Cybersecurity Hacking News

• Cisco addressed an IMC bug as part of last week's key security updates.
• July 2026 Patch Tuesday set records with the highest patch volume across...

Cyber threats move daily, not quarterly. Attackers exploit new vulnerabilities within days of disclosure, while IT environments shift constantly...

A wave of high-severity patches dropped across platforms this week, signaling urgent risks.

• BTCPay Server: Active exploitation drained Lightning...

Iran-linked APT42 pairs generative AI for crafting personalized phishing lures with its upgraded TAMECAT backdoor to maintain long-term access on government officials' devices through stealthy WebDAV and search-ms delivery.

BTCPay Server is hit by attacks targeting a critical vulnerability.

Qilin ransomware claimed an attack on Clausing, a German industrial firm, while Coweta, Oklahoma faces a system-wide ransomware incident affecting municipal computers, files, and services. This highlights the ongoing threat across both sectors.

AI-driven cyberattacks are seen as inevitable by 65% of Singapore and Australia IT leaders within the next year, yet only 40% of organizations provide...

Apple rushed out macOS Tahoe 26.6.1 (plus backports for Sequoia and Sonoma) to fix CVE-2026-65400, a flaw letting nearby attackers bypass Screen...

• Breach Details: Chaos ransomware listed Radia on its leak site July 16, 2026, claiming 655GB of stolen data.
• Compromised Records: Full names,...

A critical Metabase zero-day SQL injection flaw is actively exploited, exposing organizations to immediate risk.

Critical Metabase zero-day (CVSS 10.0) is actively exploited in the wild, enabling unauthenticated attackers to inject SQL and seize admin access.

-...

A crafted link could silently seed attacker instructions into Rovo sessions using the rovoChatPrompt parameter, with no jailbreak required.

• Rovo's...

• Systemic vulnerabilities: Small municipalities with limited budgets remain prime targets, as the Coweta attack crippled services citywide.
• Backups...

• Fairlife halted all U.S. production for over a week after hackers breached its systems.
• Downtime equated to "death" in food manufacturing,...

Cisco disclosed seven ClamAV flaws allowing remote DoS attacks via crafted files, with details made public and a call to patch immediately.

-...

The 16-year sentence for Belarusian national Maksim Silnikau marks a clear win for law enforcement and raises the stakes for ransomware-as-a-service...

Framework alerted customers on August 6 about an August 3 Metabase zero-day attack that leaked names, addresses, emails, phones, and login IPs.

-...

• Investigators confirm 1,719 BTC ($111M) stolen from Coldcard wallets, potentially exceeding 2,300 BTC if unconfirmed cases hold.
• Firmware flaw...

Affected Sciencenter visitors may pursue data breach lawsuits for compensation despite sparse details on the exposed data and incident cause. The...

Tennessee-based Evans Petree, a full-service law firm, was breached by threat actor Storm with leak size unknown. The incident spotlights ongoing vulnerabilities in the legal sector handling sensitive client information.