🛡Cybersecurity | Privacy | News 🛡

New Evooo1Bot Linux botnet turns routers into traffic relay nodes A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning them into SOCKS5 traffic relay nodes. Bill Toulas | bleepingcomputer​.com • Aug 15, 2026

SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch SAP Commerce Cloud CVE-2026-58231 sees exploitation attempts three days after the patch; the CVSS 10.0 flaw could allow arbitrary code execution. The Hacker News | thehackernews​.com • Aug 15, 2026

Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner Apple's CVE-2026-65400 Screen Sharing flaw is under active exploitation on internet-exposed Macs to install a Monero miner. The Hacker News | thehackernews​.com • Aug 15, 2026

How Anthropic plans to watermark Claude's AI-generated text It could soon become easier to identify AI-generated content, even if it's not the usual "It's Not X, it's Y" type of post you'd come across on LinkedIn and other socials. Mayank Parmar | bleepingcomputer​.com • Aug 14, 2026

Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware About 65,000 dropcatch domains are re-registered daily in H1 2026; threat actors exploit some for inherited traffic, reputation, scams, and malware. The Hacker News | thehackernews​.com • Aug 14, 2026

Hackers arrested over €30M bank fraud exploiting service provider flaw Four cybercriminals were arrested in Brazil, and three others were charged in Europe over allegations that they exploited a vulnerability at a service provider, allowing them to withdraw funds from Commerzbank customers' bank accounts. Bill Toulas | bleepingcomputer​.com • Aug 14, 2026

IAM Compliance Requirements and Best Practices IAM compliance works only when organizations verify access controls across applications and infrastructure, not just document policy. The Hacker News | thehackernews​.com • Aug 14, 2026

Hackers exploit macOS Screen Sharing flaw to deploy Monero miner The Netherlands' National Cyber Security Centre (NCSC) is warning that hackers are actively exploiting a macOS authentication bypass vulnerability after public exploit code emerged. Bill Toulas | bleepingcomputer​.com • Aug 14, 2026

The Modern Attack Chain: Rethinking Google Workspace Security in the Age of AI Google Workspace attacks do not always begin with phishing. Stolen OAuth tokens can provide another path into Gmail, Drive, and connected systems. Material Security explains why organizations need defenses that cover the entire Workspace attack chain. @​BleepinComputer | bleepingcomputer​.com • Aug 14, 2026

Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth HoneyMyte deploys an updated CoolClient backdoor with a signed Windows rootkit that hides malicious processes, files, registry objects, and C2 data. The Hacker News | thehackernews​.com • Aug 14, 2026

Shell investigates 'potential incident' after Clop data theft claims Oil giant Shell has confirmed it is investigating a potential security incident after the Clop ransomware gang claimed it stole 89GB of data. Sergiu Gatlan | bleepingcomputer​.com • Aug 14, 2026

Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers SpecterOps details a Windows technique that enables CDP inside live Chrome or Edge processes to access authenticated browser sessions. The Hacker News | thehackernews​.com • Aug 14, 2026

Trump Memo Paves Way for U.S. Firms to Hack and Disrupt Foreign Crime Groups Trump memo directs NCC to let vetted U.S. firms conduct approved cyber surveillance and disruption operations against foreign TCOs. The Hacker News | thehackernews​.com • Aug 14, 2026

Data analyst sent to prison for stealing data, extorting employer A former data analyst contractor for Brightly Software has been sentenced to two years in prison for targeting his employer in a $2.5 million extortion scheme. Sergiu Gatlan | bleepingcomputer​.com • Aug 14, 2026

China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud China-linked Jewelbug uses XG-Web for espionage and crypto fraud, stealing over 580,000 browser cookies and thousands of credentials The Hacker News | thehackernews​.com • Aug 14, 2026

Apple sends new ‘Threat Notification’ alerts over mercenary spyware attacks You're not alone if you just received an "Apple Threat Notification" saying it detected a "mercenary spyware attack targeted at your iPhone." Mayank Parmar | bleepingcomputer​.com • Aug 14, 2026

Ukraine shuts down 94 fraudulent call centers, seize millions in cash Authorities in Ukraine shut down 94 fraudulent call centers across the country that lured people into investment scams or tried to obtain access to bank accounts. Bill Toulas | bleepingcomputer​.com • Aug 13, 2026

Akira hackers disable EDR with Safe Mode, steal data but fail to encrypt An Akira ransomware affiliate disabled the endpoint detection and response (EDR) solution on a compromised system by restarting the machine into Safe Mode with Networking. Bill Toulas | bleepingcomputer​.com • Aug 13, 2026

Unpatched GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE Unpatched GeoServer zero-day SQL injection is seeing active exploitation attempts hours after disclosure and can lead to remote code execution. The Hacker News | thehackernews​.com • Aug 13, 2026

Hackers breach govt webmail while running parallel crypto fraud The Jewelbug hacker group has been carrying out espionage operations targeting governments and militaries while also engaging in cryptocurrency fraud. Bill Toulas | bleepingcomputer​.com • Aug 13, 2026