Weekly News - Anthropic’s Claude breached three companies during security tests

PoC exploit released for critical AD CS domain-takeover flaw - View in browser  Weekly cybersecurity news August 3, 2026 Latest articles: ShutterGap: Aryon Security finds 3.7M AWS cloud resources exposed beyond CSPM/CNAPP visibility Cybercrime goes subscription: AI, malware and infrastructure on demand Criminals used AI and children’s coding software to build a multimillion-dollar ad fraud empire Anthropic’s Claude breached three companies during security tests Aviation cyber risk sits on the ground, the blindness sits in the air Companies push AI, sysadmins keep it on a short leash AI agents are changing where cybersecurity seed funding lands New infosec products of the week: July 31, 2026 AI takes on a bigger role in finding Chrome vulnerabilities Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897) CISA sets a new SBOM baseline Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks Cisco FMC static credentials exploited by attackers (CVE-2026-20316) Coordinated cyberattack hits more than 30 Minnesota water utilities Data breach cost 2026 averaged $4.99 million, AI attacks ran higher 200 new CVEs a day and no realistic way to patch them all Top companies to visit at Black Hat USA 2026 Product showcase: Dashlane Password Manager is more security toolkit than password vault Exposed credentials are giving attackers a head start many organizations don’t see Tengu botnet reboots Linux devices to survive removal Cloudflare reveals what’s behind major internet outages Stolen Meta and Google ad accounts are worth more than the money they hold WhatsApp brings end-to-end encrypted voice and video calls to the web An AI agent can pass every safety check and still leak secrets The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced Specter: Open-source NFC reader bug sweep for Flipper Zero Your AI agents can reach data no one approved Android malware detection collapses when the context stage comes out Hugging Face breach reignites open-weights debate, raises liability questions Exposed BMCs hand out password hashes before login JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077) VERITAS project could change the way scientists secure AI AWS to retire Shield Advanced L7 automatic mitigation on January 1, 2027 Coca-Cola confirms hackers stole data in Fairlife ransomware attack Shadow AI incident response begins with logs that may already be gone AI took more than junior developer jobs and the bill comes later Download: The High-Performance Team Playbook Call of Duty Mobile scam uses fake free points giveaway to hijack players’ accounts Cybersecurity jobs available right now: July 28, 2026 Microsoft unveils MAI-Cyber-1-Flash, promises cybersecurity AI at half the cost Tech giants form alliance to put open AI in cyber defenders’ hands Google changes how it names cyber threat actors PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121) ChatGPT joins the most impersonated brands in phishing attacks AWS gives DevOps teams an AI investigator for firewall incidents Marathon Petroleum’s CISO on OT security automation, supply chain risk Nono: Open-source sandbox for AI agents Product showcase: LastPass Authenticator brings Face ID, Apple Watch, and cloud backup to 2FA GitHub delays version updates so malware gets caught first Claude Opus 5 sharpens coding and cybersecurity work on AWS Videos: Impersonation protection: How to protect your executives when the truth isn’t clear What the identity attack surface looks like when trust becomes the target Industry news: Traefik Labs introduces Distro Zero secure runtime for API and AI gateways Horizon3.ai expands NodeZero with automated web application attack path testing AttackIQ targets CTEM execution with AVA Agentic OS Resecurity expands threat intelligence integration ecosystem with IBM QRadar Jscrambler launches Unified Client-Side Security Platform Novee brings continuous AI pentesting to mobile apps Orca Security secures AI-built and developer-created applications Dropzone AI turns threat hunting into a routine SOC operation PortSwigger introduces Burp AT for agentic AI security testing Stairwell launches Backstory, pioneering agentic investigation for malware blast radius MIND AI DLP Agents automate DLP classification, investigations and remediation Contrast CVE Shield aims to protect applications while security teams deploy patches Accuris uses AI to improve BOM decisions and supply chain resilience FortiGate 1200G brings FortiSASE Outpost to customer-controlled environments 1Password targets standing privileges with new access management capabilities Torq makes AI SOC investigations continuously self-learning Root Evidence puts real-world evidence at the center of vulnerability prioritization Abnormal AI extends behavioral security to identities, AI systems, and insider threats Mend.io enhances application security with AI runtime protection and faster zero-day response Realm Security adds Detection Integrity and Data Haven Search to cut SIEM costs Tines introduces AI-native platform for secure enterprise workflow automation ZeroFox unveils HNTR and Executive Protection for AI-driven threat detection Reco enhances AI Runtime with browser-based AI security and automated remediation Infoblox enters EASM market with attack surface and supply chain risk tools BlackCloak extends deepfake protection to the executive’s trusted circle Bugcrowd introduces Savant Pathseeker for agentic penetration testing with exploit validation Prescient Security adds attack surface management to Cait, broadens AI-assisted pentesting Cyberhaven launches Flow to secure data across human and AI workflows Intel 471 expands Verity471 with AI agent and MCP support for threat intelligence SpecterOps brings AWS attack path management and AI to hybrid identity security Team Cymru unveils Pure Signal Command for AI-powered threat intelligence and incident response Grafana Assistant expands with AI agents for investigations, automation, and observability Dynatrace Intelligence automates incident triage and remediation with AI agents Zenity advances AI governance with Runtime Boundaries JetStream Security enables on-demand shutdown of compromised AI agents 7AI expands platform with Federated SIEM and AI workflow builder C1 adds shadow AI discovery to its identity governance platform Booz Allen expands Vellox Suite with AI-driven threat detection platform Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive