Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations 14 August 2026 Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations Researchers have verified that ExfilSquad possesses sensitive data stolen from at least 13 victims after the extortion group published leaked datasets via torrents New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies 14 August 2026 Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into persistent proxies New Mirai-Based Linux Botnet ‘Evooo1Bot’ Turns Victims Into Proxies Evooo1Bot is a newly observed botnet based on the Mirai framework but equipped with advanced features, turning edge devices into persistent proxies Novel macOS Infostealer AmnesiaStealer Spread via ClickFix 14 August 2026 AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data Novel macOS Infostealer AmnesiaStealer Spread via ClickFix AmnesiaStealer contains novel functions, including the attackers gaining remote control over the victim’s browser to steal cookie data Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations 14 August 2026 Threat intelligence researchers from Broadcom revealed that a known Chinese APT group may be linked to a lucrative crypto fraud operation Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations Threat intelligence researchers from Broadcom revealed that a known Chinese APT group may be linked to a lucrative crypto fraud operation Exposed AWS Access Key Linked to Data Breach Affecting 1500+ UK Charities 13 August 2026 CRM provider Beacon has revealed that a compromised AWS access key was the likely root cause of the breach of 1500 UK charities’ data Exposed AWS Access Key Linked to Data Breach Affecting 1500+ UK Charities CRM provider Beacon has revealed that a compromised AWS access key was the likely root cause of the breach of 1500 UK charities’ data Google Cloud Targets 2027 for First Major Post-Quantum Security Milestone 13 August 2026 Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, with wider migration goals extending through 2028 Google Cloud Targets 2027 for First Major Post-Quantum Security Milestone Google Cloud has set a 2027 deadline to mitigate store-now-decrypt-later risks as part of its post-quantum cryptography roadmap, with wider migration goals extending through 2028 vCenter Flaw Exploited Just Five Days After Disclosure 13 August 2026 Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it vCenter Flaw Exploited Just Five Days After Disclosure Attackers exploited a critical-severity vCenter flaw five days after Broadcom disclosed it Trump Authorizes Private Sector Participation in Offensive Cyber Operations 13 August 2026 The White House has authorized government-directed offensive cyber operations against transnational groups, prompting warnings over escalation and attribution risks Trump Authorizes Private Sector Participation in Offensive Cyber Operations The White House has authorized government-directed offensive cyber operations against transnational groups, prompting warnings over escalation and attribution risks Akira Affiliate Crashes Ransomware After Attempting EDR Evasion 13 August 2026 Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort Akira Affiliate Crashes Ransomware After Attempting EDR Evasion Huntress documents how a ransomware affiliate sabotaged its own attack with an anti-EDR effort ICO Reprimands Criminal Records Office After 2023 Breach 13 August 2026 The ICO has issued a formal reprimand to ACRO after patching and security monitoring failures led to a breach ICO Reprimands Criminal Records Office After 2023 Breach The ICO has issued a formal reprimand to ACRO after patching and security monitoring failures led to a breach WindRelay Malware Pairs With SpyNote RAT in Live-Call Scam 12 August 2026 New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call WindRelay Malware Pairs With SpyNote RAT in Live-Call Scam New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day 12 August 2026 Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure 12 August 2026 Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned NIST Seeks Public Input on AI-Ready NVD Modernization 12 August 2026 The US National Institute for Standards and Technology wants to modernize its National Vulnerability Database to embrace AI-powered vulnerability research NIST Seeks Public Input on AI-Ready NVD Modernization The US National Institute for Standards and Technology wants to modernize its National Vulnerability Database to embrace AI-powered vulnerability research Russian-Linked Hackers Accessed Polish Power Plant OT Network Through Private APN, Says CERT.PL 12 August 2026 The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country Russian-Linked Hackers Accessed Polish Power Plant OT Network Through Private APN, Says CERT.PL The Polish CERT has released details of another 2025 attack on a combined heat and power plant in the country Microsoft Fixes 400 Flaws on August Patch Tuesday 12 August 2026 Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday

Microsoft Fixes 400 Flaws on August Patch Tuesday Microsoft has issued another massive batch of security updates with 400 fixed in the August Patch Tuesday Six npm Packages Read C2 Addresses From Ethereum Wallet 11 August 2026 Six npm packages queried an Ethereum wallet to locate C2 infrastructure Six npm Packages Read C2 Addresses From Ethereum Wallet Six npm packages queried an Ethereum wallet to locate C2 infrastructure Cursor Security Bug Allowed Repositories to Execute Commands Before Trust Verification 11 August 2026 Cursor fixed a pre-trust code execution path in three days then closed the report as informative Cursor Security Bug Allowed Repositories to Execute Commands Before Trust Verification Cursor fixed a pre-trust code execution path in three days then closed the report as informative Suisan City, California, Responds to Cyber Incident Amid Wave of US Local Government Attacks 11 August 2026 Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past week also Suisan City, California, Responds to Cyber Incident Amid Wave of US Local Government Attacks Police and fire response has been impacted by the attack on Suisan City, while two other local authorities have been hit by cyber incidents in the past week also OpenAI Launches Two-Tier Security Access Program Alongside GPT 5.6 Cyber 11 August 2026 Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models OpenAI Launches Two-Tier Security Access Program Alongside GPT 5.6 Cyber Daybreak Blue removes some OpenAI-made guardrails while Daybreak Red grants the use of cyber-focused frontier AI models Your Security Awareness Programme Isn't Failing, It's Just Not Relevant 15:00 — 16:00, 17 September 2026 Your Security Awareness Programme Isn't Failing, It's Just Not Relevant How to Manage Enterprise Cyber Resilience in the Age of AI 11:00 — 12:00, 21 May 2026 How to Manage Enterprise Cyber Resilience in the Age of AI Understanding Frontier AI Defense: What Cyber and IT Leads Need to Know 15:00 — 16:00, 3 September 2026 Understanding Frontier AI Defense: What Cyber and IT Leads Need to Know Why Resilience‑Focused Cloud Design Is Your Best Defense Against Modern Attacks 18:00 — 19:00, 9 April 2026 Why Resilience‑Focused Cloud Design Is Your Best Defense Against Modern Attacks What’s Hot on Infosecurity Magazine? Exposed AWS Access Key Linked to Data Breach Affecting 1500+ UK Charities Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure Akira Affiliate Crashes Ransomware After Attempting EDR Evasion Suisan City, California, Responds to Cyber Incident Amid Wave of US Local Government Attacks OpenAI Launches Two-Tier Security Access Program Alongside GPT 5.6 Cyber Staffing Is Top SOC Challenge Even as AI Proliferates, Says SANS NIST Seeks Public Input on AI-Ready NVD Modernization OpenAI Launches Two-Tier Security Access Program Alongside GPT 5.6 Cyber How Cybersecurity Vendors Are Preparing for the Post-Quantum Era University of the Arts London Head of Technology on Securing Creativity in an Age of Cyber Threats “Ghostjacking” Exploits AI Agents’ Trusted Access to Evade Firewall Controls Human Risk in Cybersecurity: Protecting Your Organization Beyond Technology Same Front Door, New Visitors: Securing Humans and AI Agents at the Browser Why Resilience‑Focused Cloud Design Is Your Best Defense Against Modern Attacks How to Harness Advanced Intelligence Capabilities to Strengthen Cyber Defence Risk-Based IT Compliance: The Case for Business-Driven Cyber Risk Quantification How Mid-Market Businesses Can Leverage Microsoft Security for Proactive Defenses How Faster Cyber-Attacks Are Reshaping Enterprise Cybersecurity Strategies Researchers Claim First Fully Agentic Ransomware: JadePuffer AI is Already Powering Cyber-Attacks. Can it Power Cyber Defense? Google Cloud's New CISO Chris Betz on Integrating AI in Cyber Defenses How World Cup Password Trends Can Increase Active Directory Risk New CISA Guide Helps Agencies Adopt SASE For Zero Trust