SecurityWeek Briefing.

"Chrome Sandbox escape earns researcher $250,000."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 11 August 2025, 2001 UTC.

Content and Source:  Email subscription via https://feedly.com.

 https://feedly.com/i/subscription/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek

URL--http://www.securityweek.com

Please check email subscription link, URL, or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

90K followers40 articles per week

#security#tech

130

Today

Chrome Sandbox Escape Earns Researcher $250,000

by Eduard Kovacs / 5h

A researcher has been given the highest reward in Google’s Chrome bug bounty program for a sandbox escape with remote code execution. The post appeared first on SecurityWeek .

Connex Credit Union Data Breach Impacts 172,000 People

Collection (Enterprise TA0009)

•

by Eduard Kovacs / 8h

•

Connex Credit Union data breach

Hackers targeted Connex, one of the largest credit unions in Connecticut, and likely stole files containing personal information. The post appeared first on SecurityWeek .

Flaws in Major Automaker’s Dealership Systems Allowed Car Hacking, Personal Data Theft

by Eduard Kovacs / 8h

A researcher has demonstrated how a platform used by over 1,000 dealerships in the US could have been used to hack cars. The post appeared first on SecurityWeek .

Yesterday

Russian Hackers Exploited WinRAR Zero-Day in Attacks on Europe, Canada

by Eduard Kovacs / 10h

WinRAR has patched CVE-2025-8088, a zero-day exploited by Russia’s RomCom in attacks on financial, defense, manufacturing and logistics companies. The post appeared first on SecurityWeek .

BadCam: New BadUSB Attack Turns Linux Webcams Into Persistent Threats

Lenovo webcams vulnerable to BadUSB

•

by Eduard Kovacs / 11h

Eclypsium researchers have demonstrated a BadCam attack against Lenovo cameras, but others may be impacted as well. The post appeared first on SecurityWeek .

Aug 9, 2025

Free Wi-Fi Leaves Buses Vulnerable to Remote Hacking

by Eduard Kovacs / 2d

Researchers showed how flaws in a bus’ onboard and remote systems can be exploited by hackers for tracking, control and spying. The post appeared first on SecurityWeek .

Aug 8, 2025

Red Teams Jailbreak GPT-5 With Ease, Warn It’s ‘Nearly Unusable’ for Enterprise

100+by Kevin Townsend / 3d

Researchers demonstrate how multi-turn “storytelling” attacks bypass prompt-level filters, exposing systemic weaknesses in GPT-5’s defenses. The post appeared first on SecurityWeek .

CodeSecCon 2025: Where Software Security’s Next Chapter Unfolds

by SecurityWeek News / 3d

Taking place August 12-13, CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. The post appeared first on SecurityWeek .

Help Desk at Risk: Scattered Spider Shines Light on Overlook Threat Vector

by Torsten George / 3d

As attackers target help desks and identity systems, traditional security perimeters are proving insufficient against agile, socially-engineered threats. The post appeared first on SecurityWeek .

In Other News: Nvidia Says No to Backdoors, Satellite Hacking, Energy Sector Assessment

by SecurityWeek News / 3d

Noteworthy stories that might have slipped under the radar: federal court filing system hack, Chanel data breach, emergency CISA directive. The post appeared first on SecurityWeek .

Black Hat USA 2025 – Summary of Vendor Announcements (Part 4)

Black Hat 2025 cybersecurity innovations

•

by SecurityWeek News / 3d

Many companies are showcasing their products and services this week at the 2025 edition of the Black Hat conference in Las Vegas. The post appeared first on SecurityWeek .

Columbia University Data Breach Impacts 860,000

Impact (Enterprise TA0040)

•

by Eduard Kovacs / 3d

•

Columbia University data breach exposes

Columbia University has been targeted in a cyberattack where hackers stole the personal information of students, applicants, and employees. The post appeared first on SecurityWeek .

Aug 7, 2025

French Telecom Firm Bouygues Says Data Breach Affects 6.4M Customers

Bouygues Telecom data breach

•

by Eduard Kovacs / 3d

Bouygues has been targeted in a cyberattack that resulted in the personal information of millions of customers getting compromised. The post appeared first on SecurityWeek .

SonicWall Says Recent Attacks Don’t Involve Zero-Day Vulnerability

SonicWall investigates Akira ransomware surge

•

by Eduard Kovacs / 4d

SonicWall has been investigating reports about a zero-day potentially being exploited in ransomware attacks, but found no evidence of a new vulnerability. The post appeared first on SecurityWeek .

Black Hat USA 2025 – Summary of Vendor Announcements (Part 3)

Black Hat 2025 cybersecurity innovations

•

by SecurityWeek News / 4d

Many companies are showcasing their products and services this week at the 2025 edition of the Black Hat conference in Las Vegas. The post appeared first on SecurityWeek .

Air France, KLM Say Hackers Accessed Customer Data

Air France KLM data breach

•

by Eduard Kovacs / 4d

Airlines Air France and KLM have disclosed a data breach stemming from unauthorized access to a third-party platform. The post appeared first on SecurityWeek .

Organizations Warned of Vulnerability in Microsoft Exchange Hybrid Deployment

Privilege Escalation (Enterprise TA0004)

•

by Eduard Kovacs / 4d

•

CVE-2025-53786

CISA and Microsoft have issued advisories for CVE-2025-53786, a high-severity flaw allowing privilege escalation in cloud environments. The post appeared first on SecurityWeek .

Aug 6, 2025

New HTTP Request Smuggling Attacks Impacted CDNs, Major Orgs, Millions of Websites

by Eduard Kovacs / 4d

A desync attack method leveraging HTTP/1.1 vulnerabilities impacted many websites and earned researchers more than $200,000 in bug bounties. The post appeared first on SecurityWeek .

Major Enterprise AI Assistants Can Be Abused for Data Theft, Manipulation

by Eduard Kovacs / 4d

Zenity has shown how AI assistants such as ChatGPT, Copilot, Cursor, Gemini, and Salesforce Einstein can be abused using specially crafted prompts. The post appeared first on SecurityWeek .

Enterprise Secrets Exposed by CyberArk Conjur Vulnerabilities

by Eduard Kovacs / 4d

CyberArk has patched several vulnerabilities that could be chained for unauthenticated remote code execution. The post appeared first on SecurityWeek .

Google Discloses Data Breach via Salesforce Hack

ShinyHunters targets major companies

•

21by Eduard Kovacs / 5d

A Google Salesforce instance may have been targeted as part of a ShinyHunters campaign that hit several major companies. The post appeared first on SecurityWeek .

PLoB: A Behavioral Fingerprinting Framework to Hunt for Malicious Logins

by Kevin Townsend / 5d

Splunk researchers developed a system to fingerprint post-logon behavior, using AI to find subtle signals of intrusion. The post appeared first on SecurityWeek .

WhatsApp Takes Down 6.8 Million Accounts Linked to Criminal Scam Centers, Meta Says

by Associated Press / 5d

Meta linked these scams to a criminal scam center in Cambodia — and said it disrupted the campaign in partnership with ChatGPT maker OpenAI. The post appeared first on SecurityWeek .

Trend Micro Patches Apex One Vulnerabilities Exploited in Wild

Trend Micro Apex One vulnerabilities exploited

•

by Eduard Kovacs / 5d

Trend Micro has rushed to fix two Apex One zero-days that may have been exploited by Chinese threat actors. The post appeared first on SecurityWeek .

Microsoft Paid Out $17 Million in Bug Bounties in Past Year

by Ionut Arghire / 5d

Microsoft handed out $17 million in rewards to 344 security researchers through its bug bounty programs over the past year. The post appeared first on SecurityWeek .

Ox Security Launches AI Agent That Auto-Generates Code to Fix Vulnerabilities

Apiiro introduces AI security automation

•

by Kevin Townsend / 5d

An AI extension to the Ox Security platform automatically generates organization specific code to fix vulnerabilities in the codebase. The post appeared first on SecurityWeek .

Over 1 Million Impacted by DaVita Data Breach

DaVita ransomware affects nearly million

•

by Ionut Arghire / 5d

DaVita has notified over 1 million individuals that their personal and health information was stolen in a ransomware attack. The post appeared first on SecurityWeek .

Flaws Expose 100 Dell Laptop Models to Implants, Windows Login Bypass

Dell laptops vulnerable to security flaw

•

by Ionut Arghire / 5d

ReVault vulnerabilities in the ControlVault3 firmware in Dell laptops could lead to firmware modifications or Windows login bypass. The post appeared first on SecurityWeek .

Black Hat USA 2025 – Summary of Vendor Announcements (Part 2)

by SecurityWeek News / 5d

Many companies are showcasing their products and services this week at the 2025 edition of the Black Hat conference in Las Vegas. The post appeared first on SecurityWeek .