NewsTuesday, 25 August 2026

Newsletter subscribe · Free

新闻

网络安全

来自塑造行业的会议、展会和峰会的网络安全领域最新新闻、公告和分析。

该分类的最新新闻

Dark Reading

Déjà Vu? Meta's AI Escapes Testing Lab in Hacking Joyride

In the span of three weeks, OpenAI, Anthropic, and Meta have all disclosed AI agent sandbox escape events affecting real organizations.

Nate Nelson6 August 2026

Dark Reading

Researcher Claims Control of ChatGPT Secure Sandbox

A researcher demonstrated a proof-of-concept attack chain that provided C2-style influence over ChatGPT's isolated sandbox during a session at Black Hat USA 2026.

Alexander Culafi6 August 2026

Dark Reading

From Bobmojis to Bobbleheads: How the Democratic Party Built a Security-First Culture

Two former chief security officers of the Democratic National Committee explain that a strong security-first mindset requires executive support — and a dose of absurdity.

Arielle Waldman6 August 2026

The Hacker News

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges inside an L1 guest virtual machine (VM) to escape KVM isolation and execute code on the host. The risk applies when nested virtualization is exposed to untrusted guests. The flaw is tracked as CVE-2026-64561 and affects KVM/x86's shadow memory management unit (MMU), which manages shadow page

info@thehackernews.com (The Hacker News)6 August 2026

The Hacker News

Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs

Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst SD-WAN and IOS XE Software as part of a comprehensive internal security review. The security issues affect Cisco Catalyst SD-WAN Software, regardless of device configuration, and Cisco IOS XE Software when it is running in autonomous or controller mode. "These vulnerabilities were found

info@thehackernews.com (The Hacker News)6 August 2026

Krebs on Security

Canadian Man Pleads Guilty in Snowflake Extortions

A 26-year-old Canadian man once described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage provider Snowflake. Connor Riley Moucka, of Kitchener, Ontario, also admitted to stealing call and text history records of more than 100 million AT&T customers.

BrianKrebs6 August 2026

Dark Reading

AI Sends Global Crime Syndicates Into Fraud Nirvana

Organized crime is convincingly scamming at scale, making billions thanks to AI-enabled voice cloning, deepfake real-time video overlays, LLM-driven persona management, and automated translation.

Tara Seals6 August 2026

Dark Reading

AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking

Attackers can take control of agents through malicious instructions hidden in content supplied to AI browsers, and there's no simple fix for the threat.

Jai Vijayan6 August 2026

Dark Reading

No Perfect Fix for AI Browser Prompt Injection Flaws

AI browsers from top vendors remain vulnerable to prompt injection attacks despite multiple security guardrails, according to new research.

Alexander Culafi5 August 2026

Dark Reading

CSS: The Hidden Threat Lurking in Your Inbox

CSS was once just about design. Now researchers warn it's powerful enough to exfiltrate data from webmail — and some vendors aren't prepared.

Kristina Beek5 August 2026

Dark Reading

15 TP-Link Bugs Expose Risks in Zero-Trust Provisioning

Researchers are calling attention to the risks inherent in automated network device provisioning, using a world-leading device manufacturer as a case study.

Nate Nelson5 August 2026

The Hacker News

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure, a change Microsoft Threat Intelligence tracked on infrastructure it had been watching for weeks. The server-side gate hides the malicious page from crawlers and sandboxes while presenting selected Mac users with a fake software download. Microsoft

info@thehackernews.com (The Hacker News)5 August 2026

VF96.7.

一封简短的邮件。汇集塑造全球商业的展会、会议和峰会的头条新闻。没有废话，没有垃圾邮件，随时可取消订阅。

Déjà Vu? Meta's AI Escapes Testing Lab in Hacking Joyride

Researcher Claims Control of ChatGPT Secure Sandbox

From Bobmojis to Bobbleheads: How the Democratic Party Built a Security-First Culture

New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts

Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.9 CVSS Score Bugs

Canadian Man Pleads Guilty in Snowflake Extortions

AI Sends Global Crime Syndicates Into Fraud Nirvana

AI Browsers Vulnerable to 'PleaseFix' Zero-Click Agent Hijacking

No Perfect Fix for AI Browser Prompt Injection Flaws

CSS: The Hidden Threat Lurking in Your Inbox

15 TP-Link Bugs Expose Risks in Zero-Trust Provisioning

Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures

每周五送达的行业活动一周要闻。