NightBroker posted a free listing claiming twelve unrelated WordPress/WooCommerce sites were exposed, affecting small business e-commerce targets across multiple regions. The dump reportedly contains 14,453 customer records and 216,470 usernames, with the listing observed on Aug. 5, 2026. #NightBroker #WordPress #WooCommerce…
An actor posting as exfilar claims BudBoard left a cloud storage bucket publicly readable, exposing database exports, client data, and other sensitive configuration details tied to 18 dispensary and brand clients. The alleged exposure also included a screenshot of a production POS API key, which could affect downstream retail systems if…
CISA has ordered federal agencies to quickly mitigate actively exploited vulnerabilities in IBM Langflow, N-central, and Apache Tomcat. The flaws include critical remote code execution and account hijacking issues that threat actors are already using in attacks, with proofs of concept and exploitation activity publicly observed. #IBMLangflow #Ncentral #ApacheTomcat #CVE-2026-9198 #CVE-2026-18576 #CVE-2026-34486 #CVE-2026-0770
A phishing campaign is abusing fears around the COLDCARD wallet vulnerability and the suspected $88.6 million Bitcoin theft to lure victims into installing ScreenConnect remote access software. The attackers impersonate COLDCARD with fake security audit emails and a bogus support site to pressure users into running a malicious diagnostic tool. #COLDCARD #ScreenConnect #Coldcard_Diagnostic_Tool #activeretirementrelocation.com
Palo Alto Networks disclosed Pass-ta-key attack methods that can let malware hijack Google-synced passkeys and take over protected accounts without user interaction. The researchers also described Silver Pass-ta-key and Golden Pass-ta-key variants, while Google has been notified and mitigations have been rolled out. #Pass-ta-key #SilverPass-ta-key #GoldenPass-ta-key #Google…
Cyberspace has become a fourth domain of military conflict, closely tied to espionage, regime change, and territorial disputes between nation states. The article shows how cyber operations have supported kinetic actions in Venezuela, Iran, Ukraine, and Taiwan, while warning that future conflict in the Taiwan Strait could be especially dangerous. #VoltTyphoon…
Black Hat USA 2026 featured a wave of new cybersecurity launches, integrations, and research from vendors focused on AI security, identity protection, threat intelligence, and recovery. Key announcements included CrowdStrike, Palo Alto Networks, ServiceNow, Tenable, Rubrik, and others unveiling tools to defend against emerging risks such as rogue AI agents, insider…
STADLER Sensorik CNC-Technik in AT reported a ransomware incident attributed to the qilin threat actor, resulting in disruption to its systems and data availability. The attack impacted AT#Austria
Mike Graham Heating And Air Conditioning, a trusted Wichita Falls, Texas HVAC and plumbing provider, was reportedly targeted by ransomware associated with threat actor dragonforce. The incident reportedly impacted organizations in the United States. #UnitedStates
P. A. Inc. (Performance Alloys), a Houston, Texas-based US distributor of high nickel alloy and specialty stainless steel piping products, reported a ransomware incident involving the threat actor dragonforce. The attack impacted the company’s operations and services supporting sectors such as specialty chemicals, oil and gas, and petrochemicals, resulting in disruption within the United States #UnitedStates
The Chambre des salariés (CSL) confirmed a cyberattack that involved unauthorized access to some of its servers, with the incident now contained while investigations continue. Users are warned to watch for phishing attempts aimed at stealing confidential information, login credentials, or banking details. #ChambreDesSalariés #CSL
![Cybersecurity News | Daily Recap [04 Aug 2026]](https://www.hendryadrian.com/tweet/image/DailyRecap.png "Cybersecurity News | Daily Recap [04 Aug 2026]")
Daily Recap, Funding and deal activity included Oligo raising $60 million for runtime security, while Visa agreed to acquire BioCatch for $2.4 billion to bolster identity and fraud defenses. Key incidents covered hotel Wi‑Fi attacks targeting Microsoft 365 via custom malware, account takeover risk from Pass-ta-key against Google-synced passkeys, and active exploitation of N-able N-central and SonicWall SMA 1000 flaws alongside ransomware and data-leak follow-ons. #Oligo #RuntimeSecurity #Visa #BioCatch #HotelWiFi #Microsoft365 #Pass-ta-key #GooglePasskeys #N-able #N-central #SonicWallSMA1000 #INC_Ransomware #ExfilSquad #LiechtensteinRegistry #RiverBank
AI has made blocklist-based defense obsolete by enabling attackers to rapidly create, rotate, and disguise phishing infrastructure faster than indicators can be tracked. The article argues that lasting protection comes from technique-level behavioral detection, with examples including AiTM phishing, ClickFix, device code phishing, and novel attacks like InstallFix, ConsentFix, and LLMShare. #AiTM #ClickFix #DeviceCodePhishing #InstallFix #ConsentFix #LLMShare #PushSecurity
EPM (Empresas Públicas de Medellín) is a Colombian public utility company providing electricity, water, sewage, and natural gas services, headquartered in Medellín. The ransomware claim attributed to threat actor everest targeted EPM, impacting #Colombia
In a ransomware incident targeting Stade Francais in FR, the threat actor qilin encrypted critical data and demanded a ransom for restoration. The attack disrupted business operations and led to data access and availability impacts in #France