police. #Simian #DutchDataProtectionAuthority #Groningen
Unit 42 reports Kimwolf v7, an Android/IoT botnet update that strengthens DDoS flooding and adds a more resilient three-tier C2 system using Ethereum ENS, Tor, and a local proxy. The malware targets Android TV boxes and set-top boxes, spreads through abused ADB access, and uses HTTP/2 browser fingerprinting to make attack…
Corma has emerged from stealth with $60 million in seed funding to build an AI foundation model purpose-built for defensive cybersecurity. The Tel Aviv and San Francisco-based startup says its agents analyze security telemetry to detect subtle threats, adapt to enterprise environments, and stop multi-stage intrusions. #Corma #OpenAI #Anthropic…
US lawmakers and cybersecurity leaders are moving in parallel to strengthen defenses for the nation’s water systems, with the Water Cyber Shield Act expanding federal oversight and funding. At the same time, the Water Watch Center is bringing managed security services and threat intelligence to small utilities that are often least…
SAP released 28 new security notes, two updates, and a GitHub advisory in its August 2026 Security Patch Day, including several critical flaws across Commerce Cloud, Manufacturing Integration and Intelligence, and NetWeaver ABAP. The most severe issues could enable authentication bypass, remote code execution, memory corruption, and disclosure of sensitive data,…
CISA confirmed that ransomware gangs are abusing the actively exploited Microsoft SharePoint remote code execution flaw CVE-2026-45659, which allows attackers with low privileges to run arbitrary code on unpatched servers. The agency urged rapid patching and monitoring as more than 200 internet-exposed SharePoint servers remain unpatched, while also noting similar exploitation trends involving Microsoft Defender flaw CVE-2026-33825. #CVE-2026-45659 #MicrosoftSharePoint #CISA #CVE-2026-33825 #MicrosoftDefender
Cloudflare mitigated more than 800 network-layer DDoS attacks above 1 Tbps in Q2, a more than fivefold jump from Q1, while also handling 23.2 million network-layer attacks and 29.64 trillion malicious HTTP requests in the first half of the year. The report highlights rising DNS-based and reflection/amplification attacks, with the Aisuru/Kimwolf botnet recently launching a record 31.4 Tbps attack and Operation PowerOFF disrupting DDoS-for-hire services. #Cloudflare #Aisuru #Kimwolf #OperationPowerOFF