A cyberattack on CEVA Logistics between July 29 and August 1 exposed names, addresses, phone numbers and order details of Valve's European Steam hardware buyers. Valve confirms passwords and payment data were not affected.
OpenAI split its Daybreak cybersecurity program into two tiers and launched GPT-5.6-Cyber, which scored 95 percent on an internal exploit benchmark and found a now-patched Chrome sandbox-escape chain.
Chinese-made camera components on Royal Navy drone boats sent heartbeat signals to China. The MoD stripped connectivity. Here is what it means for EU/UK buyers.
CISA confirms active exploitation of CVE-2026-63077, an unauthenticated RCE in JetBrains TeamCity On-Premises. CVSS 9.8, KEV-listed 5 August, FCEB deadline 8 August.
A single unauthenticated SQL injection zero-day in Metabase let attackers hit Framework, Tally and LexisNexis at once. Names, emails, phone numbers and addresses were exposed; payment data was not.
Two researchers found separate ways to make Atlassian's Rovo AI agent leak Jira, Confluence and connector data. One is patched. One, disclosed in May, is not.
A Linux kernel bug dating to 2007, CVE-2026-64564, let Tencent's Zhuque Lab gain root and escape containers on five distros before an August 3 patch.
CISA confirms active exploitation of CVE-2026-18577, a bypass of N-able's own earlier N-central patch. CVSS 8.2, KEV-listed 3 August, FCEB deadline 6 August.
Google traced a vishing campaign that phoned staff at Apollo, Blackstone and KKR, harvesting MFA codes live and netting 10 million dollars in bitcoin.
A Black Hat researcher spent 22 months inside a North Korean hacking group's systems, exposing 1,640 breached companies and a fake-recruiter attack vector.
CISA added three actively exploited flaws to its KEV catalog on 2026-08-05 after Unit 42 traced attacks to DeepSeek-powered autonomous exploit selection across 460+ organizations. Federal deadline: 2026-08-07.
A worm called ChainDrop poisoned 435 npm packages with 1,557 versions in a 124 minute window on 4 August. The libraries with the widest reach are caching helpers almost nobody installs on purpose.
Page 3 / 11
One considered note on infrastructure, governance, and measurement, most mornings. No theory.