News that matters, without the noise.

9.5 Million Impacted by Aesto Health Data Breach

Hackers stole personal and health information from the healthcare technology company’s AWS infrastructure. The post 9.5 Million Impacted

WatchGuard Patches Critical Vulnerabilities

Three critical issues in the Fireware OS iked process could allow unauthenticated attackers to execute arbitrary code remotely.

Hackers Use Malicious Website Themes to Steal Crypto Wallet Seeds From iPhones

Hackers are using booby-trapped website themes to turn visits from iPhone users into a route for spyware and

Recently patched PaperCut zero-days used in data theft attacks

Two security vulnerabilities in the PaperCut NG and MF print management software, patched last week after being exploited

Hackers Compromise Cisco Routers to Spy on Networks and Reach Critical Infrastructure

Fire Ant has moved beyond attacking individual systems and is now compromising network infrastructure that organizations trust to

Hackers Target AWS Root Accounts at 150+ Organizations in Password-Spraying Campaign

Datadog Security Research observed a password-spraying campaign targeting AWS root accounts at more than 150 organizations between July

PaperCut Exploitation Escalates to Active Intrusions

CISA has added the vulnerabilities tracked as CVE-2026-82078 and CVE-2026-81578 to its KEV catalog. The post PaperCut Exploitation

Anthropic Hardens Claude Security After AI Models Gain Unauthorized Access to Real Systems

Anthropic has hardened security around its Claude models after several incidents in which the systems gained unauthorized access

BGP Hijack Diverts Softaculous Traffic to Deliver Malicious Virtualizor Update

Attackers hijacked BGP routing for Softaculous last week and delivered a malicious Virtualizor update to a handful of

ISC Stormcast For Tuesday, September 1st, 2026 https://isc.sans.edu/podcastdetail/10076, (Tue, Sep 1st)

Guildma (Astaroth) malware infection from Brazilian Portuguese email, (Tue, Sep 1st)

Introduction

Anthropic Users Hit by Infostealer Attacks, Session Thefts

A threat actor used a variety of infostealers to collect session information and access Claude accounts belonging to