Marcus Hutchins doesn’t personally consider himself a hacker – but he accepts the epithet because it’s a widely used term for what he once did. Born in Ascot, England, he was working as a cyber threat analyst for an LA-based… Read More "Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to Redemption"
BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins
Ravie LakshmananAug 11, 2026Supply Chain Attack / Vulnerability Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform’s plugins team to temporarily disable their downloads. “Unlike traditional software supply… Read More "BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins"
Security leaders’ rogue AI confidence could actually be disastrous
Part of the challenge is that an agent’s activity is spread across identities, cloud platforms, SaaS applications, APIs, and security tools that were not designed to tell a complete story, Camacho says. Security teams often have to piece together events… Read More "Security leaders’ rogue AI confidence could actually be disastrous"
OpenAI Pauses Some Development of Astra Model on Security Concerns
OpenAI has said it is temporarily halting some internal testing of a forthcoming model after assessing its cyber capabilities as “critical.” The AI firm said in a blog post on August 7 that testing of Astra had revealed “significant advancements… Read More "OpenAI Pauses Some Development of Astra Model on Security Concerns"
What’s New in Risk Automations: 4 Templates for Vendor and User Risk
Most vendor onboarding and app access work is waiting and follow-ups. Waiting for someone to notice a form came in, assign a tier, chase a questionnaire, or dig up the context behind a Slack request. Risk Automations workflows remove that… Read More "What’s New in Risk Automations: 4 Templates for Vendor and User Risk"
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine
Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment. The plant supplies heat… Read More "Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine"
Are AI tutoring tools safe for your kids?
AI tutors can offer useful support, but their quality and safeguards vary widely. Here’s what parents should check before handing one to a child. 10 Aug 2026 • , 6 min. read AI is disrupting sectors as diverse as healthcare… Read More "Are AI tutoring tools safe for your kids?"
Cybercriminals Plant Malicious AI Agents in Open Source Tools
Cybercriminals are increasingly turning to AI agents and chatbots to autonomously plan and carry out cyber-attacks, according to new analysis of hacker activity. Cybersecurity researchers at ESET examined 900,000 AI skills, small functional components used by AI agents, listed in… Read More "Cybercriminals Plant Malicious AI Agents in Open Source Tools"
Biggest Data Breaches in Retail (Updated August 2026)
Retail is the most consistently targeted consumer-facing sector in the history of breach reporting, and the reason is structural. Retailers concentrate payment card data, run point-of-sale (POS) estates across thousands of stores, load high-traffic checkouts with third-party JavaScript, and depend… Read More "Biggest Data Breaches in Retail (Updated August 2026)"
Mozilla Issues New Firefox GPG Key Following Exposure
Mozilla announced on Monday that it has issued a new GPG signing subkey used for some Firefox and Thunderbird artifacts after the previous key was accidentally exposed in a GitHub repository. In general, if a GPG private signing key used… Read More "Mozilla Issues New Firefox GPG Key Following Exposure"