Cybersecurity Articles
454/69 Friday, August 21, 2026 CareCloud, a U.S.-based healthcare information technology provider that manages electronic health record systems and medical data management services, has disclosed a data breach affecting more than 3.7 million patients. The incident is particularly significant because the company’s systems store personal information and may include sensitive health data. The exposure could […]
453/69 Thursday, August 20, 2026 CISA disclosed that CVE-2025-60710, a vulnerability in Host Process for Windows Tasks, has been exploited in attacks by ransomware groups. CISA previously added the vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog in April 2026 after confirming evidence of active exploitation. The flaw is a Windows privilege escalation vulnerability, and […]
452/69 Thursday, August 20, 2026 GitLab has released patches to fix a Critical vulnerability, CVE-2026-19478, with a CVSS score of 9.4. The vulnerability could allow unauthenticated attackers to modify or delete public projects and user data through GraphQL directives under certain conditions. The flaw affects only self-managed installations. GitLab recommends that administrators update to versions […]
451/69 Thursday, August 20, 2026 Cybersecurity experts have identified a shift in ransomware-related threats, with the emergence of a group calling itself Ransom Busters. The group sends emails to organizations that have already fallen victim to ransomware attacks, claiming that it can breach the attackers’ servers and help delete the stolen data in exchange for […]
450/69 Wednesday, August 19, 2026 Security researchers have disclosed a Critical vulnerability, CVE-2026-15748, in the Forminator Forms plugin for WordPress, which is installed on more than 600,000 websites. The vulnerability has a CVSS severity score of 9.8 and could allow unauthenticated attackers to upload malicious files, including PHP files, to affected websites, potentially leading to […]
449/69 Wednesday, August 19, 2026 SafePal, a cryptocurrency security company, disclosed a data breach affecting approximately 39,798 customers after attackers exploited an authorization vulnerability in the order-tracking function of a plugin related to customer order data. The vulnerability allowed unauthorized individuals to access other customers’ order information. The incident affected customers who placed orders between […]
448/69 Wednesday, August 19, 2026 Researchers from Anthropic identified unexpected behavior during AI testing when three groups of Claude model agents, each assigned different operational goals, came into conflict and began attacking one another to compete for workspace on the system. The incident serves as a clear case study showing that if AI agent systems […]
447/69 Tuesday, August 18, 2026 Security researchers have disclosed a cyber espionage campaign using a backdoor malware named PATCHCORD, targeting telecommunications providers in Afghanistan and critical infrastructure organizations in South Asia. The attackers used fake VPN installers and telecommunications management tools disguised to appear as software used by the target organizations, tricking users into installing […]
446/69 Tuesday, August 18, 2026 Threema, a paid secure messaging provider from Switzerland that focuses on privacy and security, disclosed that its services were affected by multiple large-scale Distributed Denial of Service (DDoS) attacks, resulting in communication issues and service disruptions. However, organizations using Threema On-Prem were not affected because that system runs on the […]
445/69 Tuesday, August 18, 2026 Preliminary reports indicate that a threat actor using the name TheHatman has advertised for sale data allegedly stolen from the Azure environments of several leading Fortune 500 organizations. The potentially affected organizations include global brands such as McDonald’s, Tata Consultancy Services (TCS), Vodafone, HCL Technologies, and InterContinental Hotels Group (IHG). […]
