Latest security news

Wed, 12 Aug 2026

1. 23:12
   Smashing Security podcast #480: This is the AI service you should never sign up to

   Would you like access to Anthropic's Claude at 90% off the normal price? All you have to do is redirect your traffic to a mysterious service called "Poison Claude". Only problem is that it's run by fraudsters... Meanwhile, a phishing-as-a-service platform called "Greatness" has come up with something rather nasty: a phishing attack that doesn't need a fake website, a suspicious URL, or your password. Just a real Microsoft login page and a moment of misplaced trust - and the attackers walk off with full access to your emails, your files, and your entire organisation. All this and more in episode 480 of the "Smashing Security" podcast with cybersecurity expert and keynote speaker Graham Cluley, and special guest Lianne Potter.

   Graham Cluley·Microsoft
2. 20:34
   Which countries have the best cyber security? Albania tops the global list

   Hacker News
3. 17:41
   Lazarus hackers exploited Windows zero-day to target defense firms

   Hacker News·Windows
4. 15:02
   From AKS node root vulnerability to Microsoft Copilot hijack

   Hacker News·Microsoft
5. 14:30
   WindRelay Malware Pairs With SpyNote RAT in Live-Call Scam

   New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call

   Infosecurity Magazine
6. 14:02
   Someone is running mass vulnerability scans, spoofing AI bots like ClaudeBot

   Hacker News
7. 13:35
   Lazarus Used Post-Quantum Key Exchange to Deliver Zero-Day

   Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit

   Infosecurity Magazine·Windows, Exchange
8. 13:28
   Black Hat USA 2026: AI is racing ahead of cybersecurity controls

   AI took center stage, but the clearest lesson was less about what AI can do than about who is accountable when something goes wrong

   WeLiveSecurity
9. 13:15
   Gunra Ransomware Exploits Fortinet Flaws to Target Critical Infrastructure

   Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned

   Infosecurity Magazine·Microsoft, Fortinet
10. 13:00
    AI is Working in the SOC. So Why are Security Executives More Worried Than Ever?

    Something shifted in security operations over the last two years: AI stopped being a pilot program and became the plan. And if you survey 500 security professionals on whether that's going well – as Omdia did, commissioned by Rapid7 – you get a remarkable level of consensus: 97% report positive outcomes, 98% say AI reduces alert fatigue, and 95% say it's helping address staffing shortages. Those numbers are high enough that the story could stop there; AI is working, everyone agrees. Move on. But there's a more interesting finding sitting underneath that consensus, and it tells you something important about where security operations is actually headed. The confidence gap nobody is talking about While frontline SOC teams report strong confidence in AI, executive security leaders like CISOs, CSOs, and VPs are taking a considerably harder look. The research found that executive leaders are 1.6 times more likely than operational security managers to be highly concerned about how AI vendors handle their organization's security data. This isn't a contradiction of the 97% positive sentiment, but rather a maturity signal. When AI was experimental, the question was: does it work? Operational

    Rapid7 Blog