Cisco security advisory (AV26-794)

Crims talked their way onto three employee PCs before trousering corporate data

OpenAI has developed a new model called "GPT 5.6 Cyber," designed for vulnerability research, penetration testing, incident response, and remediation. [...]

Roundcube security advisory (AV26-793)

Pub chain says turn off the cameras, reminds punters not to blare sound from phone vids either

Justin Swaddle, who was a minor when he committed the crimes, coerced children across multiple countries into self-harm and sexual abuse using threats tied to their personal information,...

Stored Cross-Site Scripting vulnerability (CVE-2026-18478) has been found in Magnolia CMS software.

No, no nasties to see here, guv...

HashiCorp security advisory (AV26-791)

WordPress security advisory (AV26-792)

WebPros security advisory (AV26-790)

IBM security advisory (AV26-789)

This post is the result of an investigation into a case we worked on, in which we traced a loader chain that ended where we didn't expect.

For the latest discoveries in cyber research for the week of 10th August, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES North Carolina Ports, the US authority...

A financially motivated threat actor previously associated with the Medusa ransomware operation is now deploying a new ransomware strain called StormEncryptor. [...]

Repairable hardware is little comfort when personal details escape

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-pro") that has been observed delivering a browser wallet and...

Heap-based buffer overflow vulnerability (CVE-2026-18370) has been found in eradman entr software.

Dell security advisory (AV26-788)

Walk away and hope the classifier catches anything irreversible or destructive

Reverse engineering GHSA-vwf4-m7j8-wcjf with AI to accelerate defense.

CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-66484 to CVE-2026-66486) found in GNU cpio software.

OpenAI has announced that it's pausing some "internal activities" involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation found it had made significant...

This is good: Post-quantum cryptography is now one pip-install away for the entire Python ecosystem. With funding from the Sovereign Tech Agency, we implemented support for ML-KEM, the...

CERT Polska has received a report about 4 vulnerabilities (from CVE-2026-71391 to CVE-2026-71394) found in GNU Emacs software.

CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-side request forgery (SSRF) flaw. [...]

AI is making phishing, credential theft, and social engineering faster and more efficient, while traditional trust signals such as passwords, MFA, IP reputation, and geolocation become easier to...

The report presents key trends and statistics on malware that targeted personal computers running Windows and macOS, as well as internet of things (IoT) devices, during Q2 2026.

This report contains mobile threat statistics for Q2 2026, along with noteworthy discoveries and quarterly trends: the Anatsa banker and a transition to droppers.

A brand is more than a logo, website, or trademark. It represents the trust customers place in a business, the reputation it has built, and the digital experiences associated with its name. Today,...