Security teams using Amazon Web Services (AWS) infrastructure now have access to a new Amazon-made platform to manage the whole lifecycle of code vulnerabilities from discovery to remediation. The Seattle-based tech giant launched AWS Continuum among a wave of announcements… Read More "AWS Unveils A New AI‑Powered Vulnerability Management Platform"
Cybercriminals abused Facebook Messenger chatbots in a campaign which distributed phishing attacks designed to steal business information and other sensitive data from Meta For Business users. The campaign, identified by Huntress, found a way to successfully pass security validation checks… Read More "Phishing Attacks Targeted Facebook Users With Fake Verification Offer"
Ravie LakshmananAug 08, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical-severity security flaw impacting Progress Kemp LoadMaster to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation in the wild.… Read More "Progress Kemp LoadMaster Flaw Hits CISA KEV After 792 Reported Exploit Attempts"
Adobe has urged ColdFusion customers to patch their instances immediately after at least one maximum severity flaw was reported as being exploited by attackers. The software giant released patches for 11 CVEs on June 30 in the APSB26-68 bulletin. Six… Read More "Hackers Exploit Maximum Severity Adobe ColdFusion Flaw"
Ravie LakshmananAug 08, 2026Vulnerability / Enterprise Security N-able has released a fresh round of hotfixes for N‑central as part of its investigation into ongoing exploitation of a recently disclosed security flaw in the Remote Monitoring and Management (RMM) product. “We… Read More "N-able Issues N-central Hotfix 2 as Attackers Reach Managed Systems and Persist"
The UK government has claimed over 60 businesses have signed up to a new initiative designed to improve the cyber resilience of British organizations. The Cyber Resilience Pledge was first trailed at the government’s CYBERUK conference in Glasgow in April,… Read More "Government Launches Cyber Resilience Pledge, Claiming 60+ Signatories"
Cory Solovewicz receives more unwanted emails than you. Seriously—it’s a lot more. Since December 2024, one of the domains at which the security researcher receives email has registered 401,796 messages—by his calculations that’s an average of 699.99 pings per day.… Read More "Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All"
DEF CON — Varonis Threat Labs has disclosed a one-click vulnerability in Rovo, Atlassian’s enterprise AI assistant, that let a specially crafted link seed attacker-controlled instructions directly into a user’s live AI session. Dubbed RovoBlast, the flaw required no jailbreak… Read More "Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data"
Swati KhandelwalAug 08, 2026Email Security / Vulnerability New research shows content inside an email can escape its message boundary and interfere with the webmail interface. Across attack chains spanning Outlook, Gmail, Fastmail, Proton Mail, Yahoo Mail, and AOL Mail, the… Read More "New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens"
Scattered Spider has been reclassified as a decentralized cybercrime collective composed of independent clusters rather than a single, organized threat group. Group-IB analysis, published on June 7, challenges the traditional view of the activity as one coordinated operation, arguing that… Read More "Scattered Spider’s Structure More Like a Cybercrime Collective"
