Industry professionals debate whether it represents a lab containment failure or an unprecedented agentic capability milestone. The post Industry Reactions to OpenAI Models Hacking Hugging Face: Feedback Friday appeared first on SecurityWeek .
An Illinois man was sentenced on Tuesday to 76 months in prison and three years of supervised release for hacking the Snapchat accounts of over 750 women to steal nude photos. [...]
A large-scale scan of over 380,000 vibe-coded applications revealed widespread exposure of sensitive corporate and personal data. Approximately 40% of these apps exposed sensitive information, with thousands lacking any authentication. Common security issues include hardcoded secrets in client bundles, missing row-level security policies (notably in Supabase), improper authorization checks, exposed debug and admin routes, and overly permissive CORS settings. These vulnerabilities stem largely from shipping applications without proper security reviews rather than the vibe coding approach itself.
This entry references a Reddit post discussing concerns about UK chat laws and online privacy. The content is a hypothetical user inquiry about protecting personal communications from government surveillance, mentioning signal and Bluetooth jammers. There is no specific vulnerability, exploit, or technical threat detailed.
Thailand's Ministry of Finance was targeted by an attacker using Hermes, an open-source AI agent running unattended. The agent executed reconnaissance activities such as running LinPEAS to identify privilege escalation vectors and enumerating web directories containing personnel records. Additionally, a previously unreported implant named "Hades" was found on the compromised server, consisting of 62 Go binaries with features including kill dates, working-hours sleep, and AES-256-GCM encrypted communications. This activity was observed on a Hong Kong server hosting open directories from July 9 to 13. The incident was uncovered through joint research and includes indicators of compromise and MITRE ATT&CK mappings in the referenced blog post.
This report highlights the exposure of SWIFT MT103 financial transaction messages and related documents on publicly accessible platforms. These exposed records, both genuine and fabricated, can be exploited for social engineering, fraud, and money laundering. The Coalition of Cyber Investigators monitors such exposures using OSINT techniques and provides guidance on identifying technical red flags and verifying suspicious documents. The exposure of these sensitive financial messages poses risks to organizations and their customers by facilitating high-value financial crimes. The Coalition offers investigative services, ongoing monitoring, and expert support to help organizations manage and remediate these exposures.
This entry references Reversing Labs and its Spectra Assure product suite, which provides software supply chain security through AI-driven binary analysis to detect malware, active threats, tampering, and other risks in software components. The content is primarily promotional and informational about the product capabilities and industry recognition, without detailing any specific security vulnerability or threat. There is no indication of a security flaw or exploit associated with Reversing Labs or its products in the provided data.
Threat actors used credentials obtained from other companies to hack into Chick-fil-A One accounts. The post Chick-fil-A Accounts Get Fried in Credential Stuffing Attack appeared first on SecurityWeek .
FedRAMP Rev5 is ending and being replaced by FedRAMP 20X, which shifts from point-in-time security assessments to continuous, machine-readable evidence-based assurance. This new approach requires organizations to continuously prove their security controls are effective through automated, measurable Key Security Indicators (KSIs) rather than relying on annual narrative audits. The transition demands significant engineering effort to build systems that generate trustworthy, continuous evidence, fundamentally changing compliance and audit processes. FedRAMP 20X aims to provide more reliable assurance by validating security posture continuously in dynamic cloud environments.
The latest investment round brings the total raised by Abstract to nearly $50 million. The post Abstract Raises $25 Million to Expand Composable Security Operations Platform appeared first on SecurityWeek .
The European Commission fined Google €890 million ($1 billion) for violating the EU's Digital Markets Act (DMA), which aims to ensure fair competition online. The fine relates to antitrust violations concerning Google's search engine and app store practices. This is a regulatory enforcement action rather than a traditional cybersecurity vulnerability or threat. No technical exploit or direct security risk to systems or data has been identified in this case.
We’re looking forward to having some great conversations with those of you heading to the desert for Hacker Summer Camp 2026. We have a presence within the Cisco and Splunk booth (2633) during Black Hat where you can chat to us about our latest threat research, incident response, and how Talos powers the Cisco portfolio with our intelligence. Or, feel free to pretend to want to talk to us about those things while grabbing a new multicolored Snorty. That’s fine, too. Here’s some of the ways we’ll be showing up at Black Hat, alongside our friends at Cisco and Splunk: Meet the researchers: Booth lightning talks Our Talosians have spent a lot of time over the last few months putting together some truly... well, enlightening lightning talks. Throughout Wednesday and Thursday at Black Hat, you can expect to see such topics as: Threat actor prompting and the emerging ways adversaries are using prompts, agents, skills, and tools to improve efficiency Warlock ransomware, and why this group does not fit neatly into a simple RaaS or state-linked label. Zero trust for agent identity Building a "second brain" for your second brain Predicting cybersecurity fraud Vulnerability discovery trends ... and much more Lightning talks are 15 minutes. That’s less than 9% of The Odyssey. Don’t worry, we cut the bit where everyone gets turned into Snorty pigs. Talos workshop: When AI finds vulnerabilities faster than humans can patch Date/Time: Wednesday, August 5 | 1:30 p.m. – 3:00 p.m. (Oceanside E, Level 2) If you're looking for something hands-on and interactive, don't miss our workshop with Talos’ Nick Biasini and Cisco’s Omar Santos . In two parts, they’ll demonstrate practical ways security teams can incorporate AI into SOC workflows to identify sophisticated adversary behavior. In Part 1, Omar will discuss the Foundry Security Spec. He’ll walk through how to deploy, build testing harnesses around its core agent roles, and integrate Project CodeGuard so that findings from autonomous testing can be converted into reusable secure-coding rules and future prevention. In Part 2, Nick will demonstrate how Talos leverages AI to transform threat hunting. We will explore best practices for identifying adversarial AI tactics and provide attendees with insights into how Cisco Talos is leveraging AI for defense. Participants will learn how to integrate these defensive AI strategies into their own SOC workflows. Splunk workshop: When agents become insider threats Date/Time: Wednesday, August 5 | 10:15 a.m. – 11:00 a.m. (Mandalay Bay I) The Splunk workshop considers the fact that the next insider threat may not be a person; it may be an autonomous agent using valid credentials and delegated authority. Attendees will see real-world attack paths in which agents move sensitive data across tools, distribute brute-force attempts under a single delegation, and manipulate internal systems without triggering traditional SIEM or UEBA alerts. It was Talos all along One of the questions we hear often is: "How do I buy Talos?" The answer… is that you probably already did. Throughout the Cisco booth you'll see our “ It was Talos all along” campaign, highlighting the fact that Talos isn't a standalone product or a threat intelligence feed you bolt onto your security stack. Talos is already embedded across the Cisco security portfolio, which continually benefits from our threat research and intelligence. To build your curiosity, take a look at our new video, “Where Protection Starts,” to see how Cisco Talos Intelligence Integrations help reduce uncertainty in the SOC: See you in Las Vegas.
Microsoft is addressing an ongoing issue in Exchange Online where customers' mailboxes are being mistakenly quarantined. This problem has been active since Sunday and is currently under resolution by Microsoft. No specific affected versions or technical exploit details are provided. The issue impacts mailbox availability but does not have confirmed exploitation in the wild.
Oracle released its July 2026 Critical Patch Update addressing 1,434 unique vulnerabilities across 334 products with 1,449 security patches. Many vulnerabilities were likely discovered using AI technologies. The update includes fixes for critical severity flaws, including roughly 600 that can be exploited remotely without authentication. Key affected products include E-Business Suite, Fusion Middleware, Communications, and PeopleSoft. Organizations are urged to apply these patches promptly to mitigate risks from known vulnerabilities.
An updated advisory from federal agencies provides information on the techniques used to hack programmable logic controllers. The post US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices appeared first on SecurityWeek .
The Upbound Group fintech company disclosed that threat actors who stole data from its systems leveraged it to create $13 million in Acima leases. [...]