Water Watch Center rallies MDR providers to defend rural utilities from state hacks
Small water utilities across the United States are getting a new line of defense. DEF CON Franklin and the National Rural Water Association have launched the Water Watch Center, a program that pairs rural water systems with managed detection and response providers following a wave of state-sponsored attacks on the…
The Latest
Same-network attacker can hijack TCP sessions via NAT flaw
NatJack attacks break the NAT trust model, letting same-network attackers hijack TCP sessions and poison DNS.
Zapscape KVM bug lets nested guests run code on the host
Zapscape, tracked as CVE-2026-64561, lets a nested KVM guest with kernel privileges escape to the host.
Container escape achieved through 18-year-old Linux SCTP bug
Tencent researchers escaped a container and reached host root through an 18-year-old SCTP use-after-free.
Swiss federal office resets 200 accounts after SharePoint intrusion
Swiss federal IT office BIT resets roughly 200 accounts after a Microsoft SharePoint credential theft.
New Mexico judge brands Meta a public nuisance in $567M ruling
A New Mexico judge brands Meta a public nuisance and orders $567M paid for child harm on its platforms.
Malware borrows Windows Hello keys for persistent cloud access
Malware can borrow Windows Hello for Business keys to open a 90-day persistence channel into Entra ID.
Voicemail lures fuel AitM wave aimed at payroll inboxes
A voicemail-themed AitM phishing wave is taking over Microsoft 365 accounts to harvest payroll and finance email.
CISA adds exploited TeamCity bug to KEV with August 8 deadline
CISA flags actively exploited TeamCity flaw CVE-2026-63077, giving federal agencies until August 8 to patch.
Public exploit out for Cisco IMC flaw granting root access
A public exploit now exists for the Cisco IMC flaw that lets low-privilege users run commands as root.
Router vendor pulls firmware after ENDLESSDOORS backdoor claims
VulnCheck found a phone-home implant in Zbtlink router firmware while the vendor called it a maintenance feature.
Huntress finds hacker toolkit living inside Oracle database
Huntress found attackers using Oracle's own Java engine to compile malware directly inside a database.
Ransom Cartel founder jailed 16 years over affiliate racket
Maksim Silnikau, the Belarusian behind the Ransom Cartel ransomware service, received a 16-year prison sentence.
Third AI lab in two weeks reports agent escape during testing
Meta confirmed one of its AI models breached a company during testing, the third AI lab escape disclosed in two…
Spotlight
Snowflake extortion suspect admits theft from 165 companies
Connor Riley Moucka admitted his role in the 2024 Snowflake raids that exposed records tied to more than 100 million people.
TP-Link Omada chain turns guessed serial numbers into network takeover
Forescout's Vedere Labs built an attack chain from 15 flaws ending at the admin's cloud controller password.
Water utility hacks now reach a dozen states as FBI probes PLC attacks
Iran-linked actors are the leading suspects in a campaign that has hit at least 12 states since late July.
Beacon CRM hack exposes UK charity donor data, backups likely stolen
The charity CRM provider told customers to assume all stored data, including attachments, was downloaded.
Features
Pass-ta-key attacks turn endpoint malware into passkey account takeover
Unit 42 details three ways malware can abuse Chrome's synced passkey flows to hijack accounts.
Three freshly exploited bugs land on CISA’s must-patch list
Langflow, N-able N-central, and Apache Tomcat flaws join the KEV catalog under active exploitation.
Open vSwitch datapath bug hands out root on stock Linux builds
A 13-year-old memory corruption flaw ships with a public exploit covering roughly 800 kernel builds.
AI test agents faked identities to slip malware into open-source code
UK evaluators caught frontier models inventing personas and socially engineering a real open-source maintainer.
Self-propagating npm worm poisons 400-plus packages via stolen tokens
The Mini Shai-Hulud worm stole publisher credentials, republished tainted packages, and burrowed into AI coding tools.
ExfilSquad linked to dark web dump of UK police emails
The Police National Legal Database says contact details for officers and government staff surfaced on the dark web after an…
