https://threatvectr.com/story/cisa-most-breaches-still-start-with-old-unpatched-bugs ThreatVectr en 2026-08-26T15:00:00.077Z CISA: Most Breaches Still Start With Old, Unpatched Bugs https://threatvectr.com/story/cisa-ran-the-same-attack-against-two-critical-infrastructure-firms-one-saw ThreatVectr en 2026-08-26T14:47:00.105Z CISA Ran the Same Attack Against Two Critical Infrastructure Firms. One Saw Nothing. https://threatvectr.com/story/fbi-pulls-plug-on-chinese-espionage-quartermaster-that-rented-out-hacking-kit ThreatVectr en 2026-08-26T14:43:00.806Z FBI Pulls Plug on Chinese Espionage 'Quartermaster' That Rented Out Hacking Kit https://threatvectr.com/story/novacookies-phishing-kit-rents-microsoft-365-session-theft-for-dollar320-a-month ThreatVectr en 2026-08-26T14:40:00.630Z NovaCookies Phishing Kit Rents Microsoft 365 Session Theft for $320 a Month https://threatvectr.com/story/snowflake-kills-passwords-for-service-accounts-the-cleanup-starts-now ThreatVectr en 2026-08-26T14:30:00.963Z Snowflake kills passwords for service accounts. The cleanup starts now. https://threatvectr.com/story/ubiquiti-patches-three-critical-bugs-in-unifi-cameras-phones-and-router-os ThreatVectr en 2026-08-26T13:46:00.756Z Ubiquiti Patches Three Critical Bugs in UniFi Cameras, Phones and Router OS https://threatvectr.com/story/two-unpatched-flaws-in-kalturas-video-player-let-attackers-read-files-and-run ThreatVectr en 2026-08-26T13:21:00.987Z Two unpatched flaws in Kaltura's video player let attackers read files and run code https://threatvectr.com/story/adobe-and-nvidia-fix-dozens-of-security-flaws-including-critical-bugs-that-could ThreatVectr en 2026-08-26T12:54:00.075Z Adobe and Nvidia Fix Dozens of Security Flaws, Including Critical Bugs That Could Let Attackers Take Control https://threatvectr.com/story/windows-11-to-let-users-approve-camera-and-microphone-access-app-by-app ThreatVectr en 2026-08-26T12:27:00.169Z Windows 11 to Let Users Approve Camera and Microphone Access App by App https://threatvectr.com/story/the-soc-queue-is-broken-can-ai-actually-fix-it ThreatVectr en 2026-08-26T12:19:00.577Z The SOC Queue Is Broken. Can AI Actually Fix It? https://threatvectr.com/story/a-single-website-visit-can-poison-your-local-ai-agent-researchers-find ThreatVectr en 2026-08-26T12:05:00.658Z A Single Website Visit Can Poison Your Local AI Agent, Researchers Find https://threatvectr.com/story/more-than-100-water-systems-were-hit-by-hackers-in-july-heres-what-cisa-found ThreatVectr en 2026-08-26T11:49:00.409Z More Than 100 Water Systems Were Hit by Hackers in July. Here's What CISA Found. https://threatvectr.com/story/microsoft-says-the-patching-window-is-shrinking-fast-here-is-what-that-means-for ThreatVectr en 2026-08-26T11:35:00.445Z Microsoft says the patching window is shrinking fast. Here is what that means for ordinary people. https://threatvectr.com/story/passing-the-login-test-does-not-mean-you-let-in-the-right-person ThreatVectr en 2026-08-26T11:28:00.895Z Passing the Login Test Does Not Mean You Let In the Right Person https://threatvectr.com/story/openai-cuts-off-russian-accounts-using-chatgpt-to-fake-political-voices-online ThreatVectr en 2026-08-26T10:41:00.316Z OpenAI Cuts Off Russian Accounts Using ChatGPT to Fake Political Voices Online https://threatvectr.com/story/claude-opus-46-slips-past-gym-booking-cap-in-9-of-10-test-runs ThreatVectr en 2026-08-26T10:38:00.032Z Claude Opus 4.6 Slips Past Gym Booking Cap in 9 of 10 Test Runs https://threatvectr.com/story/chrome-152-patches-327-security-flaws-most-found-by-googles-own-ai ThreatVectr en 2026-08-26T10:16:00.290Z Chrome 152 Patches 327 Security Flaws, Most Found by Google's Own AI https://threatvectr.com/story/sleepwalker-the-windows-backdoor-that-sits-silent-until-one-packet-wakes-it-up ThreatVectr en 2026-08-26T09:14:00.286Z SLEEPWALKER: The Windows Backdoor That Sits Silent Until One Packet Wakes It Up https://threatvectr.com/story/when-ai-agents-go-off-script-nobody-knows-who-pays ThreatVectr en 2026-08-26T08:49:00.221Z When AI Agents Go Off-Script, Nobody Knows Who Pays https://threatvectr.com/story/cisa-hackers-are-actively-exploiting-a-patched-gitea-flaw-that-lets-them-run ThreatVectr en 2026-08-26T05:41:00.021Z CISA: Hackers Are Actively Exploiting a Patched Gitea Flaw That Lets Them Run Malicious Commands https://threatvectr.com/story/openai-executive-warns-of-persistent-ai-powered-cyber-attacks-as-capabilities ThreatVectr en 2026-08-26T00:23:00.331Z OpenAI Executive Warns of Persistent AI-Powered Cyber-Attacks as Capabilities Advance https://threatvectr.com/story/uk-homebuyers-lose-hundreds-of-thousands-to-friday-afternoon-email-fraud ThreatVectr en 2026-08-26T00:22:00.245Z UK Homebuyers Lose Hundreds of Thousands to 'Friday Afternoon' Email Fraud https://threatvectr.com/story/lacma-data-breach-exposed-social-security-numbers-and-medical-records-museum ThreatVectr en 2026-08-25T22:11:00.604Z LACMA data breach exposed Social Security numbers and medical records, museum confirms https://threatvectr.com/story/anonymouskit-the-phishing-kit-that-turns-stolen-iphones-back-into-cash ThreatVectr en 2026-08-25T20:49:00.999Z AnonyMousKIT: the phishing kit that turns stolen iPhones back into cash https://threatvectr.com/story/us-treasury-sanctions-iran-linked-hackers-tied-to-critical-infrastructure ThreatVectr en 2026-08-25T19:23:00.023Z US Treasury Sanctions Iran-Linked Hackers Tied to Critical Infrastructure Attacks https://threatvectr.com/story/linux-foundation-takes-charge-of-trace-a-new-open-standard-for-proving-what-ai ThreatVectr en 2026-08-25T16:36:00.517Z Linux Foundation Takes Charge of TRACE, a New Open Standard for Proving What AI Agents Actually Did https://threatvectr.com/story/norways-government-login-systems-knocked-offline-by-third-ddos-attack-in-months ThreatVectr en 2026-08-25T16:20:00.280Z Norway's government login systems knocked offline by third DDoS attack in months https://threatvectr.com/story/chip-giants-are-racing-to-build-quantum-proof-encryption-into-hardware ThreatVectr en 2026-08-25T16:06:00.386Z Chip Giants Are Racing to Build Quantum-Proof Encryption Into Hardware https://threatvectr.com/story/the-industrial-timing-protocol-that-could-let-hackers-stop-a-robotic-arm-mid ThreatVectr en 2026-08-25T15:59:00.845Z The Industrial Timing Protocol That Could Let Hackers Stop a Robotic Arm Mid-Grip https://threatvectr.com/story/ai-finds-the-bugs-in-hours-fixing-them-still-takes-months ThreatVectr en 2026-08-25T15:52:00.306Z AI Finds the Bugs in Hours. Fixing Them Still Takes Months. https://threatvectr.com/story/new-synkloader-malware-could-be-the-opening-move-in-future-ransomware-attacks ThreatVectr en 2026-08-25T15:47:00.943Z New 'SynkLoader' Malware Could Be the Opening Move in Future Ransomware Attacks https://threatvectr.com/story/the-cybersecurity-bill-is-getting-too-big-to-pay ThreatVectr en 2026-08-25T15:38:00.279Z The Cybersecurity Bill Is Getting Too Big to Pay https://threatvectr.com/story/wordlistloader-hides-malware-inside-plain-english-word-lists ThreatVectr en 2026-08-25T15:34:00.018Z WordlistLoader Hides Malware Inside Plain English Word Lists https://threatvectr.com/story/researchers-warn-a-booby-trapped-webpage-could-hijack-nvidia-nemoclaw-ai-agents ThreatVectr en 2026-08-25T15:22:00.195Z Researchers Warn a Booby-Trapped Webpage Could Hijack NVIDIA NemoClaw AI Agents https://threatvectr.com/story/nutex-health-tells-the-sec-hackers-walked-off-with-data-from-its-servers ThreatVectr en 2026-08-25T14:52:00.090Z Nutex Health Tells the SEC Hackers Walked Off With Data From Its Servers https://threatvectr.com/story/attackers-are-skipping-the-login-and-going-after-the-hiring-desk ThreatVectr en 2026-08-25T14:40:00.261Z Attackers Are Skipping the Login and Going After the Hiring Desk https://threatvectr.com/story/two-socs-same-attack-cisa-red-team-walks-through-one-network-gets-caught-in-the ThreatVectr en 2026-08-25T14:30:00.583Z Two SOCs, Same Attack: CISA Red Team Walks Through One Network, Gets Caught in the Other https://threatvectr.com/story/alice-raises-dollar140-million-to-test-ai-systems-for-weaknesses-before ThreatVectr en 2026-08-25T14:29:00.462Z Alice Raises $140 Million to Test AI Systems for Weaknesses Before Criminals Find Them https://threatvectr.com/story/microsofts-powertoys-gets-a-window-hopper-alttab-but-only-for-the-app-youre ThreatVectr en 2026-08-25T14:15:00.500Z Microsoft's PowerToys gets a Window Hopper: Alt+Tab, but only for the app you're using https://threatvectr.com/story/marimo-patches-notebook-flaw-that-let-hidden-commands-run-on-open ThreatVectr en 2026-08-25T14:02:00.564Z Marimo Patches Notebook Flaw That Let Hidden Commands Run on Open https://threatvectr.com/story/whatsapp-rolls-out-alphanumeric-passwords-and-multi-device-passkeys ThreatVectr en 2026-08-25T13:38:00.848Z WhatsApp Rolls Out Alphanumeric Passwords and Multi-Device Passkeys https://threatvectr.com/story/nucleus-security-says-its-new-tools-can-spot-a-vulnerability-before-your-scanner ThreatVectr en 2026-08-25T13:33:00.515Z Nucleus Security says its new tools can spot a vulnerability before your scanner even knows it exists https://threatvectr.com/story/ics-cybersecurity-conference-brings-back-hands-on-industrial-attack-training ThreatVectr en 2026-08-25T13:33:00.494Z ICS Cybersecurity Conference Brings Back Hands-On Industrial Attack Training https://threatvectr.com/story/mirage2fa-phishing-kit-slipped-past-microsoft-365-logins-at-4500-firms ThreatVectr en 2026-08-25T13:05:00.556Z Mirage2FA Phishing Kit Slipped Past Microsoft 365 Logins at 4,500 Firms https://threatvectr.com/story/vulnerability-management-is-drowning-and-ai-is-being-sold-as-the-lifeboat ThreatVectr en 2026-08-25T13:03:00.363Z Vulnerability management is drowning, and AI is being sold as the lifeboat https://threatvectr.com/story/criminals-turn-npm-into-free-hosting-for-fake-cloudflare-login-traps ThreatVectr en 2026-08-25T13:03:00.347Z Criminals Turn npm Into Free Hosting for Fake Cloudflare Login Traps https://threatvectr.com/story/interpols-operation-jackal-iv-58-arrests-target-west-african-fraud-networks-and ThreatVectr en 2026-08-25T11:20:00.965Z Interpol's Operation Jackal IV: 58 arrests target West African fraud networks and Black Axe https://threatvectr.com/story/silent-software-patches-protect-hackers-not-users ThreatVectr en 2026-08-25T10:29:00.788Z Silent Software Patches Protect Hackers, Not Users https://threatvectr.com/story/taiwan-charges-nine-people-over-illegal-ai-server-exports-to-china-including ThreatVectr en 2026-08-25T10:04:00.772Z Taiwan Charges Nine People Over Illegal AI Server Exports to China, Including Staff From Nvidia and Super Micro https://threatvectr.com/story/equifax-leverages-ai-to-strengthen-cybersecurity-measures ThreatVectr en 2026-08-25T08:36:00.795Z Equifax Leverages AI to Strengthen Cybersecurity Measures https://threatvectr.com/story/cisa-flags-critical-oracle-weblogic-flaw-as-attackers-hit-unpatched-servers ThreatVectr en 2026-08-25T07:04:00.370Z CISA Flags Critical Oracle WebLogic Flaw as Attackers Hit Unpatched Servers https://threatvectr.com/story/hook-hold-harvest-hide-inside-the-state-attorneys-general-trial-against-meta ThreatVectr en 2026-08-25T00:29:00.577Z Hook, Hold, Harvest, Hide: Inside the State Attorneys General Trial Against Meta https://threatvectr.com/story/delhis-electric-rickshaws-are-being-hacked-via-bluetooth-and-nobody-has-to-be-a ThreatVectr en 2026-08-25T00:27:00.427Z Delhi's Electric Rickshaws Are Being Hacked via Bluetooth, and Nobody Has to Be a Programmer to Do It https://threatvectr.com/story/fake-minecraft-downloads-are-pushing-weedhack-malware-to-gamers ThreatVectr en 2026-08-24T23:29:00.744Z Fake Minecraft Downloads Are Pushing 'Weedhack' Malware to Gamers https://threatvectr.com/story/calix-home-routers-have-a-hole-that-lets-strangers-punch-into-your-network ThreatVectr en 2026-08-24T21:34:00.508Z Calix Home Routers Have a Hole That Lets Strangers Punch Into Your Network https://threatvectr.com/story/hackers-chain-two-miniorange-wordpress-plugin-bugs-to-log-in-as-admin ThreatVectr en 2026-08-24T19:47:00.758Z Hackers Chain Two miniOrange WordPress Plugin Bugs to Log in as Admin https://threatvectr.com/story/this-week-in-ai-security-rogue-packages-plc-hacks-by-chatbot-and-leaky-stripe ThreatVectr en 2026-08-24T16:22:00.991Z This Week in AI Security: Rogue Packages, PLC Hacks by Chatbot, and Leaky Stripe Keys https://threatvectr.com/story/shinyhunters-phoned-a-reliaquest-employee-and-one-of-them-fell-for-it ThreatVectr en 2026-08-24T15:41:00.068Z ShinyHunters phoned a ReliaQuest employee, and one of them fell for it