SharePoint Flaws Used to Hack Switzerland’s Federal IT Agency
Swiss Federal IT Agency FOITT says attackers exploited SharePoint flaws to compromise about 200 accounts. Servers are being rebuilt as investigations continue.
general
20 articles
New npm packages deliver remote access trojan targeting Alibaba developers
A new set of malicious npm packages were discovered targeting users of Alibaba developer tools with a cross-platform remote access trojan (RAT).
Bogus SQLite vulnerabilities highlight flaws in CVE pipeline
The Register reports that a batch of critical and high-rated SQLite CVEs, which were recently added to the National Vulnerability Database (NVD) with enrichm...
Fake Roblox Xeno executor installers distribute malware
Fake Xeno Executor installers are targeting Roblox players with malware that provides remote access and steals sensitive information.
Russia-linked Midnight Blizzard targets hotel Wi-Fi networks in US, Europe
Hotel Wi-Fi phishing campaign targets business travelers, Microsoft warns.
New XCSSET variant targets macOS devs via compromised Xcode projects
A new version of the XCSSET malware is targeting thousands of macOS users through compromised Xcode projects and GitHub repositories. [.
Iran Cyberattacks Against Minnesota Water Systems
Attribution is preliminary, and so far it seems no real damage. And it seems like this is a campaign that has targeted at least seven states.
77 Open VSX extensions found harvesting developer info
77 extensions on the Open VSX marketplace impersonated legitimate developer tools while transmitting information about the systems and development environmen...
Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages
Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time.
Dem senators criticize Trump administration decisionmaking on AI security risks
The five senators said the administration has alternated between being too passive and overstepping, and China stands to benefit as a result. The post Dem se...
Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens
The commercial phishing-as-a-service (PhaaS) toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a r...
Airlock Digital Unveils Agentic AI Control & Governance to Extend Preventative Endpoint Security
Atlanta, GA, August 4th, 2026, CyberNewswire Airlock Digital announces Agentic AI Control & Governance, extending its preventative endpoint security solution...
Mallory Unifies Threat Intelligence, Exposure Context, and Response Into One Architecture for Security Teams
Las Vegas, United States, August 4th, 2026, CyberNewswire As AI-assisted attackers compress exploitation timelines to hours, Mallory turns live adversary int...
Keyv, cacheable npm supply chain attack hits 400-plus packages
The attack is believed to be related to Mini Shai-Hulud.
Black Hat USA 2026 – Summary of Vendor Announcements (Part 2)
Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas. The post Black Hat USA 2026...
Airlock Digital Unveils Agentic AI Control & Governance to Extend Preventative Endpoint Security
Atlanta, GA, 4th August 2026, CyberNewswire
Britain’s next war won’t be an away game: Q&A with former head of Defence Intelligence
As Chief of Defence Intelligence, General Sir Jim Hockenhull decided to declassify and publish what London knew of Russia’s plans to invade Ukraine, down to ...
Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the ...
Black Hat 2026: 6 qualities security pros should look for in agentic AI systems
Teams need to implement agentic AI with and open mind – and a closed security model.
The real crisis: Your AI agents are over-privileged
Overprivileged AI agents drive incidents. Least privilege and unified identity reduce AI risk.