Weekly News - A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months

153GB of stolen credentials surface after LiteLLM supply chain attack - View in browser  Weekly cybersecurity news August 17, 2026 Exposure is common. Continuous defense isn't. 73% of organizations found workforce credentials exposed in the past year, yet only 19% continuously monitor and automatically remediate. Download the 2026 Credential Risk Report. Latest articles: New Android malware relays bank cards to fraudsters while victims still hold them OpenAI’s GPT-5.6 Sol runs up to 14× faster with Ultrafast mode AWS Certificate Manager sets 2027 end date for email-validated certificate renewals Ukrainian police raid 94 fraudulent call centers, seize $2 million The hardest part of agentic AI may be rebuilding the business Weak IAM affects up to 98% of cloud environments 17 draft Cyber Resilience Act standards are open for comment New infosec products of the week: August 14, 2026 White House authorizes private US companies to hack foreign criminal networks Attackers exploit critical SharePoint flaw after PoC goes public (CVE-2026-55040) 153GB of stolen credentials surface after LiteLLM supply chain attack Cisco fixes vulnerability exploited to DoS its firewalls (CVE-2026-20349) DDoS attacks hit record scale as 1 Tbps+ campaigns become more common Product showcase: Is this image real? Slop or Not investigates Wireshark 4.6.8 patches 28 security bugs, nine in file parsers A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months Signal’s new security feature checks if your encrypted chats were tampered with Lazarus hackers pair fake job offers with Windows zero-day exploit Microsoft patches 400+ vulnerabilities, one zero-day under attack (CVE-2026-68820) Chrome’s anti-abuse protections block 7 billion unwanted Android notifications daily Split-second deepfake glitch blows digital certificate fraudster’s cover Post-quantum migration gets harder when every user holds a key PentestGPT: Open-source automated penetration testing agentic framework 338 million attack simulations reveal the state of enterprise defense Ready-made $500 kit puts a crypto scam within anyone’s reach AI deployments are stretching enterprise security to its limits Malicious SIMs can hijack smartphones, steal files, and lock them onto 2G Ransomware gangs don’t need control system access to disrupt industrial production Locking your ssh-agent exposed local-only keys until OpenSSH 10.5 GPT-5.6-Cyber refuses security researchers’ requests far less often Who will be the Stanislav Petrov in your organization? An AI tool found 84 flaws in 5G network software and 23 of them still have no fix Previously unseen entry vector used to breach Polish energy plant Your security vendor gets the frontier cyber model, you get the findings Cybersecurity jobs available right now: August 11, 2026 Cyberattack on Steam hardware shipper leaks names, addresses, and order data Metabase zero-day exploited to access Framework customer data Microsoft Entra ID is removing an extra MFA hurdle for Windows Hello and macOS PSSO users N-able ships second N-central hotfix as attackers keep exploiting CVE-2026-18577 Anthropic to put AI in charge of reviewing Claude Code actions by default OpenAI locks down Astra over potential critical cyber capabilities GitHub Dependabot malware alerts now cover eight ecosystems Chainloop: Open-source evidence store and policy engine for the software supply chain Product showcase: Enpass Password Manager breaks away from the proprietary cloud model 71% of CISOs spend 10+ hours on board reports How to report an AI Act violation in the EU Video: Four corporate investigation mistakes organizations make under pressure Industry news: DataGrout helps enterprises control AI usage, governance and LLM costs A10 Networks introduces AI Gateway to secure and manage enterprise AI Searchlight Cyber combines exposure and threat intelligence in new PTEM platform ScienceLogic delivers secure AI deployment and smarter IT operations with Skylar AI 2.5 Deloitte strengthens AI governance to support trusted enterprise adoption ConnectSecure helps MSPs automate Microsoft 365 security remediation CBTS brings continuous penetration testing to enterprise security Crytica’s RDAi detects OT device tampering from within Arctera enhances Unified Platform for evidence-driven compliance workflows Citrix expands Platform Flex with observability and secure developer services Copyright © 2026 Help Net Security, All rights reserved. You are receiving Help Net Security daily security news because you opted in at our web site located on www.helpnetsecurity.com. Our mailing address is: Help Net Security Astus d.o.o. Kastav 51215 Croatia Add us to your address book No longer interested in receiving these emails? Unsubscribe Missed an issue? Access our past newsletters here: Archive