ICYMI: 2026-08-07
Latest Headlines
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
ClickFix Attacks Deliver macOS Stealer That Can Drain Crypto Wallets
UNC6671 Vishing Attacks Target Personal Phones to Steal SaaS Data
New WordPress Pre-Auth XSS Could Lead to PHP Code Execution - Patch ASAP
18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers
New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
Microsoft 365 AitM Phishing Hijacks Accounts to Collect Payroll and Finance Emails
AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day
Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign
Vishing Extortion Group UNC6671 Rebrands After Making Millions
Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix
Black Hat USA 2026 – Summary of Vendor Announcements (Part 4)
3.8 Million Impacted by Unlimited Technology Systems Data Breach
WordPress XSS2Shell Flaw Chains Pre-Auth Login XSS to PHP Remote Code Execution
18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Full Root on Host
Malware Abuses Windows Hello for Business Key to Authenticate Microsoft Entra ID
CVE-2026-64561 Zapscape Lets KVM Guests Escape to Linux Host With Root Privileges
Google Chrome 151 Fixes 41 Security Flaws, Including 6 Critical Memory Bugs
Hackers Breach Swiss Government SharePoint Servers, Compromise 200 Accounts
Claude in Chrome Prompt Injection Steals Gmail Codes to Hijack Slack, X, and Claude.ai Accounts
Fake PDFs and Chat Apps Let Patchwork Spy on PCs and Android Phones
ChainDrop Worm Infects 400+ npm Packages to Steal GitHub and Cloud Credentials
UNC6671 Automates Microsoft 365 Data Theft After Hijacking Employee Sessions
Metabase SQLi zero-day exploited in customer data-theft attacks
Unlimited Technology Systems breach impacts 3.8 million people
Levi Strauss & Co. says hackers stole corporate data in cyberattack
North Carolina Ports confirms cyberattack disrupting operations
– MTZ