ICYMI: 2026-08-19
Latest Headlines
Cloudflare Workers Spectre Attack Leaks JWT From Co-Located Worker at 12 Bits/Second
OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior
SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs
Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P
StopAndProtect Uses Nearly 2,000 Hacked WordPress Sites to Spread Malware and Steal Data
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
Microsoft Links 30+ Rotating Domains to MacSync Stealer Infrastructure
Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data
Reverse-Lookup Service Exposed Millions of Photos of People’s Faces
Flock Has a Powerful New AI Tool for Police. We Got Its Code
Virtual Event Today: CodeSecCon – Secure Your Code and Applications
Prevalent AI Raises $22 Million to Expand Data Fabric Platform
US Charges 17 Iranian Hackers, Offers $10 Million Rewards for 5 of Them
Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign
CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities
943 Patches Rolled Out With Oracle’s August 2026 Security Update
CareCloud Data Breach Impact Grows to 3.7 Million Individuals
Trusted Vendors Are Becoming Attack Paths: How US and EU Enterprises Can Reduce the Risk
Critical Citrix NetScaler Flaw Lets Remote Attackers Bypass Authentication Without Credentials
CISA Adds Microsoft Internet Key Exchange RCE Vulnerability Exploited in Attacks
Hackers Let Microsoft 365 Users Complete MFA, Then Steal Logged-In Sessions
Microsoft 365 Service Degradation Disrupts Users Across South America
CISA Adds Microsoft SharePoint Weak Authentication Vulnerability to KEV List
Microsoft to End Support for Windows 11 24H2 Home and Pro Editions
China-Nexus Hackers Disguise Malicious VHD as JPEG to Deploy QUICAgent Backdoor
Hackers Use AI Voice Calls and Fake Banking Pages to Bypass MFA and Steal Accounts
Rogue ransomware affiliate poses as recovery firm to steal payments
Sakura Internet hack exposes data of up to 1.36 million accounts
Healthtech firm CareCloud data breach impacts 3.7 million patients
Hackers compromise 14,500 Dahua web cameras in 35-day campaign
US warns of AI-powered attacks on Siemens PLCs in critical infrastructure
US charges Iranian hackers over $3.4 billion intellectual property theft
Password spraying attacks surge 155x as hackers exploit MFA gaps
Microsoft fixes known issue causing Windows Defender crashes
Critical RCE flaw in Windows IKE Extension now actively exploited
Windows 11 24H2 Home and Pro reach end of support in 2 months
CISA: Medusa ransomware hit over 500 critical infrastructure orgs
– MTZ