- Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware
on August 19, 2026 at 10:50 amThe FBI warned that the RaaS operation has significantly enhanced its tactics, techniques and procedures, making it harder for defenders to counter
- ICO Urges Police to Improve Data Governance in Facial Recognition Rolloutson August 19, 2026 at 9:30 am
The UK’s privacy watchdog has called on police using facial recognition to follow its recommendations
- UK Fraud Cases Hit Record High in 2026on August 19, 2026 at 8:45 am
Cifas data finds account takeover and identity fraud are driving a surge in fraud cases
- Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missedon August 18, 2026 at 3:30 pm
The security flaw in Snowflake’s GitHub Actions workflow had been missed by a GitHub Advanced Security scan, said a Wiz researcher
- Enterprise Applications Carry 4.31x More Critical and High Vulnerabilitieson August 18, 2026 at 3:00 pm
Enterprise software creation has accelerated as vulnerability levels rise, Sonatype finds
Hacks – Threatpost The First Stop For Security News
- Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms
by Nate Nelson on August 29, 2022 at 2:56 pmOver 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system.
- iPhone Users Urged to Update to Patch 2 Zero-Days
by Elizabeth Montalbano on August 19, 2022 at 3:25 pmSeparate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack.
- APT Lazarus Targets Engineers with macOS Malware
by Elizabeth Montalbano on August 17, 2022 at 3:07 pmThe North Korean APT is using a fake job posting for Coinbase in a cyberespionage campaign targeting users of both Apple and Intel-based systems.
- Black Hat and DEF CON Roundup
by Threatpost on August 15, 2022 at 1:56 pm‘Summer Camp’ for hackers features a compromised satellite, a homecoming for hackers and cyberwarfare warnings.
- New Hacker Forum Takes Pro-Ukraine Stance
by Elizabeth Montalbano on August 11, 2022 at 3:14 pmA uniquely politically motivated site called DUMPS focuses solely on threat activity directed against Russia and Belarus
Mobile Security – Threatpost The First Stop For Security News
- iPhone Users Urged to Update to Patch 2 Zero-Daysby Elizabeth Montalbano on August 19, 2022 at 3:25 pm
Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack.
- Xiaomi Phone Bug Allowed Payment Forgery
by Nate Nelson on August 16, 2022 at 12:26 pmMobile transactions could’ve been disabled, created and signed by attackers.
- Google Boots Multiple Malware-laced Android Apps from Marketplace
by Elizabeth Montalbano on July 18, 2022 at 12:32 pmGoogle removed eight Android apps, with 3M cumulative downloads, from its marketplace for being infected with a Joker spyware variant.
- Leaky Access Tokens Exposed Amazon Photos of Users
by Nate Nelson on June 29, 2022 at 8:18 pmHackers with Amazon users’ authentication tokens could’ve stolen or encrypted personal photos and documents.
- Google Warns Spyware Being Deployed Against Android, iOS Users
by Elizabeth Montalbano on June 24, 2022 at 11:02 amThe company is warning victims in Italy and Kazakhstan that they have been targeted by the malware from Italian firm RCS Labs.
Krebs on Security In-depth security news and investigation
- Who’s Tracking You? Use This New Service to Find Out
by BrianKrebs on August 14, 2026 at 11:24 amIt can be daunting to determine who’s responsible for showing ads on the websites we visit, or who’s harvesting data from the mobile apps we use every day. That information is already semi-public, but it is not easily parsed and traditionally much of it has remained walled away in the hands of large advertising platforms. Not anymore: A powerful and free new service called DecryptAds scrapes and correlates this adtech data and makes it simple to quickly learn a great deal about the entities that are tracking you.
- Microsoft Plugs Nearly 400 Security Holes
by BrianKrebs on August 11, 2026 at 9:28 pmMicrosoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already being actively exploited and two others that were publicly detailed prior to today.
- Canadian Man Pleads Guilty in Snowflake Extortions
by BrianKrebs on August 6, 2026 at 5:00 pmA 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage provider Snowflake. Connor Riley Moucka, of Kitchener, Ontario, also admitted to stealing call and text history records of more than 100 million AT&T customers.
- Read This Before You Buy That TV Streaming Stick
by BrianKrebs on July 30, 2026 at 4:49 pmSecurity experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user’s Internet connection out to strangers. But a groundbreaking new analysis finds these devices also routinely spoof themselves as mobile phones clicking ads on AI-generated websites as part of sprawling operation that seeks to defraud online merchants and advertising networks.
- LG to Ban Residential Proxies from Smart TV Apps
by BrianKrebs on July 22, 2026 at 1:10 amThe home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on LG’s webOS store allow unknown third-parties to route their Internet traffic through a user’s TV.