Enterprise Supply Chain Intrusion: Head Mare Threat Group Trojanizes TrueConf Video Conferencing Installers
Cybersecurity researchers have uncovered an active supply chain attack campaign conducted by the Head Mare threat group targeting organizations utilizing T...
Infrastructure Security Alert: "NatJack" Attacks Hijack TCP Sessions & Spoof DNS via NAT Table Manipulation
Presented at Black Hat USA 2026 on August 7, 2026, security researcher Malcolm Stagg exposed a major new attack class dubbed "NatJack". The vulnerability c...
Identity Security Threat: Malware Weaponizes Windows Hello for Business Keys to Bypass MFA and Password Resets
New cybersecurity research highlights a sophisticated persistence technique where local malware misuses asymmetric cryptographic keys generated by Windo...
Critical Metabase Zero-Day SQL Injection (CVSS 10.0) Exploited in Wild to Take Over Business Intelligence Dashboards
A maximum-severity unauthenticated SQL injection vulnerability carrying a CVSS base score of 10.0 affecting Metabase versions 1.58 and above is un...
Critical Zero-Day Alert: Unauthenticated Metabase SQL Injection Exploited for Mass Data Theft
A critical, maximum-severity (CVSS 10.0) zero-day vulnerability in the open-source business intelligence platform Metabase is being actively exploited in wild customer d...
Business Intelligence Threat: Metabase Zero-Day SQL Injection Exploited in Active Data-Theft Campaigns
A maximum-severity security flaw impacting Metabase, the open-source business intelligence and analytics platform, is actively being exploited as a zero-day in ...
Supply Chain Attack: Hackers Breach TrueConf Server Infrastructure to Trojanize Client Installers
A critical supply-chain compromise targeting the enterprise video conferencing software provider TrueConf has been uncovered. Hacktivist and threat group "Head Mare"...
AI Safety Milestone: OpenAI Declares "Astra" Reached Critical Cyber Threshold & Halts Model Training
In an unprecedented industry disclosure on August 7, 2026, OpenAI announced that its unreleased frontier AI model—code-named Astra—reached the "Critical" cybersec...
RovoBlast: One-Click Vulnerability in Atlassian Rovo AI Exposes Enterprise Data Across Connected SaaS Ecosystems
At DEF CON 2026, researchers at Varonis Threat Labs disclosed a critical one-click vulnerability in Atlassian's flagship enterprise AI assistant, Atla...
2026-08-08 - ChainDrop Supply Chain Attack Compromises 1300 npm Packages
ChainDrop Alert: Wormable Supply Chain Attack Compromises Over 1,300 npm Packages Exceeding 2 Billion Monthly Downloads
In early August 2026, cybersecurity researchers uncovered a mas...
Commercial Real Estate Data Breach: Cushman & Wakefield Files Disclosure Over Exfiltrated Employee SSNs & Tax Records
Global commercial real estate services leader Cushman & Wakefield submitted formal data breach notification filings to state regulatory authoriti...
A critical security flaw tracked as CVE-2026-59726 has been uncovered in Ruflo, a widely deployed open-source AI agent orchestration framework. Rated with a maximum severity CVSS score of 9.8, the vulnerability allows unauthenticated remote attackers to execute arbitrar...