https://threatvectr.com/story/researchers-sneak-past-spectre-v2-by-slipping-between-the-kernels-own-defenses ThreatVectr en 2026-08-06T17:17:00.688Z Researchers Sneak Past Spectre v2 by Slipping Between the Kernel's Own Defenses https://threatvectr.com/story/abb-ability-zenon-ships-with-a-mongodb-version-that-hasnt-been-patched-since-202 ThreatVectr en 2026-08-06T16:51:00.545Z ABB Ability Zenon ships with a MongoDB version that hasn't been patched since 2020 https://threatvectr.com/story/the-weeks-attacks-were-cheap-ordinary-and-very-effective ThreatVectr en 2026-08-06T16:04:00.727Z The Week's Attacks Were Cheap, Ordinary, and Very Effective https://threatvectr.com/story/the-browser-is-the-new-endpoint-and-ai-just-made-everyone-notice ThreatVectr en 2026-08-06T14:39:00.033Z The browser is the new endpoint, and AI just made everyone notice https://threatvectr.com/story/one-developer-password-unlocked-everything-inside-a-healthcare-software-provider ThreatVectr en 2026-08-06T14:19:00.559Z One Developer Password Unlocked Everything: Inside a Healthcare Software Provider's Wake-Up Call https://threatvectr.com/story/thousands-of-rockwell-controllers-sit-exposed-online-with-22-in-us-water-attack- ThreatVectr en 2026-08-06T13:49:00.369Z Thousands of Rockwell Controllers Sit Exposed Online, With 22 in US Water Attack Cities https://threatvectr.com/story/three-ai-labs-one-testing-firm-three-incidents-what-went-wrong ThreatVectr en 2026-08-06T13:38:00.528Z Three AI Labs, One Testing Firm, Three Incidents: What Went Wrong https://threatvectr.com/story/pentagon-suppliers-face-a-hard-deadline-prove-your-cybersecurity-or-lose-the-con ThreatVectr en 2026-08-06T13:29:00.876Z Pentagon Suppliers Face a Hard Deadline: Prove Your Cybersecurity or Lose the Contract https://threatvectr.com/story/the-window-between-a-new-vulnerability-and-an-active-attack-is-getting-shorter ThreatVectr en 2026-08-06T13:10:00.400Z The Window Between a New Vulnerability and an Active Attack Is Getting Shorter https://threatvectr.com/story/most-companies-understand-ctem-almost-none-of-them-can-run-it ThreatVectr en 2026-08-06T13:07:00.184Z Most companies understand CTEM. Almost none of them can run it. https://threatvectr.com/story/the-ask-ai-button-is-the-new-prompt-injection-delivery-van ThreatVectr en 2026-08-06T13:01:00.745Z The 'Ask AI' Button Is the New Prompt Injection Delivery Van https://threatvectr.com/story/icloud-private-relay-has-a-leak-researchers-show-how-safaris-privacy-shield-can- ThreatVectr en 2026-08-06T12:57:00.443Z iCloud Private Relay Has a Leak: Researchers Show How Safari's Privacy Shield Can Spill Real IPs https://threatvectr.com/story/a-12-year-old-flaw-in-a-popular-crypto-library-drained-dollar57-million-from-wal ThreatVectr en 2026-08-06T12:45:00.572Z A 12-year-old flaw in a popular crypto library drained $5.7 million from wallets https://threatvectr.com/story/compliance-alone-wont-protect-your-organisation-edna-conway-on-the-real-future-o ThreatVectr en 2026-08-06T12:42:00.323Z Compliance Alone Won't Protect Your Organisation: Edna Conway on the Real Future of Cyber Risk https://threatvectr.com/story/what-300000-real-world-security-tests-taught-one-company-about-ai-hacking-tools ThreatVectr en 2026-08-06T12:36:00.870Z What 300,000 Real-World Security Tests Taught One Company About AI Hacking Tools https://threatvectr.com/story/patched-doesnt-mean-safe-why-security-teams-need-to-test-after-they-fix ThreatVectr en 2026-08-06T12:33:00.585Z Patched Doesn't Mean Safe: Why Security Teams Need to Test After They Fix https://threatvectr.com/story/metas-ai-broke-into-external-systems-during-a-security-test-gone-wrong ThreatVectr en 2026-08-06T10:14:00.132Z Meta's AI Broke Into External Systems During a Security Test Gone Wrong https://threatvectr.com/story/researchers-find-ai-agents-at-aws-google-and-vercel-can-be-tricked-into-running- ThreatVectr en 2026-08-06T09:56:00.476Z Researchers Find AI Agents at AWS, Google and Vercel Can Be Tricked Into Running Tools Without the AI https://threatvectr.com/story/ai-agents-are-breaking-into-your-own-systems-with-your-permission ThreatVectr en 2026-08-06T09:21:00.381Z AI Agents Are Breaking Into Your Own Systems, With Your Permission https://threatvectr.com/story/criminals-are-using-ai-like-a-work-tool-researchers-have-the-receipts ThreatVectr en 2026-08-06T08:48:00.639Z Criminals Are Using AI Like a Work Tool. Researchers Have the Receipts. https://threatvectr.com/story/twenty-chinese-router-models-ship-from-the-factory-with-a-hidden-backdoor ThreatVectr en 2026-08-06T08:40:01.022Z Twenty Chinese Router Models Ship From The Factory With A Hidden Backdoor https://threatvectr.com/story/cisco-patches-24-flaws-including-a-perfect-score-bug-that-hands-attackers-full-c ThreatVectr en 2026-08-06T07:45:00.587Z Cisco Patches 24 Flaws, Including a Perfect-Score Bug That Hands Attackers Full Control https://threatvectr.com/story/hackers-are-actively-exploiting-a-critical-flaw-in-jetbrains-teamcity ThreatVectr en 2026-08-06T06:59:00.938Z Hackers Are Actively Exploiting a Critical Flaw in JetBrains TeamCity https://threatvectr.com/story/ai-browsers-can-be-hijacked-by-hidden-instructions-in-emails-and-web-pages-resea ThreatVectr en 2026-08-06T02:57:00.591Z AI Browsers Can Be Hijacked by Hidden Instructions in Emails and Web Pages, Researchers Warn https://threatvectr.com/story/ransomware-group-orion-claims-attack-on-morris-group-international ThreatVectr en 2026-08-06T01:03:00.647Z Ransomware group Orion claims attack on Morris Group International https://threatvectr.com/story/kmarts-dollar89-camera-glasses-sold-out-across-australia-privacy-experts-are-ala ThreatVectr en 2026-08-06T00:24:00.692Z Kmart's $89 Camera Glasses Sold Out Across Australia. Privacy Experts Are Alarmed. https://threatvectr.com/story/ai-browsers-can-be-tricked-into-stealing-your-data-and-nobody-has-a-fix-yet ThreatVectr en 2026-08-05T23:55:00.351Z AI Browsers Can Be Tricked Into Stealing Your Data, and Nobody Has a Fix Yet https://threatvectr.com/story/ransom-cartel-boss-gets-16-years-after-dollar67m-extortion-spree ThreatVectr en 2026-08-05T23:29:00.198Z Ransom Cartel Boss Gets 16 Years After $6.7M Extortion Spree https://threatvectr.com/story/why-modern-hackers-walk-in-through-the-front-door-of-your-website ThreatVectr en 2026-08-05T22:31:00.242Z Why Modern Hackers Walk In Through the Front Door of Your Website https://threatvectr.com/story/canadian-hacker-admits-to-snowflake-data-thefts-that-hit-165-companies-and-100-m ThreatVectr en 2026-08-05T22:16:00.961Z Canadian hacker admits to Snowflake data thefts that hit 165 companies and 100 million people https://threatvectr.com/story/fixing-one-hole-at-a-time-is-no-longer-enough-why-security-must-follow-the-full- ThreatVectr en 2026-08-05T22:03:00.846Z Fixing One Hole at a Time Is No Longer Enough: Why Security Must Follow the Full Attack Path https://threatvectr.com/story/your-emails-design-layer-can-steal-your-password-no-suspicious-attachment-requir ThreatVectr en 2026-08-05T20:45:00.221Z Your Email's Design Layer Can Steal Your Password. No Suspicious Attachment Required. https://threatvectr.com/story/15-flaws-in-tp-link-kit-put-automatic-network-setup-at-risk ThreatVectr en 2026-08-05T20:42:00.973Z 15 Flaws in TP-Link Kit Put Automatic Network Setup at Risk https://threatvectr.com/story/hackers-hid-their-attack-tools-inside-an-oracle-database-itself ThreatVectr en 2026-08-05T20:14:00.472Z Hackers hid their attack tools inside an Oracle database itself https://threatvectr.com/story/researchers-cracked-samsung-phones-wide-open-by-turning-bixby-against-its-own-de ThreatVectr en 2026-08-05T19:59:00.177Z Researchers Cracked Samsung Phones Wide Open by Turning Bixby Against Its Own Device https://threatvectr.com/story/fake-mac-downloads-hide-behind-250-domains-that-screen-visitors-first ThreatVectr en 2026-08-05T19:26:00.363Z Fake Mac Downloads Hide Behind 250+ Domains That Screen Visitors First https://threatvectr.com/story/openai-cuts-off-cambodia-based-scam-ring-running-frauds-through-chatgpt ThreatVectr en 2026-08-05T19:23:00.076Z OpenAI Cuts Off Cambodia-Based Scam Ring Running Frauds Through ChatGPT https://threatvectr.com/story/fake-coldcard-security-audit-emails-push-remote-access-tool-after-dollar88m-bitc ThreatVectr en 2026-08-05T18:09:00.674Z Fake COLDCARD 'Security Audit' Emails Push Remote Access Tool After $88M Bitcoin Theft https://threatvectr.com/story/paperclip-ai-agent-platform-carries-bugs-that-hand-attackers-the-keys-to-the-hos ThreatVectr en 2026-08-05T16:48:00.857Z Paperclip AI Agent Platform Carries Bugs That Hand Attackers the Keys to the Host https://threatvectr.com/story/cybercrime-forums-are-selling-cut-price-claude-access-and-the-sellers-are-readin ThreatVectr en 2026-08-05T16:39:00.077Z Cybercrime Forums Are Selling Cut-Price Claude Access, and the Sellers Are Reading Every Prompt https://threatvectr.com/story/cisa-gives-federal-agencies-three-days-to-patch-langflow-n-central-and-tomcat-fl ThreatVectr en 2026-08-05T16:17:00.265Z CISA gives federal agencies three days to patch Langflow, N-central and Tomcat flaws under active attack https://threatvectr.com/story/malicious-npm-packages-hide-attacker-servers-inside-empty-ethereum-transactions ThreatVectr en 2026-08-05T15:29:00.437Z Malicious npm Packages Hide Attacker Servers Inside Empty Ethereum Transactions https://threatvectr.com/story/veeam-console-bug-hands-over-agent-credentials-terraform-mcp-server-leaks-tokens ThreatVectr en 2026-08-05T15:21:00.833Z Veeam Console Bug Hands Over Agent Credentials; Terraform MCP Server Leaks Tokens Between Users https://threatvectr.com/story/googles-blogger-locks-hundreds-of-legitimate-sites-in-mass-false-positive-sweep ThreatVectr en 2026-08-05T15:06:00.770Z Google's Blogger locks hundreds of legitimate sites in mass false-positive sweep https://threatvectr.com/story/why-blocklists-cant-keep-up-with-ai-built-phishing-sites ThreatVectr en 2026-08-05T14:35:00.425Z Why Blocklists Can't Keep Up With AI-Built Phishing Sites https://threatvectr.com/story/cyber-operations-are-now-a-core-part-of-modern-war-says-crowdstrike-co-founder ThreatVectr en 2026-08-05T13:24:00.869Z Cyber Operations Are Now a Core Part of Modern War, Says CrowdStrike Co-Founder https://threatvectr.com/story/kali365-phishing-kit-turns-microsofts-own-login-page-against-us-firms ThreatVectr en 2026-08-05T12:49:00.029Z Kali365 Phishing Kit Turns Microsoft's Own Login Page Against US Firms https://threatvectr.com/story/linux-kernel-flaw-ovswrap-hands-local-users-root-on-around-800-builds ThreatVectr en 2026-08-05T12:48:00.940Z Linux Kernel Flaw 'OVSwrap' Hands Local Users Root on Around 800 Builds https://threatvectr.com/story/three-patched-flaws-in-paperclip-ai-platform-could-let-attackers-run-code-on-dev ThreatVectr en 2026-08-05T12:24:00.019Z Three Patched Flaws in Paperclip AI Platform Could Let Attackers Run Code on Developer Machines https://threatvectr.com/story/leaked-n8n-tokens-left-321-live-automation-servers-open-to-anyone-with-a-github- ThreatVectr en 2026-08-05T12:09:00.847Z Leaked n8n Tokens Left 321 Live Automation Servers Open to Anyone With a GitHub Search https://threatvectr.com/story/311000-peoples-medical-and-financial-records-stolen-from-brown-health-medical-gr ThreatVectr en 2026-08-05T12:05:00.562Z 311,000 People's Medical and Financial Records Stolen from Brown Health Medical Group in Massachusetts https://threatvectr.com/story/cybersecurity-groups-draft-safe-rules-for-sharing-ai-incident-data ThreatVectr en 2026-08-05T11:23:00.174Z Cybersecurity Groups Draft 'SAFE' Rules for Sharing AI Incident Data https://threatvectr.com/story/one-c2-kit-30-customers-two-governments-how-criminal-infrastructure-is-hiding-st ThreatVectr en 2026-08-05T10:26:00.366Z One C2 Kit, 30 Customers, Two Governments: How Criminal Infrastructure Is Hiding State Hackers https://threatvectr.com/story/the-ai-framework-you-choose-is-also-a-security-choice ThreatVectr en 2026-08-05T09:34:00.894Z The AI framework you choose is also a security choice https://threatvectr.com/story/cisa-adds-three-actively-exploited-bugs-to-its-must-patch-list ThreatVectr en 2026-08-05T09:01:01.015Z CISA Adds Three Actively Exploited Bugs to Its Must-Patch List https://threatvectr.com/story/angolas-biggest-mobile-network-hit-by-cyberattack-on-the-day-it-went-public ThreatVectr en 2026-08-05T08:49:00.942Z Angola's Biggest Mobile Network Hit by Cyberattack on the Day It Went Public https://threatvectr.com/story/the-essential-role-of-kill-switches-in-ai-systems ThreatVectr en 2026-08-05T08:45:00.677Z The Essential Role of Kill Switches in AI Systems https://threatvectr.com/story/ai-agents-are-going-rogue-and-security-teams-are-scrambling-to-keep-up ThreatVectr en 2026-08-05T08:02:00.275Z AI Agents Are Going Rogue, and Security Teams Are Scrambling to Keep Up https://threatvectr.com/story/trojanised-quickfox-vpn-installer-plants-stealth-backdoor-on-users-pcs ThreatVectr en 2026-08-05T07:18:00.562Z Trojanised QuickFox VPN installer plants stealth backdoor on users' PCs https://threatvectr.com/story/openais-software-went-rogue-and-hacked-hugging-face-ceo-says ThreatVectr en 2026-08-05T00:15:00.628Z OpenAI's Software 'Went Rogue' and Hacked Hugging Face, CEO Says https://threatvectr.com/story/xcsset-malware-returns-with-chrome-hijacker-and-fake-telegram-app-hitting-mac-de ThreatVectr en 2026-08-04T19:37:00.483Z XCSSET Malware Returns With Chrome Hijacker and Fake Telegram App, Hitting Mac Developers https://threatvectr.com/story/hackers-are-using-a-legitimate-remote-access-tool-to-spy-on-companies-and-your-a ThreatVectr en 2026-08-04T19:22:00.149Z Hackers Are Using a Legitimate Remote-Access Tool to Spy on Companies, and Your Antivirus Won't Notice https://threatvectr.com/story/77-fake-developer-tools-on-open-vsx-quietly-mapped-coders-machines-for-a-week ThreatVectr en 2026-08-04T19:11:00.183Z 77 fake developer tools on Open VSX quietly mapped coders' machines for a week