"Mission-Driven Security:  Inside a global bank's defense."

Views expressed in this cybersecurity, cybercrime update are those of the reporters and correspondents.  Accessed on 14 August 2026, 2251 UTC.

Content and Source:  "Dark Reading" via email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Fwww.darkreading.com%2Frss%2Fall.xml

Please check subscription link or scroll down to read your selections.  You can find recent posts in the "Archive" section of this blog.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

Dark Reading

157K followers25 articles per week

#security#tech

59

Today

Mission-Driven Security: Inside a Global Bank's Defense

by Kristina Beek / 2h

In this video interview, Standard Chartered's group CISO shares insights on transitioning from technical roles to strategic leadership, the importance of business-savvy security executives, and how AI is reshaping both defensive capabilities and adversarial tactics in banking.

Amid AI-Driven Bug-Hunt Tsunami, NIST Looks to … AI

NIST modernizes vulnerability database

•

by Robert Lemos / 4h

Driven by AI-augmented research and scanning, vulnerability volumes continue to surge, driving the National Institute of Standards and Technology to ask whether AI could be the answer.

Scottish Govt Suffers Potentially Widening Data Breach at Prosecutor's Office

by Nate Nelson / 6h

One Caledonian government agency reported a breach, thanks to a third party that may have serviced other agencies as well.

What Boards Need to Know About Tech Risk

by Chris Drumgoole / 8h

Why do so many boards underestimate technology risk until it becomes a crisis?

Cyera's Oasis Security Buy Is All About AI Agent Control

by Jeffrey Schwartz / 10h

The $1 billion deal aims to converge data security and identity into a single control plane for agents, with privileged access redefined around business context rather than static roles.

Yesterday

Global Threat Campaign Hits Critical VMware vCenter Flaw

by Rob Wright / 1d

Exploitation against CVE-2026–59310 began earlier this month, and patching the vulnerability may not be enough to fully mitigate the threat.

'Jewelbug' APT Balances State Espionage & Cryptocurrency Theft

by Nate Nelson / 1d

Researchers discovered hackers-for-hire performing cyber espionage and financially motivated heists from the same Web panel.

Aug 12, 2026

Belgium's eID Authentication Opens Citizen Accounts to RCE

Connective eID extension RCE

•

by Nate Nelson / 1d

The trust framework underlying Belgium's electronic ID system was fully compromised by severe vulnerabilities in a key browser extension, showcasing bigger problems with extensions in general.

Long-running Data Theft Campaign Targeting Salesforce, ServiceNow

CityForum exfiltrates Salesforce ServiceNow

•

by Jai Vijayan / 2d

The "City-Forum" campaign has been active since at least March 2025 and has targeted organizations across multiple sectors with custom tooling.

Walmart Takes a 'Trusted Agent' Approach to Purple Teaming

by Richard Thurston / 2d

Walmart colocates red and blue teams to build trust and improve security through collaborative purple teaming exercises

Ransomware Hits Colombian Justice Ministry Days Before Presidential Transition

Ministry of Justice hit by ransomware

•

by Robert Lemos / 2d

Attackers continue to target critical infrastructure and government-linked organizations in the country, mirroring the increased activity across Latin America.

Walmart Leaders Transform Security Operations Without Going Bananas

by Richard Thurston / 2d

The big-box giant has scaled its defenses by encouraging trust and innovation. Good communications, transparency, and team spirit are key factors.

Aug 11, 2026

Microsoft's Patch Tuesday Deluge Continues With August Updates

2 TTPs

•

by Jai Vijayan / 3d

The most concerning bug in the batch is CVE-2026-62878 (CVSS: 9.8), a remote code execution (RCE) vulnerability in Windows DNS Server that requires no user interaction.

Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA

Gunra ransomware breaches critical systems

•

by Rob Wright / 3d

The ransomware-as-a-service operation is finding success against critical infrastructure targets with leaked Conti code and old flaws in firewalls and VPN appliances.

Aug 10, 2026

'GhostJacking' Exposes Identity Governance Gaps in AI Agents

Ghostjacking exploits AI agents

•

by Jai Vijayan / 4d

New research shows how attackers can use security alerts and blocked events to manipulate and hijack AI agents.

Multistate Water System Attacks Widen, Iran Suspected

Iran suspected water system attacks

•

by Alexander Culafi / 4d

Attacks targeting water systems just keep flowing across a dozen states, against ill-secured, Internet-exposed PLCs.

Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius

Metabase zero day exploited

•

by Rob Wright / 4d

The maximum-severity vulnerability, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform and its downstream users.

The Patch Gap: Why Defenders Need to Think in Chains, Not Checklists

by Shubham Paikrao / 4d

It's time to turn from CVSS-backed patching to choke-point patching focused on breaking chains to critical assets.

Coruna, DarkSword iOS Exploits Proliferate Globally

by Alexander Culafi / 4d

Sophisticated iPhone exploit chains previously limited to nation-states are spreading far and wide to organized cybercrime groups.

Outdated Cybercrime Laws Put Security Researchers at Risk

by Arielle Waldman / 4d

A public policy expert mapped global cybercrime laws to develop a five-point framework for protecting ethical hackers and good-faith security research.

Sherlock Holmes Was the 'OG' Social Engineer

by Arielle Waldman / 4d

The crime solver wore disguises, spied on targets, and built intelligence networks long before modern-day tactics emerged. He has lessons for today's ethical- and unethical hackers.

Aug 7, 2026