US Customs and Border Protection is seeking to hire private investigators to track down deported immigrants and others who have left the United States, and press them into paying the government money, according to records reviewed by WIRED. The work… Read More "DHS Is Hiring Bounty Hunters to Find and Photograph Deported People’s Homes Abroad"
Palo Alto Networks researchers have disclosed the details of new attack methods targeting passwordless authentication, showing how malware can hijack a passkey-protected account. Passkeys are increasingly adopted by tech giants and are widely recommended because they are more secure against… Read More "New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts"
Ravie LakshmananAug 05, 2026AI Security / Threat Intelligence Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access to artificial intelligence (AI) models on underground cybercrime forums and messaging platforms. One such service, Poison Claude, claims to offer… Read More "Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt"
A framework that validates tool calls more strictly, or that segments memory more conservatively, closes off attack paths that a more permissive framework leaves wide open — regardless of which model is doing the reasoning. The model generates the decisions.… Read More "Why your AI orchestration framework is a critical security decision"
Counterfeit extensions impersonating real developer tools have been found on the Open VSX registry, with roughly a quarter of them harvesting the git and continuous integration identity of the organizations running them. New research Manifold Security published on August 4… Read More "Fake Open VSX Extensions Harvest Private Repo and CI Data"
%20Platforms.png?w=1140&fit=1140,855&ssl=1 "Best Cyber Risk Posture Management (CRPM) Platforms")
The modern security landscape is an unfair fight. The perimeter is gone—replaced by a borderless terrain where a team of one to 10 is expected to defend the same footprint as a 50-person security operations center (SOC). Attack surface. Vendor… Read More "Best Cyber Risk Posture Management (CRPM) Platforms"
Many companies are showcasing their cybersecurity products and services this week at the 2026 edition of the Black Hat conference in Las Vegas. To help cut through the clutter, the SecurityWeek team is publishing a digest summarizing vendor announcements at… Read More "Black Hat USA 2026 – Summary of Vendor Announcements (Part 3)"
A single compromised credential is often all it takes to turn an ordinary workday into a full-scale cybersecurity incident. Despite investments in firewalls, endpoint security, and identity controls, attackers continue to exploit one of the simplest yet most effective entry points—stolen… Read More "Decoding The 72-hour Timeline Of A Credential-Based Attack"
HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and Django. The three most serious: An unauthenticated flaw in Veeam’s console that hands over a managed agent’s credentials, rated 9.5… Read More "Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug"
OpenAI’s GPT-5.6 Sol and Anthropic’s Mythos 5 have been implicated in another series of AI security incidents after the models created fake online identities, targeted real people, and attempted to manipulate developers into approving malicious code during controlled cyber evaluations,… Read More "OpenAI GPT-5.6 Sol, Anthropic Mythos 5 linked to AI security incidents in UK cyber tests"
