Security & Risk
143 analyses
Anthropic has begun logging out Claude accounts, deleting saved payment methods, and refunding charges after identifying malware stealing session cookies and draining paid quotas without going through MFA.
Manchester Airports Group confirmed that external attackers exfiltrated data of 8.7 million passengers from Manchester, Stansted, and East Midlands airports. The company refused to pay the ransom demanded by the intruders.
ServiceNow has released patches for four critical vulnerabilities in the Now Platform and AI Platform, two of which have a CVSS score of 10.0. These vulnerabilities allow code execution and SQL injection by unauthenticated attackers without user interaction.
Anthropic, Google, Cisco, CrowdStrike, Palo Alto Networks, Visa, and Capital One join OpenAI in a document highlighting a narrow window before the next wave of AI-driven attacks.
CVSS 9.8 vulnerability in Gitea allows an attacker with write permission to execute commands as the service user. CISA placed the flaw in the KEV and set a deadline of August 28 for federal agencies to patch.
CVE-2026-73570 allows for remote code execution without authentication on Zimbra servers with SNMP enabled by default. CISA has imposed a three-day deadline for federal agencies, and the patch window is tightening.
CVE-2026-21962 allows unauthenticated access to Oracle HTTP Server and WebLogic. U.S. federal agencies have until August 27 to apply the patch. The vulnerability has been actively exploited for eight months.
The critical vulnerability CVE-2026-21962 in the WebLogic proxy plug-in was patched in January, generated over 140,000 attack attempts in 21 countries, and has only now entered the active exploitation list of the U.S. agency.
A report published on August 23 by the Telegraph reveals that hackers linked to the Iranian Revolutionary Guard disrupted a British generator for four days in July. This was the first successful disruption of UK electrical infrastructure.
Kaspersky's research published on August 22 reveals that the JarService malware, attributed to the MoYu Group, installs itself in DoFun's Android car radios via legitimate firmware and operates as an invisible botnet to the driver.
Apollo Global Management confirmed a breach that exposed personal data of clients after a vishing attack by the UNC6671 group, which targeted dozens of Wall Street firms between July and August 2026.
The company admits to an intrusion in its systems but does not disclose the attack vector, exfiltrated data, or the number of affected clients. The base includes around 500 global organizations.