ICYMI: 2026-08-03
Latest Headlines
18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks
FOMO in the SOC: Where AI Platforms like Claude Actually Fit
Chinese Threat Actor Uses Leaked DarkSword Kit to Deploy GHOSTBLADE on iOS
PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web
Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete
Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code
ICE Collected Nearly 1 Million People’s DNA Last Year—Including Young Children
Black Hat USA 2026 – Summary of Vendor Announcements (Part 1)
Visa to Acquire Fraud Intelligence Firm BioCatch for $2.4 Billion
Cyberattack Hits Liechtenstein’s Register of People Behind Companies and Foundations
River Bank Says Hackers Deleted Data Stolen in Ransomware Attack
N‑able Patches Vulnerability Exploited to Hack N-central Servers
Recent SonicWall Vulnerabilities Exploited in Ransomware Attacks
Russian State APT Linked to Recent Public Wi-Fi Gateway Hacking
US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States
Malware Can Steal Your Google Synced Passkey Without Asking for Your Password or Fingerprint
DNA Test Software Vulnerability Allows Attackers to Alter Analysis Data
Public PoC Released for Critical Rails Active Storage RCE Vulnerability
Hugging Face Diffusers Vulnerabilities Enable Remote Code Execution Through Malicious AI Models
TP-Link TL-WR940N Vulnerability Enables Remote Code Execution Attacks
Hackers Exploit VeloCloud Orchestrator Command Injection Vulnerability in the Wild
Android RAT Survives Reboots Using Watchdog Services and Boot Receivers
ModernStealer Threat Actor Linked to Government and Defense Data-Leak Claims
Internet-Facing SonicWall SMA Appliances Face Zero-Click Root Compromise
XCSSET v40 Abuses Chrome DevTools Protocol to Steal Cookies and Run Commands
New Pass-ta-key attacks let malware hijack Google-synced passkeys
New DOUBLECUP ClickFix service hides malware in browser cache images
Fake Roblox Xeno script launcher pushes infostealer, RAT malware
N-able warns of N-central auth bypass flaw exploited in attacks
ExfilSquad hackers leak info of over 100,000 UK police officers, staff
Inside the Underground Business of the Android BTMOB RAT malware
– MTZ