left cover bg
circles

Security Daily.

Thursday, August 13, 2026

Automatically Curated Security Digest

Collected

11 Articles

Across

1 Trusted Sources

Published

Last Updated 7:51 AM UTC

Coverage

BleepingComputer
Top Story

"City-Forum" data-theft attacks target Salesforce, ServiceNow portals

BleepingComputerCritical

Why it matters

An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals. [...

Read Original

11

Articles

1

Sources

2

CVEs

0

Alerts

0

Research

3m

Read Time

Feed Status

CISA4
NIST NVD
BleepingComputer15
PortSwigger Research

Automated Security Digest — This page is an automatically curated cybersecurity digest generated from publicly available security feeds. All articles remain the property of their respective publishers. Click any item to read the original article.

Last generated: Aug 13, 2026, 7:51 AM

Jump to Section

Cybersecurity News

11

Latest news from trusted cybersecurity publications.

BleepingComputerCybersecurity NewsCritical

"City-Forum" data-theft attacks target Salesforce, ServiceNow portals

An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer portals. [...]

Read Original
BleepingComputerCybersecurity News

Android malware combo takes out loans and relays victims' credit cards

A new Android NFC relay malware called WindRelay is being used alongside the SpyNote remote administration tool (RAT) to steal live card data and send it to attackers in real time. [...]

Read Original
BleepingComputerCybersecurity NewsCritical

Hackers exploit critical Adobe Commerce flaw to hijack customer accounts

Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe's Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts. [...]

CVE-2026-71362
Read Original
BleepingComputerCybersecurity News

Hundreds of fake Chrome VPN extensions route traffic through a proxy

More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users' traffic through SOCKS5 proxies operated by a single provider. [...]

Read Original
BleepingComputerCybersecurity News

Plug and Pwn attack uses fake USB devices for Windows SYSTEM access

Security researchers have disclosed new "Plug and Pwn" attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM privileges. [...]

Read Original
BleepingComputerCybersecurity NewsCritical

Lazarus hackers exploited Windows zero-day to target defense firms

North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign. [...]

CVE-2026-68820
Read Original
BleepingComputerCybersecurity News

FBI: Hackers target online accounts to steal nude photos

The FBI warns that cybercriminals are targeting adults' and children's social media and other online accounts to steal sexually explicit images or videos. [...]

Read Original
BleepingComputerCybersecurity News

The Threat Hiding in Your Hiring Process: How Fake Remote Workers Get In

Fake remote workers can exploit gaps between hiring checks, device delivery, and account access to enter organizations under false identities. Specops Software explains how document verification and biometric liveness checks can help organizations confirm that the person…

Read Original
BleepingComputerCybersecurity NewsCritical

Hackers leverage new Microsoft SharePoint exploit in attacks

Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7 on Tuesday. [...]

Read Original
BleepingComputerCybersecurity NewsCritical

Signal adds new security feature to thwart man-in-the-middle attacks

​Signal has introduced Automatic Key Verification, a new security feature that gives users a new way to ensure their encrypted chats haven't been intercepted. [...]

Read Original
BleepingComputerCybersecurity NewsCritical

New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges

Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldBreak" after Microsoft released the August 2026 Patch Tuesday security updates. [...]

Read Original

Share This Digest