Dell security advisory (AV26-716) - Canadian Centre for Cyber Security
The Dell security advisory AV26-716 identifies multiple vulnerabilities across various Dell hardware and software products. Users and administrators are encouraged to review the official Dell security notices and apply the necessary updates to secure their systems.
Ubuntu security advisory (AV26-717) - Canadian Centre for Cyber Security
The Ubuntu security advisory AV26-717 outlines vulnerabilities in the Linux kernel across multiple Ubuntu versions identified between July 13 and 19, 2026. The Cyber Centre advises users and administrators to apply the recommended security updates to protect their systems.
[Control systems] CISA ICS security advisories (AV26-718) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security advisory identifies vulnerabilities in various ICS products from vendors including ABB, Rockwell Automation, and Siemens. Administrators are urged to review the CISA advisories and apply recommended mitigations or software updates to secure their systems.
Red Hat security advisory (AV26-719) - Canadian Centre for Cyber Security
The Red Hat security advisory (AV26-719) addresses vulnerabilities in the Linux kernel across multiple Red Hat Enterprise Linux products. Administrators should review the official security updates to ensure their systems remain protected.
Windows Bind Link Abuse Lets Attackers Blind EDR and Bypass AMSI, AppLocker, and Sysmon
Attackers with administrative access can abuse Windows bind links to redirect trusted file paths to malicious content, effectively blinding EDR, AMSI, AppLocker, and Sysmon. This post-compromise evasion technique creates a discrepancy between executed processes and security monitoring tools by leveraging memory-resident redirects that bypass traditional file-system detection.
GitHub security advisory (AV26-720) - Canadian Centre for Cyber Security
GitHub security advisory (AV26-720) identifies critical vulnerabilities in various GitHub Enterprise Server versions. Administrators are encouraged to apply the necessary software updates immediately to address these security risks.
Zimbra security advisory (AV26-721) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security advisory AV26-721 alerts users to vulnerabilities in Zimbra Collaboration Suite versions prior to v10.1.20. Administrators should promptly apply the latest patch release updates to secure their systems.
US leading economic indicators decline in June as consumer weakness offsets financial gains
The Conference Board’s Leading Economic Index declined by 0.2% in June 2026 as consumer weakness and a drop in building permits offset gains in financial components. Despite this slip, the broader economic trend shows improvement compared to last year, bolstered by a revised upward GDP growth forecast of 1.9%.
ASML plans €20,000 retention grant for employees through 2030 as AI chip war heats up
ASML is offering a €20,000 retention grant to its approximately 45,000 employees in a strategic effort to maintain workforce stability through 2030 amidst the global AI chip war. This share-based incentive requires staff to remain with the company until 2030 to secure the payout as competition for semiconductor talent intensifies.
Researchers Claim LG Monitors are Silently Installing Adware on Windows Using App
Researchers report that LG monitor management software on Windows may silently install adware components without explicit user consent. To mitigate risks, users should carefully review installation prompts and inspect their systems for unauthorized background tasks or bundled promotional software.
Google taps Samsung to help build its next-generation AI chip
Google is reportedly partnering with Samsung to manufacture the interconnect module for its next-generation Icefish TPU using 2nm process technology. This split-manufacturing approach aims to reduce reliance on third-party hardware by leveraging both TSMC and Samsung to scale AI infrastructure.
GPT-5.6 Sol Ultra Discovers WordPress Pre-Auth SQL Injection Leading to RCE A critical vulnerability chain known as wp2shell allows unauthenticated attackers to exploit a pre-authentication SQL injection in WordPress to achieve remote code execution. Security researcher Adam Kues discovered this flaw using GPT-5.6 Sol Ultra by identifying index desynchronization in the REST API Batch endpoint.
Italy fines WINDTRE €1.7 million over security flaws behind two data breaches - Help Net Security
Italy’s data protection authority has fined WINDTRE €1.7 million due to security flaws and data breaches that exposed the personal and payment information of over 365,000 customers. The regulator determined that inadequate digital certificate management and insufficient API protection enabled attackers to successfully execute large-scale data exfiltration.
TELEPUZ Web Injector Can Steal Cookies, Execute JavaScript, and Replace IBAN Details
TELEPUZ is a modular malware family that utilizes ClickFix social engineering and advanced evasion techniques to compromise systems and establish resilient command-and-control communication. Through its WebInjector module, the threat actor can intercept browser sessions to steal cookies, execute malicious JavaScript, and perform financial fraud by replacing IBAN details.
Ernst & Young data breach exposes personal and financial information of tax clients
The Ernst & Young data breach resulted from unauthorized access to a third-party IT support system, exposing sensitive tax documents and Social Security numbers. Attackers compromised external infrastructure between March and April 2026, leading to ongoing legal investigations and regulatory notifications.
New Index Tracks Material Breaches — And Refuses to Add Up the Losses - SecurityWeek
The Hacker in a Hoodie (HIH) Index is a new, source-graded website created by Richard Bird to track disclosed material cyber breaches without aggregating speculative financial losses. By organizing verified, attested, and inferred incident data, the project provides a transparent resource for analyzing the real-world performance and outcomes of cybersecurity practices.
Hugging Face discloses breach linked to autonomous AI agent
Hugging Face experienced a data breach after attackers utilized an autonomous AI agent to exploit vulnerabilities in its production infrastructure and steal internal credentials. The company has since addressed the security gaps, rotated compromised tokens, and launched an investigation into the potential impact on customer data.
Kimi K3 Highlights Limits of AI Benchmark Leaderboards
The Kimi K3 artificial intelligence model from Moonshot AI demonstrates impressive results on benchmark leaderboards, but experts emphasize these static tests often fail to capture real-world enterprise performance and utility. True efficacy must be evaluated through internal sandboxed testing rather than narrow, standardized metrics that do not reflect actual business application requirements.
IITP hack exposes South Korea’s R&D security lapses, triggers data leak probe - CHOSUNBIZ
The Institute of Information & communications Technology Planning & Evaluation (IITP) is currently investigating a data breach caused by a security lapse in its personal information access log management system. This incident marks the second hacking of the organization in seven months, raising serious concerns regarding the agency’s cybersecurity oversight.
Suno Got Hacked is an article detailing how a security breach of the AI music generator revealed that the company trained its models by scraping content from platforms like YouTube, Deezer, and Genius. This incident occurs alongside ongoing copyright lawsuits from major music labels and criticism from artists regarding unauthorized AI training practices.
Patient records stolen in cyber-attack on Australian healthcare provider | Health | The Guardian
A significant cyber-attack on the healthcare provider Partnered Health has resulted in the theft of personal and sensitive medical records across 21 clinics. The organization has subsequently sought an injunction to prevent the misuse or publication of the stolen patient data.
The Kudankulam nuclear power plant in India experienced a data breach involving stolen files leaked by the World Leaks ransomware group. While officials claim the incident does not affect nuclear security, the breach involved blueprints and supplier data from a plant contractor.
Romania’s land registry hit by cyber attack, data allegedly for sale - Help Net Security
Romania’s National Agency for Cadastre and Land Registration (ANCPI) confirmed a cyber attack disrupted its e-Terra application, halting real estate transactions. While the agency claims data remains secure, a threat actor known as ByteToBreach is allegedly selling stolen citizen data and source code on the dark web.
1 in 3 AI Agents Have Security Flaws: Is InfoSec Ready for the Next Supply Chain Attack?Webinar.
Recent data reveals that 36% of AI agents contain security flaws, exposing organizations to significant software supply chain risks like credential theft and malicious prompt injection. This webinar explores practical strategies to help InfoSec professionals identify and mitigate these vulnerabilities before they are exploited.
CISA orders feds to patch actively exploited Oracle flaw by Saturday
CISA has ordered federal agencies to patch a critical Oracle E-Business Suite vulnerability, CVE-2026-46817, by Saturday due to active exploitation. This security flaw allows unauthenticated attackers to gain system control via HTTP network access.