Ohio Man Gets 15 Years for AI Sextortion and Cyberstalking
James Strahler II was sentenced to 15 years for cyberstalking, AI-generated sextortion, and child sexual abuse material. He is the first person convicted under
Guides
Microsoft Teams and Outlook Fail to Launch on ARM Windows PCs
Microsoft is fixing a bug causing Teams and new Outlook to crash on ARM devices after August 2026 Patch Tuesday updates. A temporary workaround is available.
Two Alleged TeamPCP Hackers Arrested in Australia
Australian Federal Police arrested two Western Australia men linked to TeamPCP, a cybercrime group behind a sweeping software supply chain attack campaign.
ToxicPanda 2.0 and GoldDigger Expand Android Banking Malware Campaigns
ToxicPanda 2.0 adds 167 remote commands and targets 349 financial institutions. GoldDigger expands to South Africa and the U.K. via fake airline and retail apps
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges for Self-Managed Users
A critical GitLab flaw rated CVSS 9.4 requires no authentication to exploit. Self-managed users should patch immediately or restrict GraphQL access.
LLMs and Contextual Integrity: Two Research Papers
Two new papers examine how LLMs fail to control sensitive information flow based on context, and how reasoning and reinforcement learning may help.
AmnesiaStealer macOS Malware Hijacks Browser Sessions via Remote Control
AmnesiaStealer is a new macOS infostealer distributed via ClickFix attacks. It clones browser profiles and gives attackers live, interactive control of authenti
Delta Investigates Wi-Fi Deauth Attack on DEF CON Flight
Delta Air Lines is investigating an unauthorized Wi-Fi network and deauthentication attack on a Las Vegas-to-Atlanta flight carrying DEF CON attendees.
N-able Releases Second N-Central Hotfix as Attacks Escalate
N-able issued a mandatory second hotfix for CVE-2026-18577 after threat actors evolved attack techniques to reach managed endpoints via Cloudflare Tunnels.
SMOKE#SCREEN Campaign Abuses ScreenConnect RMM via Fake Software Updates
A multi-wave campaign uses fake Adobe and Zoom update lures to deploy ConnectWise ScreenConnect. A separate campaign distributes the Powercat Java stealer via f
Rails Patches Critical CVE-2026-66066 Active Storage Flaw With RCE Potential
A critical flaw in Rails' Active Storage framework allows unauthenticated file reads and potential RCE. Patch immediately and rotate all secrets.
Microsoft Patches Record 570 Security Flaws in July Patch Tuesday
Microsoft fixed 570 vulnerabilities in July's Patch Tuesday, nearly triple last month's record. AI-assisted discovery is driving the surge in patch volume.