News that matters, without the noise.

Simple Scans for Cloud Metadata Service, (Wed, Aug 19th)

Cloud providers typically expose a REST API at 169.254.169.254 that allows code running on virtual machines to retrieve

Hackers Use AI Voice Calls and Fake Banking Pages to Bypass MFA and Steal Accounts

Hackers are pairing AI-generated phone calls with fake banking pages to take over customer accounts, even when multi-factor

Hundreds of Leaked Stripe Merchant Keys Expose Payment and Payout Capabilities

Hundreds of leaked Stripe merchant keys have exposed a serious risk for online businesses and their customers. The

The SANS Threat Analysis Rundown – August 2026

Why AI Is Moving Off the Cloud

Latvian officials resign after cyberattack exposes data on 1.2 million people

Latvia’s road traffic agency confirmed that hackers stole data connected to about two-thirds of the country’s population in

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Cybersecurity researchers at Hunt.io have disclosed details of a campaign that they say compromised more than 14,530 Dahua

Phishing 3.0: The Fight Moves to Agent Versus Agent

Most email defenses still do the job they did a decade ago. Scan the message, look for something

USN-8649-1: libheif vulnerabilities

It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was

USN-8563-3: nginx vulnerability

USN-8563-1 fixed vulnerabilities in nginx. The fix for CVE-2026-42533 was backed out in USN-8563-2 because it could cause

USN-8648-1: Bind vulnerabilities

It was discovered that Bind incorrectly accepted NSEC3 records whose signer name did not match the owning zone.