Enterprise Defenses Recovered at the Edge and Collapsed Inside

The Hacker News

August 12, 2026 at 11:41 AM

Overview

A recent report from Picus Labs reveals that while enterprise defenses are performing well against noisy attacks, they are struggling against more subtle, stealthy tactics used by attackers. Analyzing over 338 million real attack simulations in early 2026, the report shows that many defenses are tuned to detect loud, obvious threats, allowing quieter attacks to slip through unnoticed. This trend raises concerns for businesses, as it indicates that organizations may be overconfident in their security measures, potentially leaving them vulnerable to sophisticated intrusions. The findings suggest that companies need to reassess their security strategies to address these less visible threats, which could lead to significant breaches if not managed properly.

Key Takeaways

Action Required: Companies should reassess their security measures to improve detection of subtle attacks.
Timeline: Newly disclosed

Original Article Summary

Enterprise defenses are tuned to catch the attacks that make noise. This year's data shows attackers winning by making none. According to Picus Labs' new Blue Report 2026, which measured more than 338 million real attack simulations across actual client production environments in the first half of 2026, defenses are having one of their strongest years yet. Average prevention effectiveness

Impact

Not specified

Exploitation Status

The exploitation status is currently unknown. Monitor vendor advisories and security bulletins for updates.

Timeline

Newly disclosed

Remediation

Companies should reassess their security measures to improve detection of subtle attacks.

Additional Information

This threat intelligence is aggregated from trusted cybersecurity sources. For the most up-to-date information, technical details, and official vendor guidance, please refer to the original article linked below.

Read Original Article

Related Coverage

Researchers observe first ‘near-autonomous’ AI attack on government target in Taiwan

CyberScoop

Researchers from the Israeli cyber firm Dream have reported the first observed instance of a 'near-autonomous' AI attack targeting a government entity in Taiwan. The AI framework used in the attack demonstrated the ability to adjust its tactics during the operation, correcting its errors and expanding its approach as it progressed. This incident raises significant concerns about the evolving capabilities of AI in cyber warfare, particularly in how it can autonomously adapt to overcome defenses. The implications are serious for national security and highlight the need for governments and organizations to bolster their cybersecurity measures against such advanced threats. As AI technology continues to develop, the potential for similar attacks could increase, posing a risk to various sectors worldwide.

Aug 12, 2026

Hackers are hunting for your private photos, FBI warns: 6 ways to avoid a sextortion nightmare

WindRelay Malware Pairs With SpyNote RAT in Live-Call Scam

Infosecurity Magazine

A new type of malware known as WindRelay is being used in conjunction with the SpyNote Remote Access Trojan (RAT) to execute live-call scams. This combination allows fraudsters to clone credit cards during phone calls, posing a significant risk to unsuspecting victims. The attackers can manipulate information in real-time, making it easier for them to deceive individuals and potentially steal their financial information. This incident serves as a reminder for users to be cautious during phone conversations, especially when discussing sensitive information. Awareness and vigilance are key to preventing falling victim to such scams.

Aug 12, 2026

FBI: Hackers target online accounts to steal nude photos

BleepingComputer

The FBI has issued a warning regarding a growing trend where hackers are targeting social media and online accounts of both adults and children to steal explicit images and videos. These cybercriminals use various tactics to gain access to accounts, raising concerns about the safety and privacy of users online. The stolen content can be used for blackmail or shared publicly, which can have severe emotional and psychological impacts on the victims. This incident is particularly alarming given the increasing prevalence of such cyber crimes, especially as more people share personal content online. Users are urged to enhance their account security by using strong passwords and enabling two-factor authentication to protect their private information from these malicious actors.

Aug 12, 2026

Zoom vulnerabilities could enable RCE against meeting participants

SCM feed for Latest

Researchers recently identified vulnerabilities in Zoom's screenshare annotation feature that could allow attackers to execute remote code on devices of meeting participants. These flaws were uncovered with the help of AI tools, which indicates a growing trend of using advanced technology in security research. Users of Zoom, particularly those who frequently use the screenshare feature, are at risk. If exploited, these vulnerabilities could lead to unauthorized access to sensitive information or control over user devices. It's crucial for Zoom to address these flaws promptly to protect their users and maintain trust in their platform.

Aug 12, 2026

A stranger has been reading Salesforce and ServiceNow portals worldwide for 17 months

Help Net Security

For the past 17 months, an unknown individual has been accessing Salesforce and ServiceNow portals worldwide, according to researchers from Reco who are tracking this ongoing campaign dubbed 'City-Forum.' The campaign began using a domain that was registered back in 2002 but has since been linked to a generic server hosted in Germany. This unauthorized access has allowed the attacker to pull sensitive records from these widely used platforms, which could potentially compromise the data of numerous organizations. This situation raises serious concerns about the security measures in place for cloud-based services and highlights the need for companies to review their access controls and monitoring practices to protect against such long-term intrusions.

Aug 12, 2026