Weekly News - Critical Cisco IMC bug gives attackers root, PoC is out

August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse? - View in browser  Weekly cybersecurity news August 10, 2026 Latest articles: 200 accounts compromised in Swiss government’s Microsoft SharePoint breach OpenAI drops ChatGPT text chat limits for free users, adds new safeguards for teens August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse? What the first year of EU AI Act transparency enforcement could look like US fuel gauge exposure fell by more than half in three months ShieldFont fights AI scraping by handing crawlers the wrong words Gut feeling does nothing against AI spear phishing texts Photos: Black Hat USA 2026, part two Novel-reading apps used users’ phones to generate fake ad traffic Photos: Black Hat USA 2026 Three in four AI-generated vulnerability patches leave something broken Snowflake hacker pleads guilty, faces up to 32 years in prison Discounted Claude access bought on the gray market may expose every prompt you send Critical Cisco IMC bug gives attackers root, PoC is out (CVE-2026-20200) Microsoft extends zero trust deeper into enterprise AI Photos: Black Hat USA 2026 Arsenal OWASP 2026 LLM Top 10: “The model will be fooled” Browser security is where software, data, and AI meet Suppliers, logins, and AI tools are all becoming attack paths Non-human identities are 91% of everything active in production Cloudflare OS goes open source with a record of everything its agents read Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers Top product launches at Black Hat USA 2026 INTERPOL flags AI as the new engine of African cybercrime AI agent deception moves from theory to reality in UK cyber tests Code review used to be the only way to catch these bugs 15 TP-Link Omada vulnerabilities let attackers hijack routers and intercept camera traffic Bank of America impersonators weaponize ScreenConnect, then make it hard to remove Cloudflare gives AI agents wallets with built-in spending controls Future AGI: Open-source platform for shipping self-improving AI agents Product showcase: Material unifies Google Workspace email, file & OAuth defense What stops attackers wrecking industrial plants is knowing how Your enterprise AI footprint is about three times bigger than your model list AI developers targeted via trojanized GitHub repositories Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware Uptime Kuma 2.5.0 waits two weeks before trusting a new npm package Microsoft shortens NuGet API key lifetime to improve supply chain security EU begins enforcing AI Act, putting AI models under the microscope Digital executive protection is a strategic imperative for CEOs OWASP’s subtractive security project measures the attack paths you erased Analysts got 19 minutes back every hour in Stellar Cyber’s agentic auto triage trials Fake IRS letters direct crypto holders to bogus compliance portal Cybersecurity jobs available right now: August 4, 2026 Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577) Chinese hacker used DeepSeek to launch autonomous cyberattacks on vulnerable servers CISA lays out new guidance for using open-source software KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066) Qodana 2026.2 adds post-quantum crypto checks for JVM code OpenAI reveals how criminals used ChatGPT to run scams Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support Mapping the malware blast radius a single alert won’t show you SkillSpector: NVIDIA’s open-source security scanner for AI agent skills Product showcase: Guardio Mobile Security turns breach alerts into a recovery plan Buying TikTok followers can expose users to scams and account theft Video: AI cut phishing from hours to seconds, which is where DMARC and BIMI come in Industry news: Keepit AI Truth Cloud protects the data behind enterprise AI Stellar Cyber’s Auto-Triage AI matches human analysts 99.7% of the time Tenable broadens AI visibility across major LLMs and AI tools ArmorCode enhances attack path analysis with new AI agents and Context Risk Graph Tuskira expands exposure management with Agentic Control Plane Lumu launches live threat intelligence platform for real-time cyber defence Sevii APS Module preempts attacks with autonomous cyber defens ServiceNow organizes autonomous security around six solution areas Snyk unveils continuous AI pentesting and agent red teaming RapidFort Runtime brings continuous CVE monitoring and tamper detection Indusface SwyftComply AI enables autonomous virtual patching for AI-discovered flaws ESET introduces new AI capabilities for autonomous agent security Joinable Labs unveils Joinable Security for threat intelligence and AI-driven response Securonix enhances Unified Defense SIEM with AI agent detection and lower data costs Legit Security VibeGuard 2.0 brings endpoint security and real-time guardrails to AI coding agents Tanium expands autonomous security across AI, exposure management and SecOps Mimecast introduces AI agent governance and managed threat response SentinelOne expands security operations automation with governed AI Horizon3.ai hits $2 billion valuation in $250 million funding round Simbian adds AI threat hunting agent to expand autonomous SecOps platform Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive