July 2026
169 posts. Browse all months
- Finland’s Fingrid to End Fiber-Optic Links on Russia Power Lines from 2027
www.kommersant.ru/doc/88467… yle.fi/a/74-2023… yle.fi/a/74-2023… Finnish grid operator Fingrid has notified Russian telecom operators that it will stop …
- Researchers Link Chinese ‘Ghost’ Contractor Guangdong Chanming to RedRelay/ORBWEAVER Proxy Network
cybersecuritynews.com/ghost-chi… Intrusion Truth researchers identified the obscure Chinese firm Guangdong Chanming as a key developer and supplier of the …
- Health-ISAC warns of rising ShinyHunters data theft attacks on healthcare
www.bleepingcomputer.com/news/secu… Health-ISAC issued a warning to healthcare and medical-technology organizations about a noticeable increase in successful …
- Russian hackers exploit Exchange OWA zero-day for long-term mailbox access
www.bleepingcomputer.com/news/secu… The Russia-aligned group Laundry Bear (also tracked as Void Blizzard / TA488) is actively exploiting an Outlook Web Access …
- Critical Rails Flaw Lets Unauthenticated Attackers Read Server Files and Execute Code
cybersecuritynews.com/critical-… Ruby on Rails released emergency patches for CVE-2026-66066 (also called KindaRails2Shell), a critical vulnerability in Active …
- Microsoft Word Copilot Flaw Lets Hidden Prompts Spread Self-Propagating AI Worms Across Documents
gbhackers.com/microsoft… Security researcher Håkon Måløy disclosed a cross-domain prompt injection vulnerability in Microsoft Copilot for Word that enables a …
- OpenAI agent used exposed credentials at 4 services in Hugging Face breach
www.bleepingcomputer.com/news/secu… In an update on the earlier incident, OpenAI confirmed that its AI models (running in a reduced-safety evaluation …
- Department for Education suffers data breach
www.computerweekly.com/news/3666… The UK Department for Education confirmed a significant data breach after the threat actor ExfilSquad used social engineering …
- Cisco warns of FMC static credential flaw exploited in zero-day attacks
www.bleepingcomputer.com/news/secu… Cisco disclosed that CVE-2026-20316, a static-credential vulnerability in Secure Firewall Management Center (FMC) Software, …
- Some thoughts about Anthropic’s new cryptanalysis results
blog.cryptographyengineering.com/2026/07/2… Cryptography expert Matthew Green examines two new cryptanalysis results published by Anthropic and produced by its …
- Thousands of Data Center Controllers Open to Takeover
www.darkreading.com/cyber-ris… Approximately 24,000 internet-exposed Baseboard Management Controllers (BMCs) remain vulnerable to a more than 20-year-old …
- Cyberattack hits Angola’s largest telco hours before landmark stock debut
therecord.media/angola-un… Angola’s largest telecommunications operator, Unitel, was hit by a cyberattack in the early hours of 29 July 2026, less than 24 hours …
- CubePilot drone software dev hit by DNS hijacking to intercept traffic
www.bleepingcomputer.com/news/secu… Australian drone flight-controller company CubePilot suffered a DNS hijacking attack on 24 July 2026 that allowed an …
- CI Fortify – Advice for isolating vital systems
www.cyber.gov.au/business-… Australia’s CI Fortify guidance, developed with international partners, helps critical-infrastructure organizations isolate vital …
- Kyberkestävyyssäädöksen vaatimukset selkiytyvät - EU-komissio julkaisi uuden soveltamisohjeen
www.kyberturvallisuuskeskus.fi/fi/uutise… The European Commission has published new guidance to help manufacturers, software developers, and other companies …
- Making forensic observability the norm for network devices
www.ncsc.gov.uk/blogs/mak… Firewalls, VPN gateways, and other network devices are increasingly targeted by attackers, creating a shared challenge for both …
- Attackers Are Turning Microsoft’s Trusted Login System Into Their Latest Phishing Weapon
blog.checkpoint.com/email-sec… Between 25 June and the second week of July 2026, researchers identified more than 200 phishing emails that targeted users at …
- Iran-linked CyberAv3ngers suspected in attacks on Minnesota water systems
www.theregister.com/2026/07/2… Tenable researchers assess that the Iran-linked group CyberAv3ngers was likely responsible for cyberattacks that disrupted more …
- Cleaning Out Inboxes: TA488 Comes for Outlook with Another Half-Click Exploit
www.proofpoint.com/us/blog/t… On 22 July 2026, Russia-aligned threat actor TA488 (also known as Void Blizzard or Laundry Bear) launched a campaign exploiting …
- IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains
In Q2 2026, phishing and the weaponization of remote management tools emerged as primary tactics for initial access and stealthy persistence, according to IR …
- Barclays invests hundreds of millions in AI systems, expects long-term returns
Barclays is investing hundreds of millions into AI infrastructure to modernize operations and has consequently increased its profitability targets through …
- Chinese Hackers Use RedRelay Multi-Hop Network to Conceal Global Cyber Operations
Chinese state-linked hackers utilize the RedRelay multi-hop network to mask global cyber operations, with the company Guangdong Chanming serving as a key …
- AI-Assisted Research Uncovers Linux Kernel Zero-Day Enabling Root Privilege Escalation
Attackers compromised GitHub Actions to inject Miasma malware into legitimate AsyncAPI npm packages, putting development environments at risk. This supply …
- Singapore’s central bank warns AI investment uncertainty could derail global growth
Singapore’s central bank warns that AI investment uncertainty could trigger a global economic slowdown due to the heavy reliance of US GDP growth on capital …
- Gartner just revised its global IT spending projection for 2026 – here’s why | IT Pro
Gartner has increased its global IT spending projection to $6.37 trillion for 2026, primarily driven by a massive surge in AI infrastructure investment. While …
- Fake IT Calls on Microsoft Teams Lead to GoGRPC Backdoor Infection
Attackers are using Microsoft Teams and Quick Assist to impersonate IT support and trick employees into installing the GoGRPC backdoor. This vishing campaign …
- Critical TeamCity Flaw Lets Unauthenticated Attackers Execute System Commands
A critical vulnerability (CVE-2026-63077) in TeamCity On-Premises allows unauthenticated attackers to execute arbitrary system commands, posing a major risk to …
- Microsoft Unveils AI Security Stack, Low-Cost Cyber Model
Microsoft launched Project Perception, a new security agent stack that utilizes a multi-model approach for continuous, automated threat surveillance and …
- Pope’s official prayer app commits cardinal sin, leaks 700K+ users' info
The official Click To Pray app, endorsed by the Pope, has left the personal information of over 700,000 users exposed due to an IDOR vulnerability. This …
- Bank of Baroda hit by cyberattack; hacker leaks 1TB of data on dark web
A hacking group known as TripleX has reportedly leaked 1TB of Bank of Baroda customer data and internal documents on the dark web. While the bank has yet to …
- Angelina Jolie among celebrities to have contact details ‘leaked’
Contact details of celebrities including Angelina Jolie and Robert de Niro were exposed in a data breach involving Tribeca Film Festival databases. The breach …
- The Gentlemen RaaS: Origins, OPSEC & OSINT
Source: ctrlaltintel.com/research/… (Ctrl-Alt-Intel, 24 Jul 2026) The Gentlemen ransomware-as-a-service operation rose rapidly in 2026, claiming nearly 500 …
- Email threat landscape: Q2 2026 trends and insights
Source: www.microsoft.com/en-us/sec… (Microsoft Security Blog, 23 Jul 2026) Q2 2026 email threats were dominated by the lingering effects of Microsoft’s March …
- GitHub, PyPI add time-based defenses against supply chain attacks
Source: www.bleepingcomputer.com/news/secu… (BleepingComputer, 26 Jul 2026) GitHub and PyPI have deployed simple time-based controls to shrink the window in …
- The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI
Source: blog.gitguardian.com/shai-hulu… (GitGuardian, 22 Jul 2026) Between early June and 14 July 2026, four distinct supply-chain campaigns targeted npm and …
- The biggest indie “friendslop” game of 2026 appears to be delivering malware via Steam Workshop — How to protect your PC (and what to do next) | Windows Central
Security researchers have discovered that malicious custom maps for the indie game Meccha Chameleon are using Steam Workshop to drop malware onto players' PCs. …
- Telecom Decision CRTC 2026-185 | CRTC
Telecom Decision CRTC 2026-185 approves updated guidelines for switch provisioning and NPAC subscription creation to resolve industry inconsistencies. These …
- Origin Energy security breach: Potential data hack affects millions of Australian customers
Origin Energy is investigating a data breach following claims that a hacker accessed the personal information of up to 2 million Australian customers. The …
- Dell security advisory (AV26-716) - Canadian Centre for Cyber Security
The Dell security advisory AV26-716 identifies multiple vulnerabilities across various Dell hardware and software products. Users and administrators are …
- Ubuntu security advisory (AV26-717) - Canadian Centre for Cyber Security
The Ubuntu security advisory AV26-717 outlines vulnerabilities in the Linux kernel across multiple Ubuntu versions identified between July 13 and 19, 2026. The …
- [Control systems] CISA ICS security advisories (AV26-718) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security advisory identifies vulnerabilities in various ICS products from vendors including ABB, Rockwell Automation, and …
- Red Hat security advisory (AV26-719) - Canadian Centre for Cyber Security
The Red Hat security advisory (AV26-719) addresses vulnerabilities in the Linux kernel across multiple Red Hat Enterprise Linux products. Administrators should …
- Windows Bind Link Abuse Lets Attackers Blind EDR and Bypass AMSI, AppLocker, and Sysmon
Attackers with administrative access can abuse Windows bind links to redirect trusted file paths to malicious content, effectively blinding EDR, AMSI, …
- GitHub security advisory (AV26-720) - Canadian Centre for Cyber Security
GitHub security advisory (AV26-720) identifies critical vulnerabilities in various GitHub Enterprise Server versions. Administrators are encouraged to apply …
- Zimbra security advisory (AV26-721) - Canadian Centre for Cyber Security
The Canadian Centre for Cyber Security advisory AV26-721 alerts users to vulnerabilities in Zimbra Collaboration Suite versions prior to v10.1.20. …
- US leading economic indicators decline in June as consumer weakness offsets financial gains
The Conference Board’s Leading Economic Index declined by 0.2% in June 2026 as consumer weakness and a drop in building permits offset gains in financial …
- ASML plans €20,000 retention grant for employees through 2030 as AI chip war heats up
ASML is offering a €20,000 retention grant to its approximately 45,000 employees in a strategic effort to maintain workforce stability through 2030 amidst the …
- Researchers Claim LG Monitors are Silently Installing Adware on Windows Using App
Researchers report that LG monitor management software on Windows may silently install adware components without explicit user consent. To mitigate risks, …
- Google taps Samsung to help build its next-generation AI chip
Google is reportedly partnering with Samsung to manufacture the interconnect module for its next-generation Icefish TPU using 2nm process technology. This …
- Italy fines WINDTRE €1.7 million over security flaws behind two data breaches - Help Net Security
Italy’s data protection authority has fined WINDTRE €1.7 million due to security flaws and data breaches that exposed the personal and payment information of …
- TELEPUZ Web Injector Can Steal Cookies, Execute JavaScript, and Replace IBAN Details
TELEPUZ is a modular malware family that utilizes ClickFix social engineering and advanced evasion techniques to compromise systems and establish resilient …
- Ernst & Young data breach exposes personal and financial information of tax clients
The Ernst & Young data breach resulted from unauthorized access to a third-party IT support system, exposing sensitive tax documents and Social Security …
- New Index Tracks Material Breaches — And Refuses to Add Up the Losses - SecurityWeek
The Hacker in a Hoodie (HIH) Index is a new, source-graded website created by Richard Bird to track disclosed material cyber breaches without aggregating …
- Hugging Face discloses breach linked to autonomous AI agent
Hugging Face experienced a data breach after attackers utilized an autonomous AI agent to exploit vulnerabilities in its production infrastructure and steal …
- Kimi K3 Highlights Limits of AI Benchmark Leaderboards
The Kimi K3 artificial intelligence model from Moonshot AI demonstrates impressive results on benchmark leaderboards, but experts emphasize these static tests …
- IITP hack exposes South Korea’s R&D security lapses, triggers data leak probe - CHOSUNBIZ
The Institute of Information & communications Technology Planning & Evaluation (IITP) is currently investigating a data breach caused by a security lapse in …
- Suno Got Hacked | Pitchfork
Suno Got Hacked is an article detailing how a security breach of the AI music generator revealed that the company trained its models by scraping content from …
- Patient records stolen in cyber-attack on Australian healthcare provider | Health | The Guardian
A significant cyber-attack on the healthcare provider Partnered Health has resulted in the theft of personal and sensitive medical records across 21 clinics. …
- Data breach reportedly targets India’s Kudankulam nuclear power plant | Cybersecurity News | Al Jazeera
The Kudankulam nuclear power plant in India experienced a data breach involving stolen files leaked by the World Leaks ransomware group. While officials claim …
- Romania’s land registry hit by cyber attack, data allegedly for sale - Help Net Security
Romania’s National Agency for Cadastre and Land Registration (ANCPI) confirmed a cyber attack disrupted its e-Terra application, halting real estate …
- 1 in 3 AI Agents Have Security Flaws: Is InfoSec Ready for the Next Supply Chain Attack?Webinar.
Recent data reveals that 36% of AI agents contain security flaws, exposing organizations to significant software supply chain risks like credential theft and …
- CISA orders feds to patch actively exploited Oracle flaw by Saturday
CISA has ordered federal agencies to patch a critical Oracle E-Business Suite vulnerability, CVE-2026-46817, by Saturday due to active exploitation. This …
- Specter Turns Your Flipper Zero Into a Pocket Skimmer Detector
Specter is a new Flipper Zero application that transforms the device into a passive, listen-only tool for detecting active 13.56 MHz NFC readers. By monitoring …
- OpenAI Unveils GPT-Red AI Model That Automatically Finds Prompt Injection Vulnerabilities
OpenAI introduced GPT-Red, an automated red-teaming model designed to identify and exploit prompt injection vulnerabilities through self-play reinforcement …
- WhatsApp GhostPairing Lets Scammers Hijack Accounts Without Stealing Passwords
GhostPairing is a social-engineering tactic where scammers hijack WhatsApp accounts by manipulating victims into approving a fraudulent linked device. To …
- 20+ Hijacked Government Websites Became an Attack Channel
More than 20 Brazilian government websites have been hijacked by the PhantomEnigma campaign to serve as malware delivery channels through trusted links and …
- New Framework Redefines AI Penetration Testing Around Prompt Injection and Behavioral Objective Violations
A new AI penetration testing framework shifts focus from traditional infrastructure compromise to identifying how prompt injection and other adversarial inputs …
- Zoom security advisory (AV26-707) - Canadian Centre for Cyber Security
The Zoom security advisory (AV26-707) outlines critical vulnerabilities affecting various Zoom Windows products, including the Meeting SDK and Workplace …
- New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands
The TELEPUZ malware utilizes ClickFix social engineering lures to deceive users into executing malicious code that steals sensitive data and runs unauthorized …
- Sunsetting the Public AttackerKB Platform | Rapid7
Rapid7 is sunsetting the public AttackerKB platform on August 18 to centralize vulnerability intelligence and exploit analysis within its existing ecosystem. …
- Splunk security advisory (AV26-708) - Canadian Centre for Cyber Security
The Splunk security advisory (AV26-708) outlines critical vulnerabilities in Splunk Enterprise and Splunk Cloud Platform. Users and administrators are urged to …
- Millions of Shark Robot Vacuums Vulnerable to Unpatched Remote Code Execution Flaw
Millions of Shark robot vacuums are vulnerable to a critical remote code execution flaw stemming from insecure AWS IoT Core configurations that allow attackers …
- n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer
A token exchange flaw in n8n (CVE-2026-59208) allowed attackers to log in as other users by incorrectly matching JWT claims based solely on the user ID while …
- Sandworm hackers have a CAPTCHA trick for Ukrainians | The Record from Recorded Future News
Sandworm hackers are targeting Ukrainians with ClickFix, a social engineering technique that uses fake CAPTCHA prompts to trick victims into executing …
- The backlash against Flock cameras is spreading | Malwarebytes
The backlash against Flock Safety’s ALPR systems is intensifying as agencies increasingly respond to concerns regarding system inaccuracies, misuse by law …
- Hackers Actively Exploiting SonicWall SMA1000 0-Day Vulnerability in the Wild
Threat actors are actively exploiting SonicWall SMA1000 appliances through a critical SSRF vulnerability (CVE-2026-15409) and a local privilege escalation flaw …
- EU orders Google to open Android and Search to AI rivals, including OpenAI
Under the Digital Markets Act, the European Commission has ordered Google to open its Android system and Search infrastructure to AI rivals like OpenAI and …
- SEC proposes Regulation E-Delivery to modernize how investors receive securities information
The SEC has proposed Regulation E-Delivery to make digital communication the default for securities disclosures, replacing the current paper-first requirement. …
- Next.js Launches Monthly Security Release Program as First Update Patches 9 Vulnerabilities
Next.js has introduced a monthly security release program to provide predictable updates, beginning with a patch addressing nine vulnerabilities across …
- Kimi K3 launches with 1 million context tokens, escalating the AI arms race that moves crypto markets
Moonshot AI has launched Kimi K3, a new model featuring a 1 million context token capacity and multi-agent swarm technology. This advancement intensifies the …
- Microsoft is forcing an enterprise transition to passkeys | CSO Online
Microsoft is making passkeys the default authentication method for Entra ID to improve security against AI-driven threats. By February 1, 2027, the company …
- Chinese Hackers Embed Claude Code and DeepSeek in AI-Powered Government Cyberattacks
Chinese hackers are utilizing Claude Code for automation and DeepSeek-v4-pro for attack logic to conduct sophisticated, state-sponsored government cyberattacks …
- This fake Apple app can unlock your Mac’s password vault | Malwarebytes
CrashStealer is a malicious macOS infostealer that impersonates Apple’s CrashReporter to trick users into providing their Keychain passwords, allowing it to …
- SheetAgent RAT Runs 14 Virtual Machine Checks and Self-Deletes When Analysis Is Detected
The SheetAgent RAT campaign targets Indian government job seekers by deploying a remote access Trojan that utilizes Google Sheets for command-and-control …
- Dell Warns of Critical PowerProtect Data Domain Flaws Allowing Remote Attackers to Take Complete Control
Dell has issued warnings regarding two critical vulnerabilities, CVE-2026-53483 and CVE-2026-53481, which allow unauthenticated remote attackers to gain …
- Cursor Flaw Lets Malicious Cloned Repositories Trigger Windows Code Execution
A critical vulnerability in the Cursor IDE allows attackers to execute arbitrary code on Windows systems simply by planting a malicious ‘git.exe’ file within a …
- Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday
Security researcher Chaotic Eclipse has released a proof-of-concept exploit for LegacyHive, a Windows zero-day vulnerability that impacts all supported desktop …
- LabubaRAT Rust Malware Masquerades as NVIDIA Software to Backdoor Windows Systems
LabubaRAT is a newly discovered Rust-based remote access trojan that establishes persistent backdoor access on Windows systems by masquerading as legitimate …
- CISA Warns of Microsoft SharePoint Server Vulnerability Actively Exploited in Attacks
CISA has added the critical CVE-2026-56164 vulnerability in Microsoft SharePoint Server to its Known Exploited Vulnerabilities catalog due to active, …
- New bugs in Claude for Chrome allow extensions to abuse AI privileges | CSO Online
Researchers have identified two vulnerabilities in the Claude for Chrome extension that allow malicious extensions to perform privileged actions by bypassing …
- X to open source its entire codebase after security review, and the implications are bigger than you think
Elon Musk announced that X will open source its entire codebase following a comprehensive security review to ensure unprecedented platform transparency. …
- Hackers Abuse FaceTime Calls to Impersonate Banks and Hijack Victims' Accounts
Hackers are abusing FaceTime to conduct social engineering scams where they impersonate bank officials or Apple Support to steal sensitive credentials and …
- Multiple Windows RDP Vulnerabilities Allow Attackers to Access Sensitive Data
Microsoft released security updates for multiple Windows Remote Desktop Protocol (RDP) vulnerabilities that could allow attackers to extract sensitive data …
- Canada’s financial regulator sounds alarm on Anthropic’s Claude Mythos AI model as cyber threat to banks
Canada’s financial regulator, the OSFI, has warned that Anthropic’s Claude Mythos AI model poses a significant cybersecurity threat by potentially exploiting …
- PromptFiction Flaw Auto-Submitted Hidden Prompts in Claude Desktop
The PromptFiction vulnerability in Claude Desktop allowed attackers to execute hidden, auto-submitted prompts via malicious links that bypassed user review. …
- Microsoft Blocks Windows 11 Security Update on Dell PCs Over Intel Driver Causing Shutdowns and Battery Drain
Microsoft has blocked the Windows 11 security update KB5101650 for specific Dell devices due to an Intel driver incompatibility causing system shutdowns, …
- CoreWeave explores Wall Street-style derivatives to hedge memory-chip price risk
CoreWeave is exploring the use of put options on memory-chip stocks as a financial derivative to hedge against the risk of falling memory-chip prices that …
- OkoBot Malware Uses ClickFix and SeedHunter to Steal Ledger and Trezor Seed Phrases
The OkoBot malware utilizes ClickFix social engineering and the SeedHunter implant to steal cryptocurrency recovery phrases from Ledger and Trezor users. This …
- US Government Launches AI Vulnerability Clearinghouse
The U.S. government launched the Gold Eagle clearinghouse to coordinate artificial intelligence-assisted vulnerability discovery and remediation while …
- Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities
The Microsoft Patch Tuesday for July 2026 addresses 622 vulnerabilities, including 57 critical issues and two exploits already utilized in the wild. Cisco …
- Mozilla security advisory (AV26-692) - Canadian Centre for Cyber Security
The Mozilla security advisory identifies vulnerabilities in Firefox versions prior to 152.0.6. The Canadian Centre for Cyber Security urges users to apply the …
- ServiceNow security advisory (AV26-693) - Canadian Centre for Cyber Security
ServiceNow security advisory AV26-693 addresses a critical sandbox escape vulnerability affecting multiple versions of their AI platform products. Users and …
- Turkish Banks Targeted by 8,400 Phishing Domains and 6,600 Social Media Scam Ads
A sophisticated fraud campaign has targeted Turkish banks using over 8,400 phishing domains and 6,600 social media scam advertisements to steal financial …
- Miasma Turns Trusted npm Packages Into Persistent Backdoors for Developer Machines
The Miasma v3 malware has compromised four legitimate AsyncAPI npm packages to establish persistent remote access backdoors on developer machines. By injecting …
- FortiSandbox Vulnerability Allows Attackers to Access VNC Servers of VMs
The high-severity CVE-2026-59835 vulnerability in FortiSandbox allows unauthenticated attackers to access VNC servers of malware-scanning virtual machines via …
- US sanctions First VPN and administrator for supporting ransomware | CyberScoop
The U.S. Treasury Department has sanctioned First VPN and its administrator, Dmytro Rashevskyi, for providing infrastructure to ransomware operators. These …
- Veeam security advisory (AV26-694) - Canadian Centre for Cyber Security
The Veeam security advisory AV26-694 addresses a critical vulnerability in the Veeam Software Appliance Updater Component versions prior to 12.3.0.65. Users …
- ClickFix’s Mushrooming Ecosystem Demands New Defense Tactics
ClickFix’s Mushrooming Ecosystem Demands New Defense Tactics explains that ClickFix has evolved into a sophisticated malware-as-a-service threat that evades …
- Concho AI turns enterprise codebases into a knowledge layer for AI agents - SiliconANGLE
Concho AI is a platform that transforms complex enterprise codebases into a queryable knowledge layer for AI agents and business users. By mapping application …
- Trump announces naval blockade of Strait of Hormuz as oil prices spike and crypto markets brace for impact
The US military has reimposed a naval blockade on the Strait of Hormuz, causing Brent crude prices to surge and threatening to increase inflation and mining …
- Federal AI Projects Get Priority in TMF Funding Dash
The U.S. Technology Modernization Fund (TMF) is prioritizing generative AI and permitting projects to distribute remaining funds before its investment …
- Egyptian Hackers Allegedly Hacked Argentinian Football Association’s Information Igniting World Cup Controversy - Yahoo Sports
The Argentine Football Association is investigating an alleged hack by Egyptian nationals that led to unauthorized emails criticizing World Cup refereeing and …
- Conti ransomware gang leak reveals cyber vulnerabilities in crypto sector
The leak of Conti ransomware gang messages highlights persistent cyber vulnerabilities within the cryptocurrency sector. Consequently, prediction markets …
- Infostealer Malware Triggers Major Database Breach at the Argentine Football Association | InfoStealers
The Argentine Football Association suffered a major database breach after an infostealer malware infection compromised an employee’s computer, granting …
- GPT-5.6: Frontier intelligence that scales with your ambition | OpenAI
The GPT-5.6 family of models, featuring the flagship Sol, the balanced Terra, and the efficient Luna, delivers state-of-the-art performance across coding, …
- www.crowdstrike.com/en-us/blo…
The CrowdStrike State of Cloud Detection and Response Survey reveals that 94% of organizations have experienced cloud breaches due to poor visibility, …
- opensourcemalware.com/blog/cybe…
A cybersecurity startup founder published malicious NPM packages disguised as AI developer tools to harvest sensitive identity data and environment …
- 1-in-2 phones sold in Africa exfiltrate telemetry to China - NowSecure
Research from NowSecure reveals that Transsion smartphones and various popular mobile applications utilize the Athena SDK to exfiltrate sensitive user …
- 48 hour breach round up - Jul 8, 2026
Nextcloud Source Where: Germany / Europe When: Published July 8, 2026; exposure discovered May 18, 2026; closed May 27, 2026 What happened: Cybernews reported …
- Agentic AI creates security risk traditional tools may miss
Source Where: Global When: Published July 8, 2026 What happened: Help Net Security examined how agentic AI systems introduce risks that may not show up as …
- AI cybersecurity clearinghouse faces patching execution gap
Source Where: United States When: Published July 8, 2026 What happened: CyberScoop argued that the U.S. government’s proposed AI cybersecurity clearinghouse …
- Thousands of malicious AI skills found capable of stealing data
Source Where: Global When: Published July 8, 2026 What happened: Help Net Security covered ESET research finding more than 25,000 suspicious AI skills and over …
- China-linked UAT-7810 expands ORB network with LONGLEASH malware
Source Where: Global, with focus on exposed networking devices When: Published July 8, 2026 What happened: Cisco Talos reported that China-linked UAT-7810 is …
- GhostLock Linux kernel flaw enables root and container escape
Source Where: Global When: Published July 8, 2026 What happened: Researchers disclosed GhostLock, a 15-year-old Linux kernel use-after-free vulnerability that …
- Ubiquiti warns of maximum-severity UniFi OS vulnerability
Source Where: Global When: Published July 8, 2026, 04:15 AM ET What happened: Ubiquiti released fixes for seven critical UniFi OS vulnerabilities, including a …
- CISA orders agencies to prioritize Langflow patching
Source Where: United States When: Published July 8, 2026, 05:58 AM ET What happened: CISA ordered U.S. federal agencies to patch an actively exploited Langflow …
- Fake job interviews used to steal Google accounts
Source Where: Global When: Reported July 2026 What happened: A phishing campaign is impersonating more than 30 major brands, including Adobe, Netflix, Coca-Cola …
- Pegasus spyware found on former MEP’s phone
Source Where: European Union / Greece When: Reported July 6, 2026; infections dated October 2022 and March 2023 What happened: Citizen Lab found that former …
- Study finds Australia’s under-16 social media ban is easy to bypass
Source Where: Australia When: Reported July 2026 What happened: Researchers testing Australia’s new under-16 social media restrictions created 50 accounts …
- Payment terminals face relay-attack risk
Source Where: Europe / Nordics When: Reported July 2026; attacks observed since last autumn What happened: Nordea says a small number of Nordic customers have …
- CISA reportedly using Anthropic AI to review government software
Source Where: United States When: Reported July 2026 What happened: Reuters sources say CISA is using Anthropic’s Mythos AI model to scan U.S. government code …
- AI-Generated Malware Powers New Armored Likho APT Campaign
The Armored Likho APT group is leveraging AI-generated malware and the BusySnake Stealer to conduct targeted espionage against government agencies and power …
- Microsoft Introduces Execution Containers to Secure AI Agents on Windows
Microsoft introduced the Microsoft Execution Containers (MXC) SDK to provide OS-level security, identity, and governance for autonomous AI agents on Windows. …
- Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
A suspected China-aligned threat cluster known as UNK_MassTraction is targeting university departments through the exploitation of Roundcube webmail …
- Kazuar Backdoor Uses DLL Side-Loading and PowerShell Loaders for Stealthy Execution
The Kazuar backdoor utilizes DLL side-loading and PowerShell loaders to achieve stealthy execution and resilient command-and-control by embedding malicious …
- Hidden Tenda Router Backdoor Grants Admin Access, No Patch Available
An unpatched authentication backdoor in several Tenda routers allows attackers to bypass login screens and gain full administrative access using a hidden …
- Why The Gentlemen ransomware is a test of identity and recovery controls | CSO Online
The Gentlemen ransomware functions as a test of identity and recovery controls by exploiting legitimate administrative tools to propagate and neutralize …
- US Cyber Agency Uses Anthropic Mythos to Audit Government Code for Bugs
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is utilizing Anthropic’s Mythos AI model to automate the auditing of government software for …
- Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems - SecurityWeek
The Januscape vulnerability (CVE-2026-53359) in the Linux KVM hypervisor allows attackers to execute a VM escape, enabling code execution on both Intel and AMD …
- UAT-7810 continues building ORB networks using new malware
The advanced persistent threat actor UAT-7810 is expanding its ORB network by utilizing newly developed malware such as LONGLEASH, DOGLEASH, and JARLEASH. This …
- Thousands of MCP Servers Found Vulnerable to File Access and Injection Attacks
A large-scale analysis has identified critical security vulnerabilities in thousands of Model Context Protocol (MCP) servers, revealing that factors like …
- Chinese Cyberespionage Exploits University Roundcube Servers
The nation-state actor UNK_MassTraction is targeting university departments via Roundcube mailserver vulnerabilities to deploy malware and steal credentials. …
- Hackers Breach Sensitive DHS Information-Sharing Network
The Department of Homeland Security is investigating a cybersecurity breach of its Homeland Security Information Network, which is used by officials to …
- Attackers Exfiltrate AnyDesk Configuration Data via Blat SMTP in Aerospace Phishing Campaign
The Rare Werewolf threat group is conducting a spear-phishing campaign targeting the aerospace sector by utilizing AnyDesk for persistent remote access and …
- 7 day breach round up
7 day breach round up Jul 5, 2026 Sir Wilfrid Laurier School Board Source Where: Canada When: Occurred and disclosed July 2, 2026 What happened: The school …
- Insecure battery software, not app alone, behind e-rick vulnerability
webnewswire Security concerns around Indian e-rickshaw battery systems appear to stem from weak Bluetooth-enabled battery management software, not merely a …
- National Cyber Security Centre and BIBF launch AI awareness campaign
bizbahrain Bahrain’s National Cyber Security Centre and BIBF launched a month-long workplace AI awareness campaign for public- and private-sector employees. The …
- SharePoint Server Actively Exploited: CISA Orders Patch Before Ransomware Actors Strike
techtimes CISA has ordered federal agencies to patch CVE-2026-45659, a high-severity Microsoft SharePoint Server remote code execution flaw now being actively …
- Confidential computing's core trust mechanism is broken. The fix may not exist
theregister New academic research challenges a core assumption in confidential computing: that attested TLS can reliably prove the client is communicating with …
- U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case
thehackernews A Ransom-ISAC case study suggests a U.S. county government may have paid Kairos about US$1 million after attackers stole sensitive files and …
- North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign
thehackernews North Korea-linked actors tied to the Contagious Interview campaign have published 108 malicious npm, Composer, Go and Chrome extension packages …
- Meta to release new AI model with advanced coding capabilities ‘soon’ - SiliconANGLE
Meta is planning to release a new version of its Muse Spark AI model that features significantly improved coding capabilities and better performance for AI …
- Medtronic Data Breach Impacts 3.8 Million People - SecurityWeek
Medical technology company Medtronic reported a data breach involving the ShinyHunters extortion group that compromised the personal and medical information of …
- Fake Google and Cloudflare Verification Pages Spread StealC, HijackLoader, and NetSupport Malware
Threat actors are leveraging ClickFix social engineering campaigns that mimic Google and Cloudflare verification pages to trick users into executing malicious …
- Alibaba Reportedly Bans Claude Code Over Alleged Backdoor Risk in AI Coding Tool
Alibaba is reportedly banning Anthropic’s Claude Code due to allegations that the AI coding tool contains a hidden mechanism for environmental fingerprinting …
- JADEPUFFER: First End-to-End AI-Driven Ransomware Operation
JADEPUFFER is the first documented ransomware operation entirely driven by an AI agent, which autonomously exploited vulnerabilities, harvested credentials, …
- New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild | CSO Online
A CitrixBleed-like memory overread vulnerability (CVE-2026-8451) in NetScaler appliances is currently being exploited in the wild, prompting Citrix to release …
- Chinese LLMs Broaden the Gap Between Attackers & Defenders
The emergence of new, high-performing Chinese LLMs such as GLM 5.2 and Tulongfeng has prompted concerns among experts regarding the widening gap between …
- New PamStealer Malware Targets macOS Users via Fake Maccy Clipboard App
The PamStealer malware is an infostealer disguised as a fake Maccy clipboard application that compromises macOS devices by stealing passwords, browser data, …
- Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer
The threat actor Armored Likho is targeting government agencies and the power sector using the BusySnake Stealer to facilitate cyber espionage. The group …
- Adobe premieres a second Patch Tuesday each month to deliver fixes faster | CSO Online
To address the increasing frequency of software vulnerabilities in the era of frontier AI, Adobe is doubling its patch cycle by issuing security updates on …
- ARToken PhaaS exposes EvilTokens' Microsoft 365 phishing toolkit
The ARToken PhaaS platform functions as an affiliate of the EvilTokens toolkit, enabling attackers to execute Microsoft 365 account takeovers through device …
- North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
Threat actors linked to North Korea are distributing malicious npm packages that masquerade as Rollup polyfill tools to steal developer secrets and facilitate …
- FBI Disrupts Widely Used NetNut Residential Proxy Service
The FBI and global partners recently disrupted NetNut, a massive residential proxy network that hijacked over 2 million home devices to mask cybercriminal …
- Breach Roundup: DeepSeek Sparks Browser Ransomware
A new browser-only ransomware technique generated by the DeepSeek large language model can encrypt local files using browser APIs without requiring malware …
- How Hackers Just Dumped Apple’s Tightly Guarded iPhone 18 Pro Secrets on the Dark Web
The iPhone 18 Pro secrets were exposed on the dark web after a cybersecurity breach at Tata Electronics, a manufacturing partner for Apple. The World Leaks …