Microsoft Graph is a newer API that is meant to replace several others. OK, it's at version 2.3.9, so it's not all that new, but it's new enough that lots of folks (and commercial tools) aren't using it yet. It allows you to Get and Set info from/to M365, Entra Users and Entra managed machines for starters. Let's dig in!
A former data analyst at Brightly Software, Cameron Curry, misused his legitimate access to sensitive employee and corporate data to extort his employer for $2.5 million in cryptocurrency. After learning his contract would not be renewed, he exfiltrated personal identifiable information (PII), payroll data, and internal records, then sent threatening emails under a fake identity demanding ransom. He was caught due to operational security mistakes linking the ransom payments to family members' debit cards. Curry was sentenced to 24 months in federal prison and ordered to repay the partial ransom amount already paid. This case highlights the insider threat risk during employee offboarding and the importance of timely access revocation.
Atalanta's Argo product is now being used to prove the resilience of Viasat’s satellite communications network. The post AI-Assisted Tool Helped Secure Satellite Communication System After 2022 Russian Hacking appeared first on SecurityWeek .
CISA has issued a warning that threat actors are actively exploiting a critical vulnerability in the MLflow open-source AI engineering platform. The vulnerability is considered critical in severity, though specific technical details and affected versions are not provided in the available information. There is no confirmed CVSS score or vendor patch information at this time. The exploitation status is reported but no known exploits in the wild are confirmed. The advisory targets federal agencies but does not specify geographic restrictions beyond that.
The action taken by OpenAI comes in light of the Hugging Face incident and the discovery of the Astra model’s advanced capabilities. The post OpenAI Overhauls Model Security With Sandboxing, 30-Minute Alerts, and Training Pauses appeared first on SecurityWeek .
Microsoft is investigating issues caused by the August 2026 Windows updates (notably KB5121003) that may prevent some games from launching or cause them to crash on Windows 11 systems, specifically versions 24H2 and 25H2. Affected users report symptoms such as games freezing, closing unexpectedly, EXCEPTION_ACCESS_VIOLATION errors, and system restarts. Microsoft has acknowledged the problem and is currently investigating the root cause. Users experiencing these issues are encouraged to report them via the Feedback Hub. No official patch or fix has been announced yet.
BlackHat Arsenal Lab02 is an open-source, hands-on cybersecurity training lab presented at Black Hat USA 2026. It includes two scenarios focused on cloud security and incident response, using synthetic data and AI-driven tooling to teach skills such as detecting SSRF attacks, credential leaks, IAM enumeration, S3 exfiltration, and cloud configuration auditing. The lab is designed for educational purposes and does not represent an active security threat or vulnerability.
ChatGPT and related OpenAI services experienced a major outage starting August 19, 2026, causing login failures, signup issues, and inability to load chats or send messages. The outage affected users worldwide and also impacted OpenAI's Codex platform and multiple API endpoints. OpenAI acknowledged the incident and is working on mitigation. There is no indication this outage was caused by a security vulnerability or attack.
U.S. cybersecurity agencies have issued warnings about threat actors leveraging AI-generated scripts to target Siemens S7 Series programmable logic controllers (PLCs) used in critical infrastructure. The attacks focus on exploiting these PLCs, which are integral to industrial control systems. No specific vulnerabilities or exploits have been detailed, and there is no confirmed evidence of active exploitation in the wild. The warning highlights the emerging use of AI to automate and enhance attack capabilities against industrial control systems.
This content is a security industry report highlighting Microsoft's recognition as a leader in the Frost Radar™: Cloud Workload Protection Platforms (CWPP) for 2026. It discusses the evolving challenges of protecting cloud workloads, especially in complex environments using containers and Kubernetes, and emphasizes the need for integrated runtime security solutions. Microsoft Defender for Cloud is noted for its comprehensive coverage and integration across infrastructure, workloads, identities, and applications. The report does not describe a specific vulnerability or exploit but rather industry trends and product capabilities.
The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long operations that stole data from American organizations. [...]
A security researcher reported escaping the WebAssembly sandbox, achieving arbitrary shell execution on the host system. The issue relates to WABT's wasm2c tool, which compiles WebAssembly to C code assumed to maintain sandbox security. This proof-of-concept demonstrates that the sandboxing guarantees can be bypassed, potentially allowing code execution outside the intended WebAssembly environment.
Cloud providers typically expose a REST API at 169.254.169.254 that allows code running on virtual machines to retrieve machine-specific data. Some of the data is more or less harmless, such as the region the machine is running in or its MAC and IP addresses. However, the service may also be used to retrieve credentials for IAM roles and service account tokens.
Huntress observed a 155x increase in password spraying attacks in H1 2026, including a campaign that generated more than 81 million login attempts in two weeks. The attacks exploited legacy authentication and gaps in MFA policies that left some login flows unprotected. [...]
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. The post Virtual Event Today: CodeSecCon – Secure Your Code and Applications appeared first on SecurityWeek .
This content references an employer's obligation to protect its agents and the confidentiality of data they access, as stated by a union representative in a regional news source. It highlights a general principle of data protection and employee security but does not describe a specific security vulnerability or threat.
The previously bootstrapped company helps organizations securely and reliably operate AI agents at scale. The post Prevalent AI Raises $22 Million to Expand Data Fabric Platform appeared first on SecurityWeek .
The 17 members of the Mabna Institute targeted hundreds of universities and organizations in the US and abroad. The post US Charges 17 Iranian Hackers, Offers $10 Million Rewards for 5 of Them appeared first on SecurityWeek .
Microsoft resolved a bug in Windows Defender that caused crashes and 0xc0000005 access violation errors after a recent security update. The issue affected Windows 10 and Windows 11 devices, causing Defender scans to fail and the threat service to stop unexpectedly. The problem was addressed via a Microsoft Defender Antivirus signature update (version 1.457.236.0 or later), which is applied automatically or can be installed via Windows Update.