ISC Stormcast For Friday, August 28th, 2026 https://isc.sans.edu/podcastdetail/10072, (Fri, Aug 28th)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Read at the source
Security News
Live news from trusted publications, matched against DayBreach CVE data.
All sourcesArs Technica · 67BleepingComputer · 178CERT Polska · 78Cisco Talos · 48CrowdStrike · 33Dark Reading · 73DataBreaches.net · 35Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 56Security.NL · 315SecurityWeek · 81SentinelOne · 33The Cyber Express · 70TheCyberThrone · 58The Hacker News · 310The Record · 47Unit 42 · 46
OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (AI)-powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior as early as late May. The incident, the company said, took place during cybersecurity evaluations of several OpenAI models, and that it was mainly fueled by what it described as a "highly capable
Read at the source
“Sorry, I can’t help with that”: How your guardrails might become the attacker’s best friend
In his first Threat Source newsletter, David Bianco explores the critical need for operational sovereignty in customizing AI guardrails to maintain the defender’s advantage.
Read at the source
What’s new in Microsoft Security: August 2026
This month’s updates provide new capabilities to help organizations gain insights into agent activity, expand security coverage across supported environments, and enhance security management across their environments. The post What’s new in Microsoft Security: August 2026 appeared first on Microsoft Security Blog.
Read at the source
Next.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCE
Credit: Hacktron Vercel has released security patches for two critical-severity vulnerabilities in the Next.js web framework, both of which allow unauthenticated remote code execution, one exploitable via specially crafted AVIF image files and the other through a path traversal flaw affecting servers that use a Windows filesystem. The Windows path traversal, tracked as CVE-2026-75604&
Read at the source
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories
A fake login page. A fake security scan. A fake productivity app. Apparently, pretending to be useful is still one of the easier ways into a machine. The rest of the week gets stranger: botnets borrowing AI, command traffic hiding in public infrastructure, malicious tools waiting before showing their real behavior, exposed systems getting scanned, and exploit windows shrinking again. Different
Read at the source
'Nederlandse scholen sterk afhankelijk van Amerikaanse techbedrijven'
Nederlandse scholen zijn sterk afhankelijk van een klein aantal grote Amerikaanse techbedrijven, wat scholen kwetsbaar maakt, ...
Read at the source
Persoonlijke gegevens 8,7 miljoen klanten Britse luchthavens gestolen
Aanvallers zijn erin geslaagd om de persoonlijke gegevens van 8,7 miljoen klanten van drie Britse luchthavens te stelen. Het ...
Read at the source
Claude, Codex, and Hermes installed unowned code inside corporate networks
227 install commands were found in corporate docs pointing at code nobody owns.
Read at the source
Podatności w oprogramowaniu dool
W oprogramowaniu dool wykryto 2 podatności różnego typu (CVE-2026-56651 oraz CVE-2026-56652)
Read at the source
961-970 / 1627 news items shown