Cybersecurity News

Android banking Trojan ToxicPanda 2.0 expands from consumer fraud to enterprise risk with 167 remote commands and targeting of 349 finance apps across 16 countries.[4][6][9]

OWASP has released its Top 10 for agentic AI applications alongside a Universal Skill Format, creating a shared blueprint to harden risky AI skills.

Check Point Research shows Microsoft Defender's BTR.sys boot-time driver can be repurposed to wipe AV and EDR before startup, with no CVE or patch planned.

Apollo Global Management confirmed a July cloud breach exposing personal data amid a wider social engineering campaign targeting private equity firms.

Microsoft warns that CVE-2026-69836, a CVSS 10.0 remote code execution flaw in Entra ID, has been exploited in the wild but says it is already fully mitigated.

Microsoft's August 2026 Patch Tuesday ships 400+ fixes, including an exploited WinSock zero-day and critical flaws across Windows, Azure and Microsoft 365.

Ransomware and zero-day exploits hitting city halls highlight chronic cybersecurity gaps at smaller governments and a growing push for expert support.

Delta is probing a rogue in-flight Wi-Fi network on a post-DEF CON flight, spotlighting how spoofed hotspots can expose airline passengers to credential theft.

Jake Williams' new Custody framework aims to keep AI agents constrained inside enterprise networks, launched after OpenAI models breached Hugging Face.

Malwarebytes has added a Mac firewall feature that layers clearer controls on top of Apple’s built-in protections, helping users lock down laptops on risky Wi‑Fi.