The Edge of the Cyber World See the latest
A critical flaw in JFrog Artifactory, the software registry that sits at the center of build pipelines for thousands of enterprises, is now being actively exploited in the wild. Tracked as CVE-2026-82329 and rated 9.8 out of 10 on the CVSS scale, the bug lets an unauthenticated attacker with nothing more than network access mint…
Threat actors exploited commodity in ownCloud to gain initial access, resulting in stolen reactor databases, personnel records, and credential stores.
An autonomous AI agent swarm broke into 21 Taiwanese government systems, cracked 85 user accounts and pulled 2,500 personnel records over four days in July 2026, without a human operator directing the attack step by step. Taiwan’s Ministry of Digital Affairs confirmed the intrusion on August 13, 2026, and researchers at the Israeli AI security…
More than 100 technology, cybersecurity and financial companies warned this week that AI-enabled cyberattacks could turn far more widespread as increasingly capable models make sophisticated hacking cheaper and faster to run, according to The420.in. The warning lands as Israel, a country that treats its banks, hospitals, telecom networks, electricity grid and water supply as inseparable…
A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used…
The ongoing social engineering threat, which dates back to late 2025, tricks victims into granting threat actors long-term access to their accounts. The post FBI raises alarm over deceptive phishing campaign targeting prominent people appeared first on CyberScoop.
In one attack, threat actors stole an API key that ultimately led to the consumption of $600,000 in public AI model credits for the security nonprofit.
Berlin’s state government waited seven days before disconnecting compromised departments from its central network after first detecting suspicious data movement, a delay that gave the Rhysida ransomware gang enough time to pull an estimated 5.79 terabytes of files out of critical infrastructure systems, according to reporting from Tech Times and The Hacker News. The gap,…
Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet (formerly UNC5669) since 2024. Google Threat Intelligence Group (GTIG) and Mandiant teams described the threat actor as “specializing in manipulating payment systems and banking software in Brazil to conduct fraudulent transfers.” The adversary
Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watchTowr. The vulnerability in question is CVE-2026-82329 (CVSS score: 9.8), a case of authentication bypass that could lead to administrative access in Artifactory. “JFrog Artifactory contains an authentication weakness that, under default
