https://threatvectr.com/story/open-source-grew-up-in-a-hurry-and-the-security-bill-is-coming-due ThreatVectr en 2026-08-07T12:38:00.546Z Open source grew up in a hurry, and the security bill is coming due https://threatvectr.com/story/eighteen-year-old-bug-in-linux-networking-code-hands-attackers-the-keys-to-the-m ThreatVectr en 2026-08-07T12:26:00.648Z Eighteen-Year-Old Bug in Linux Networking Code Hands Attackers the Keys to the Machine https://threatvectr.com/story/ai-research-tool-finds-new-web-server-attack-tricks-and-an-apache-zero-day ThreatVectr en 2026-08-07T11:15:01.049Z AI Research Tool Finds New Web Server Attack Tricks and an Apache Zero-Day https://threatvectr.com/story/a-safety-recall-on-a-truck-brake-controller-was-also-quietly-fixing-security-fla ThreatVectr en 2026-08-07T10:24:00.830Z A Safety Recall on a Truck Brake Controller Was Also Quietly Fixing Security Flaws https://threatvectr.com/story/natjack-new-attack-hijacks-tcp-sessions-by-abusing-network-address-translation ThreatVectr en 2026-08-07T09:59:00.755Z NatJack: New Attack Hijacks TCP Sessions by Abusing Network Address Translation https://threatvectr.com/story/natjack-a-new-way-to-hijack-internet-traffic-by-poisoning-router-memory ThreatVectr en 2026-08-07T09:52:00.155Z NatJack: A New Way to Hijack Internet Traffic by Poisoning Router Memory https://threatvectr.com/story/criminals-poisoned-a-python-package-downloaded-95-million-times-a-month-ai-devel ThreatVectr en 2026-08-07T09:34:00.707Z Criminals Poisoned a Python Package Downloaded 95 Million Times a Month. AI Developers Were the Target. https://threatvectr.com/story/microsoft-and-apple-rush-out-patches-for-flaws-that-let-attackers-in-without-a-p ThreatVectr en 2026-08-07T09:30:00.398Z Microsoft and Apple Rush Out Patches for Flaws That Let Attackers In Without a Password https://threatvectr.com/story/ai-patches-security-flaws-correctly-only-26percent-of-the-time-1password-study-f ThreatVectr en 2026-08-07T09:19:00.467Z AI Patches Security Flaws Correctly Only 26% of the Time, 1Password Study Finds https://threatvectr.com/story/ai-is-making-data-breaches-more-expensive-heres-what-the-numbers-actually-say ThreatVectr en 2026-08-07T08:38:00.120Z AI Is Making Data Breaches More Expensive. Here's What the Numbers Actually Say. https://threatvectr.com/story/the-hacking-crew-behind-a-big-supply-chain-attack-has-been-busy-since-2020 ThreatVectr en 2026-08-07T08:07:00.687Z The hacking crew behind a big supply-chain attack has been busy since 2020 https://threatvectr.com/story/38-million-peoples-medical-and-personal-data-stolen-in-unlimited-technology-syst ThreatVectr en 2026-08-07T07:42:00.731Z 3.8 Million People's Medical and Personal Data Stolen in Unlimited Technology Systems Breach https://threatvectr.com/story/google-patches-41-security-flaws-in-chrome-151-six-rated-critical ThreatVectr en 2026-08-07T07:17:00.805Z Google Patches 41 Security Flaws in Chrome 151, Six Rated Critical https://threatvectr.com/story/apple-takes-uk-government-back-to-court-over-demand-to-read-encrypted-user-data ThreatVectr en 2026-08-07T00:49:00.328Z Apple Takes UK Government Back to Court Over Demand to Read Encrypted User Data https://threatvectr.com/story/metro-bank-customer-lost-pound14000-to-fraudsters-who-used-stolen-money-to-buy-a ThreatVectr en 2026-08-07T00:29:00.804Z Metro Bank Customer Lost £14,000 to Fraudsters Who Used Stolen Money to Buy AI Chatbot Credits https://threatvectr.com/story/openai-upgrades-chatgpt-for-paying-users-hands-free-accounts-unlimited-chats ThreatVectr en 2026-08-06T23:13:01.011Z OpenAI upgrades ChatGPT for paying users, hands free accounts unlimited chats https://threatvectr.com/story/cybercriminals-now-run-like-franchises-law-enforcement-still-fights-like-its-201 ThreatVectr en 2026-08-06T22:12:00.060Z Cybercriminals Now Run Like Franchises. Law Enforcement Still Fights Like It's 2015. https://threatvectr.com/story/researcher-claims-he-built-a-secret-communications-channel-inside-chatgpts-locke ThreatVectr en 2026-08-06T22:07:00.625Z Researcher Claims He Built a Secret Communications Channel Inside ChatGPT's Locked-Down Sandbox https://threatvectr.com/story/the-security-metric-that-lies-why-knowing-your-vulnerabilities-is-not-the-same-a ThreatVectr en 2026-08-06T21:59:00.893Z The Security Metric That Lies: Why Knowing Your Vulnerabilities Is Not the Same as Reducing Your Risk https://threatvectr.com/story/hedge-fund-vishing-attacks-traced-to-unc6671-the-group-behind-the-blackfile-bran ThreatVectr en 2026-08-06T20:21:00.241Z Hedge Fund Vishing Attacks Traced to UNC6671, the Group Behind the BlackFile Brand https://threatvectr.com/story/bobmojis-bobbleheads-and-hardware-keys-how-the-democratic-national-committee-reb ThreatVectr en 2026-08-06T19:46:00.204Z Bobmojis, Bobbleheads, and Hardware Keys: How the Democratic National Committee Rebuilt Its Security After a Russian Hack https://threatvectr.com/story/swiss-federal-it-office-says-sharepoint-breach-exposed-200-accounts ThreatVectr en 2026-08-06T18:59:00.295Z Swiss federal IT office says SharePoint breach exposed 200 accounts https://threatvectr.com/story/zapscape-flaw-in-linux-kvm-lets-a-rogue-guest-break-out-to-the-host ThreatVectr en 2026-08-06T18:33:00.139Z Zapscape flaw in Linux KVM lets a rogue guest break out to the host https://threatvectr.com/story/cisco-patches-a-dozen-flaws-in-sd-wan-and-ios-xe-three-rated-critical ThreatVectr en 2026-08-06T18:32:00.053Z Cisco Patches a Dozen Flaws in SD-WAN and IOS XE, Three Rated Critical https://threatvectr.com/story/researchers-sneak-past-spectre-v2-by-slipping-between-the-kernels-own-defenses ThreatVectr en 2026-08-06T17:17:00.688Z Researchers Sneak Past Spectre v2 by Slipping Between the Kernel's Own Defenses https://threatvectr.com/story/abb-ability-zenon-ships-with-a-mongodb-version-that-hasnt-been-patched-since-202 ThreatVectr en 2026-08-06T16:51:00.545Z ABB Ability Zenon ships with a MongoDB version that hasn't been patched since 2020 https://threatvectr.com/story/the-weeks-attacks-were-cheap-ordinary-and-very-effective ThreatVectr en 2026-08-06T16:04:00.727Z The Week's Attacks Were Cheap, Ordinary, and Very Effective https://threatvectr.com/story/the-browser-is-the-new-endpoint-and-ai-just-made-everyone-notice ThreatVectr en 2026-08-06T14:39:00.033Z The browser is the new endpoint, and AI just made everyone notice https://threatvectr.com/story/one-developer-password-unlocked-everything-inside-a-healthcare-software-provider ThreatVectr en 2026-08-06T14:19:00.559Z One Developer Password Unlocked Everything: Inside a Healthcare Software Provider's Wake-Up Call https://threatvectr.com/story/thousands-of-rockwell-controllers-sit-exposed-online-with-22-in-us-water-attack- ThreatVectr en 2026-08-06T13:49:00.369Z Thousands of Rockwell Controllers Sit Exposed Online, With 22 in US Water Attack Cities https://threatvectr.com/story/three-ai-labs-one-testing-firm-three-incidents-what-went-wrong ThreatVectr en 2026-08-06T13:38:00.528Z Three AI Labs, One Testing Firm, Three Incidents: What Went Wrong https://threatvectr.com/story/pentagon-suppliers-face-a-hard-deadline-prove-your-cybersecurity-or-lose-the-con ThreatVectr en 2026-08-06T13:29:00.876Z Pentagon Suppliers Face a Hard Deadline: Prove Your Cybersecurity or Lose the Contract https://threatvectr.com/story/the-window-between-a-new-vulnerability-and-an-active-attack-is-getting-shorter ThreatVectr en 2026-08-06T13:10:00.400Z The Window Between a New Vulnerability and an Active Attack Is Getting Shorter https://threatvectr.com/story/most-companies-understand-ctem-almost-none-of-them-can-run-it ThreatVectr en 2026-08-06T13:07:00.184Z Most companies understand CTEM. Almost none of them can run it. https://threatvectr.com/story/the-ask-ai-button-is-the-new-prompt-injection-delivery-van ThreatVectr en 2026-08-06T13:01:00.745Z The 'Ask AI' Button Is the New Prompt Injection Delivery Van https://threatvectr.com/story/icloud-private-relay-has-a-leak-researchers-show-how-safaris-privacy-shield-can- ThreatVectr en 2026-08-06T12:57:00.443Z iCloud Private Relay Has a Leak: Researchers Show How Safari's Privacy Shield Can Spill Real IPs https://threatvectr.com/story/a-12-year-old-flaw-in-a-popular-crypto-library-drained-dollar57-million-from-wal ThreatVectr en 2026-08-06T12:45:00.572Z A 12-year-old flaw in a popular crypto library drained $5.7 million from wallets https://threatvectr.com/story/compliance-alone-wont-protect-your-organisation-edna-conway-on-the-real-future-o ThreatVectr en 2026-08-06T12:42:00.323Z Compliance Alone Won't Protect Your Organisation: Edna Conway on the Real Future of Cyber Risk https://threatvectr.com/story/what-300000-real-world-security-tests-taught-one-company-about-ai-hacking-tools ThreatVectr en 2026-08-06T12:36:00.870Z What 300,000 Real-World Security Tests Taught One Company About AI Hacking Tools https://threatvectr.com/story/patched-doesnt-mean-safe-why-security-teams-need-to-test-after-they-fix ThreatVectr en 2026-08-06T12:33:00.585Z Patched Doesn't Mean Safe: Why Security Teams Need to Test After They Fix https://threatvectr.com/story/metas-ai-broke-into-external-systems-during-a-security-test-gone-wrong ThreatVectr en 2026-08-06T10:14:00.132Z Meta's AI Broke Into External Systems During a Security Test Gone Wrong https://threatvectr.com/story/researchers-find-ai-agents-at-aws-google-and-vercel-can-be-tricked-into-running- ThreatVectr en 2026-08-06T09:56:00.476Z Researchers Find AI Agents at AWS, Google and Vercel Can Be Tricked Into Running Tools Without the AI https://threatvectr.com/story/ai-agents-are-breaking-into-your-own-systems-with-your-permission ThreatVectr en 2026-08-06T09:21:00.381Z AI Agents Are Breaking Into Your Own Systems, With Your Permission https://threatvectr.com/story/criminals-are-using-ai-like-a-work-tool-researchers-have-the-receipts ThreatVectr en 2026-08-06T08:48:00.639Z Criminals Are Using AI Like a Work Tool. Researchers Have the Receipts. https://threatvectr.com/story/twenty-chinese-router-models-ship-from-the-factory-with-a-hidden-backdoor ThreatVectr en 2026-08-06T08:40:01.022Z Twenty Chinese Router Models Ship From The Factory With A Hidden Backdoor https://threatvectr.com/story/cisco-patches-24-flaws-including-a-perfect-score-bug-that-hands-attackers-full-c ThreatVectr en 2026-08-06T07:45:00.587Z Cisco Patches 24 Flaws, Including a Perfect-Score Bug That Hands Attackers Full Control https://threatvectr.com/story/hackers-are-actively-exploiting-a-critical-flaw-in-jetbrains-teamcity ThreatVectr en 2026-08-06T06:59:00.938Z Hackers Are Actively Exploiting a Critical Flaw in JetBrains TeamCity https://threatvectr.com/story/ai-browsers-can-be-hijacked-by-hidden-instructions-in-emails-and-web-pages-resea ThreatVectr en 2026-08-06T02:57:00.591Z AI Browsers Can Be Hijacked by Hidden Instructions in Emails and Web Pages, Researchers Warn https://threatvectr.com/story/ransomware-group-orion-claims-attack-on-morris-group-international ThreatVectr en 2026-08-06T01:03:00.647Z Ransomware group Orion claims attack on Morris Group International https://threatvectr.com/story/kmarts-dollar89-camera-glasses-sold-out-across-australia-privacy-experts-are-ala ThreatVectr en 2026-08-06T00:24:00.692Z Kmart's $89 Camera Glasses Sold Out Across Australia. Privacy Experts Are Alarmed. https://threatvectr.com/story/ai-browsers-can-be-tricked-into-stealing-your-data-and-nobody-has-a-fix-yet ThreatVectr en 2026-08-05T23:55:00.351Z AI Browsers Can Be Tricked Into Stealing Your Data, and Nobody Has a Fix Yet https://threatvectr.com/story/ransom-cartel-boss-gets-16-years-after-dollar67m-extortion-spree ThreatVectr en 2026-08-05T23:29:00.198Z Ransom Cartel Boss Gets 16 Years After $6.7M Extortion Spree https://threatvectr.com/story/why-modern-hackers-walk-in-through-the-front-door-of-your-website ThreatVectr en 2026-08-05T22:31:00.242Z Why Modern Hackers Walk In Through the Front Door of Your Website https://threatvectr.com/story/canadian-hacker-admits-to-snowflake-data-thefts-that-hit-165-companies-and-100-m ThreatVectr en 2026-08-05T22:16:00.961Z Canadian hacker admits to Snowflake data thefts that hit 165 companies and 100 million people https://threatvectr.com/story/fixing-one-hole-at-a-time-is-no-longer-enough-why-security-must-follow-the-full- ThreatVectr en 2026-08-05T22:03:00.846Z Fixing One Hole at a Time Is No Longer Enough: Why Security Must Follow the Full Attack Path https://threatvectr.com/story/your-emails-design-layer-can-steal-your-password-no-suspicious-attachment-requir ThreatVectr en 2026-08-05T20:45:00.221Z Your Email's Design Layer Can Steal Your Password. No Suspicious Attachment Required. https://threatvectr.com/story/15-flaws-in-tp-link-kit-put-automatic-network-setup-at-risk ThreatVectr en 2026-08-05T20:42:00.973Z 15 Flaws in TP-Link Kit Put Automatic Network Setup at Risk https://threatvectr.com/story/hackers-hid-their-attack-tools-inside-an-oracle-database-itself ThreatVectr en 2026-08-05T20:14:00.472Z Hackers hid their attack tools inside an Oracle database itself https://threatvectr.com/story/researchers-cracked-samsung-phones-wide-open-by-turning-bixby-against-its-own-de ThreatVectr en 2026-08-05T19:59:00.177Z Researchers Cracked Samsung Phones Wide Open by Turning Bixby Against Its Own Device https://threatvectr.com/story/fake-mac-downloads-hide-behind-250-domains-that-screen-visitors-first ThreatVectr en 2026-08-05T19:26:00.363Z Fake Mac Downloads Hide Behind 250+ Domains That Screen Visitors First https://threatvectr.com/story/openai-cuts-off-cambodia-based-scam-ring-running-frauds-through-chatgpt ThreatVectr en 2026-08-05T19:23:00.076Z OpenAI Cuts Off Cambodia-Based Scam Ring Running Frauds Through ChatGPT https://threatvectr.com/story/fake-coldcard-security-audit-emails-push-remote-access-tool-after-dollar88m-bitc ThreatVectr en 2026-08-05T18:09:00.674Z Fake COLDCARD 'Security Audit' Emails Push Remote Access Tool After $88M Bitcoin Theft https://threatvectr.com/story/paperclip-ai-agent-platform-carries-bugs-that-hand-attackers-the-keys-to-the-hos ThreatVectr en 2026-08-05T16:48:00.857Z Paperclip AI Agent Platform Carries Bugs That Hand Attackers the Keys to the Host https://threatvectr.com/story/cybercrime-forums-are-selling-cut-price-claude-access-and-the-sellers-are-readin ThreatVectr en 2026-08-05T16:39:00.077Z Cybercrime Forums Are Selling Cut-Price Claude Access, and the Sellers Are Reading Every Prompt https://threatvectr.com/story/cisa-gives-federal-agencies-three-days-to-patch-langflow-n-central-and-tomcat-fl ThreatVectr en 2026-08-05T16:17:00.265Z CISA gives federal agencies three days to patch Langflow, N-central and Tomcat flaws under active attack https://threatvectr.com/story/malicious-npm-packages-hide-attacker-servers-inside-empty-ethereum-transactions ThreatVectr en 2026-08-05T15:29:00.437Z Malicious npm Packages Hide Attacker Servers Inside Empty Ethereum Transactions https://threatvectr.com/story/veeam-console-bug-hands-over-agent-credentials-terraform-mcp-server-leaks-tokens ThreatVectr en 2026-08-05T15:21:00.833Z Veeam Console Bug Hands Over Agent Credentials; Terraform MCP Server Leaks Tokens Between Users https://threatvectr.com/story/googles-blogger-locks-hundreds-of-legitimate-sites-in-mass-false-positive-sweep ThreatVectr en 2026-08-05T15:06:00.770Z Google's Blogger locks hundreds of legitimate sites in mass false-positive sweep https://threatvectr.com/story/why-blocklists-cant-keep-up-with-ai-built-phishing-sites ThreatVectr en 2026-08-05T14:35:00.425Z Why Blocklists Can't Keep Up With AI-Built Phishing Sites