Cybersecurity

Vulnerabilities, attacks, threats, security tools, cloud security, and identity.

45 Articles

Cybersecurity

CEVA Logistics Breach Exposes Pokémon Center Customer Data in the UK and Germany and Cancels Some Orders

Pokémon Center informed customers in the United Kingdom and Germany that a cyberattack on logistics company CEVA Logistics exposed their names, addresses, and order details. The incident also caused shipping delays and the cancellation of some orders, while the company confirmed that payment card data was not affected.

2026-08-17

Cybersecurity

Hacker Offers 3.64 Million Azure Account Records Belonging to Major Companies

An attacker named TheHatman claims to have stolen 3.64 million employee and corporate account records from Microsoft Azure environments belonging to major companies and is offering them for sale. BleepingComputer was unable to independently verify the authenticity of the data, while Tata Consultancy Services and Gap Inc. denied finding evidence that their systems had been breached.

2026-08-17

Cybersecurity

Microsoft Working on a Patch for the ShieldBreak Vulnerability in Defender

Microsoft has begun preparing a security update to address a privilege escalation vulnerability in Microsoft Defender, tracked as CVE-2026-69414, after a security researcher published an exploit proof of concept on updated Windows systems. Exploitation requires local access and limited privileges, and Defender must be enabled for the privilege escalation to succeed.

2026-08-17

Cybersecurity

French Tax Authority Breach Affects Data of 678,000 Individuals and Businesses

France’s Ministry of the Economy and Finance announced that an attacker managed to access the systems of the Directorate General of Public Finance and steal data belonging to 678,000 individuals and professionals, including tax information and property data. The ministry confirmed that user accounts and passwords were not affected, while authorities continue investigating and notifying those impacted.

2026-08-17

Cybersecurity

Philips and GE Investigate Clop Gang Claims of Data Theft

Philips and GE confirmed that they are investigating claims by the Clop gang that it breached their systems and stole data, while Philips said a limited incident affected an internal server, was contained, and did not impact customer environments. The claims are linked to the exploitation of a critical vulnerability in the PTC Windchill and PTC FlexPLM platforms.

2026-08-17

Cybersecurity

SafePal Data Breach Affects Approximately 39,798 Customers, Information Offered for Sale on Criminal Forum

SafePal warned that order data belonging to approximately 39,798 customers was leaked following the exploitation of a flaw in the order-tracking function, while an attacker claims to be offering the data for sale. According to the company, the incident did not include wallet keys, recovery phrases, or payment data.

2026-08-16

Cybersecurity

AmnesiaStealer Malware Allows Attackers to Remotely Control macOS Browser Sessions

Jamf discovered a new information-stealing malware targeting macOS users through ClickFix campaigns. It can copy Chromium profiles and run them in a hidden browser, allowing the attacker to control the user’s authenticated sessions. In addition to stealing browser data, the malware collects passwords, cryptocurrency wallets, Keychain data, and other files.

2026-08-16

Cybersecurity

CHERI Redefines Pointer Security to Build Fine-Grained Software Isolation

David Chisnall explains how the CHERI architecture uses hardware capabilities to protect pointers and enforce memory bounds and permissions, providing spatial and temporal security for software written in C and C++ without extensive rewriting. The presentation connects this mechanism to the possibility of building precise isolation between system components while directly sharing data structures instead of relying entirely on traditional RPC mechanisms.

2026-08-16

Cybersecurity

Evooo1Bot Malware Network Turns Routers into Traffic Relay Nodes

Researchers have identified a new Mirai-based malicious network targeting internet-connected gateway devices and turning them into SOCKS5 nodes for relaying traffic, with capabilities for stealing credentials and conducting DDoS attacks. Evooo1Bot exploits known vulnerabilities in multiple devices and products and uses advanced stealth and persistence mechanisms.

2026-08-15

Cybersecurity

Cloudflare Enables One-Click Protection for Workers Applications Through Access

Cloudflare has launched new tools to connect Access policies directly to Workers applications, enforcing authentication before any request reaches the application code, regardless of the domain or URL used. The company also enables an account-level policy to protect existing and future applications by default.

2026-08-14

Cybersecurity

Critical SAP Commerce Cloud Vulnerability Targeted Three Days After Patching

Defused confirmed that attackers began targeting a remote code execution vulnerability in SAP Commerce Cloud, despite the absence of a public proof of concept and SAP not officially announcing that it was being actively exploited. SAP urged its customers and partners to install the security update immediately.

2026-08-14

Cybersecurity

Shell Investigates Potential Security Incident After Clop Claims Theft of 89 Gigabytes of Data

Shell confirmed that it is investigating a potential security incident after the Clop group claimed to have stolen 89 gigabytes of its data, including engineering drawings and project plans. The claim is part of attacks that exploited a critical vulnerability in the PTC Windchill and FlexPLM platforms to access data belonging to several organizations.

2026-08-14

Cybersecurity

Cloudflare Makes Certificate Transparency Monitoring Available to All Users and Reduces Duplicate Renewal Alerts

Certificate Transparency Monitoring is now generally available after Cloudflare began filtering certificates it issues or manages on behalf of customers, so alerts focus on unexpected external certificates. The service is available on all plans at no additional cost, with improved email messages and the ability to enable it from the dashboard.

2026-08-13

Cybersecurity

Apple Sends New Threat Notifications to Users Targeted by Mercenary Spyware in 110 Countries

Apple confirmed sending a new batch of threat notifications on August 13 to users targeted by mercenary spyware attacks, noting that these alerts are based on high-confidence indicators. The company does not link this batch to any specific spyware program or particular government entity.

2026-08-13

Cybersecurity

Akira Attackers Disable EDR Systems via Safe Mode and Steal Data Without Encrypting It

A partner of the Akira ransomware operation exploited an exposed SonicWall VPN device without multifactor authentication to access the victim’s network, then disabled security tools by rebooting the system into Safe Mode. The attackers successfully stole data and credentials in less than five hours, but the ransomware payload failed to encrypt files because of memory-related errors.

2026-08-13

Cybersecurity

Jewelbug Group Hacks Email Accounts of 15 Government Entities Alongside Cryptocurrency Scams

Symantec revealed that the Jewelbug group, also known as Earth Alux and REF7707, conducted an espionage campaign targeting government email accounts in the Middle East, alongside extensive activity defrauding cryptocurrency users. The attacks relied on compromising a shared email-hosting platform, planting malware, and stealing cookies and sensitive data.

2026-08-13

Cybersecurity

Tools for Removing Watermarks from AI-Generated Text Spread Without Evidence of Effectiveness

Within days of Anthropic announcing the activation of invisible watermarks in text produced by Claude, a group of open-source projects and commercial services emerged claiming to bypass these watermarks. However, these claims cannot currently be verified, as Anthropic has not published the watermarking mechanism or a tool to detect it.

2026-08-13

Cybersecurity

United States Allows Private Companies to Conduct Offensive Cyber Operations Under Government Oversight

The Trump administration has announced a policy allowing private companies that meet specific requirements to conduct surveillance and disruptive attacks against criminal gangs and international hackers under a program managed by the federal government. The mechanism is not yet fully operational, and it may face legal challenges as well as diplomatic and security concerns.

2026-08-13