ICYMI: 2026-08-18
Latest Headlines
Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected Apps
Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets
Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000
AI “Mind Viruses” Can Spread Between Agents Through Persistent Prompt Files
TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks
One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025
16 Typosquatted RubyGems Packages Steal Browser Credentials and Crypto Wallets
SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers
CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE
OpenAI Overhauls Safety Protocols After Its AI Agents Went Rogue
Meta Ran Ads for an App That Promised to Nudify Female Politicians
Can AI Coexist With Privacy? Proton’s Andy Yen Says It Will Have To
Webinar Today: Rethinking Cyber Defense for AI-Speed Attacks
CISO Conversations: Nico Waisman – From Self-Taught Hacker to AI-Driven Offensive Security at XBOW
AI-Driven Vulnerability Surge Breaks the Traditional Patching Model
Xpander Raises $7.5 Million for AI Management and Governance
300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw
Heights Finance Data Breach Impacts at Least 1.2 Million Individuals
Dozens of WebKit Vulnerabilities Patched With Fresh macOS, iOS Security Updates
CISA Warns Medusa Ransomware Hackers Steal Data, Kill Security Tools, and Encrypt Entire Networks
French Tax Authority Data Breach Exposes 600,000+ Users’ Personal Tax-Related Data
Critical MLflow SSRF Vulnerability Exploited by Hackers in the Wild
Hackers Hijack Thousands of WordPress Sites to Use as C2 Servers for StopAndProtect Malware
Microsoft 365 Search Outage Disrupts SharePoint, OneDrive, and Outlook Users Worldwide
Anthropic Launches New /design Skill for Claude Code UI Workflows
Projextor Shows How Malware Can Hide Behind Trusted Electron Executables
BTMob Fraud-as-a-Service Platform Uses 1,400 Live Servers to Power Android Device Takeovers
GEEKOM Mini PC Realtek LAN Driver Package Found Infected With Asruex Trojan
Clop created custom web shell for Windchill data theft attacks
Microsoft tests faster Windows File Explorer, new context menu
CISA: Windows Task Host flaw now exploited by ransomware gangs
Microsoft confirms outage affecting search in Microsoft 365 apps
– MTZ