Security news weekly round-up - 21st August 2026
Cybersecurity is everyone's business as long as you use the internet in one form or the other. Your job might be to develop the next cutting-edge security tools, raise people's cybersecurity awareness, and so on. And, in some cases, resolve to physically damage your infrastructure to stop an intrusion or minimize the impact. The list can go on. The point is to do your best wherever you might find…
In a weekly roundup of cybersecurity news, experts highlight various threats and vulnerabilities that demand vigilance from users and organizations alike. Despite advancements in security technology, human error and new attack vectors continue to pose significant risks.
Microsoft's Windows 11 operating system, while robust, can be compromised without physical access, according to researchers who demonstrated methods to bypass its security barriers. By exploiting certain privileges, attackers could manipulate critical system components, including blocking essential drivers and stopping crucial security software.
Phishing attacks, even those involving QR codes, remain a concern. Even if users are cautious with everyday interactions, they should still verify the legitimacy of QR codes, particularly those received via email. Attackers can exploit the visual concealment of malicious links to bypass sophisticated security measures and reach unsuspecting victims in trusted corporate environments.
T-Mobile successfully expelled Chinese hackers from its network by disabling the compromised connection physically, demonstrating that sometimes the simplest measures are the most effective.
Malware and ransomware threats continue to evolve, with one attack leveraging nearly 2,000 compromised WordPress sites running outdated software. The infection vector began with phishing, leading to the deployment of various malicious tools and ultimately, ransomware.
The rise of AI technology has also introduced new challenges in fraud prevention and identity verification. AI-generated phishing scams, document forgery, automated bot attacks, and synthetic identities are growing concerns for businesses, as criminals become more adept at creating convincing impersonations.
In a surprising cybersecurity revelation, expired credit cards can still facilitate unauthorized payments. Researchers found that credit card issuers and merchants may not consistently invalidate expired cards, potentially leaving consumers vulnerable to fraudulent transactions even after their physical cards have been canceled.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
