News

Mozilla has announced a temporary summer upgrade for its Firefox built-in VPN service, eliminating the previous 50GB monthly data cap and expanding the number of available server countries from 4 to 26 until August 31. This unlimited data offer is designed…

The article discusses the analysis of a suspicious JPEG file with malicious content, focusing on identifying potential custom encodings in its BASE64 strings. Didier Stevens presents findings using his tools, highlighting the prevalence of BASE64 characters…

The article discusses the discovery of a new espionage group, OP-512, identified by ReliaQuest Threat Research. This group exploits vulnerabilities in Internet Information Services (IIS) servers, utilizing a custom web shell framework with unique…

The Malwarebytes blog article summarizes the notable cybersecurity events from June 8 to June 14, 2026. Key points include: iPhones set to lose value for thieves due to improved security measures. Fake verification pages targeting Steam users lead to account…

The Gentlemen ransomware group emerged in September 2025 and has quickly become the second most prolific ransomware operation by targeting 483 victims across 66 countries, with 380 of these incidents occurring in 2026 alone. Their success is attributed to…

The active UNC3753 vishing campaign targets US law firms and financial services, utilizing social engineering and remote access tools to steal sensitive data. The attackers initiate the scheme with generic invoice emails to establish trust, followed by phone…

The article discusses a new scam, Sniper Dz, which targets users in the MENA region using deceptive Facebook offers and browser alerts. It highlights the technique of social engineering employed by the scammers to trick users into providing sensitive…

Palo Alto Networks has issued a warning regarding the active exploitation of a vulnerability in PAN-OS GlobalProtect VPN. The flaw poses a significant risk to organizations, encouraging immediate attention to apply available patches. The advisory highlights…

The Payroll Pirate campaign targets corporate finance departments, focusing on stealing salary payments by compromising HR and payroll accounts. Attackers utilize sophisticated phishing tactics, including AiTM session hijacking, to bypass MFA and intercept…

A critical alert highlights two severe remote code execution (RCE) vulnerabilities in FreePBX, affecting the Superfecta module and User Control Panel (UCP). Both vulnerabilities, rated with a CVSS score of 8.6, allow authenticated attackers to gain control…

The page discusses a new export control directive affecting Anthropic's Claude AI models, resulting in their global deactivation due to security vulnerabilities. Affected users can apply for prorated refunds if they subscribed or upgraded between June 9 and…

The Linux Kernel 7.1 has been released, focusing on stability improvements and driver updates. Key enhancements include minor updates for display, network, and audio drivers, alongside fixes for networking utilities and architectural changes for memory…

Microsoft is rolling out updates to built-in applications for Windows 11 through the Windows Insider program. Among the apps being updated are Calculator, Camera, Clock, Media Player, Paint, Photos, and Sound Recorder. Key improvements include more accurate…

Meta is implementing a token minimization strategy to control skyrocketing AI usage costs, which are projected to exceed billions of dollars by 2026. The company plans to set AI budget caps and establish token usage limits in response to high employee…

The U.S. government has issued an export control directive affecting Anthropic's Claude Fable and Mythos 5 AI models due to national security concerns, leading to a suspension of foreign access to these technologies. This move comes in light of…

The page features an ISC Stormcast update for June 15th, 2026, with the handler on duty, Jan Kopriva. It highlights a current threat level categorized as green. Additional resources include links for learning about classes taught by Dr. Johannes Ullrich at…

The content focuses on the ongoing exploitation of the WinRAR vulnerability CVE-2025-8088, targeting Ukrainian organizations despite a patch being released in 2025. Attackers use NTFS Alternate Data Streams to deliver malicious payloads through RAR files…

This report highlights a critical security alert regarding the detection of active exploits, specifically referencing several vulnerabilities between June 8 and June 14, 2026. It details that the Cybersecurity and Infrastructure Security Agency (CISA) has…

A critical vulnerability, tracked as CVE-2026-48062, has been discovered in the CodeIgniter framework, which affects many PHP web applications. This flaw has a CVSS score of 9.8 and allows attackers arbitrary code execution due to insufficient validation in…

The **Security Affairs Malware Newsletter Round 101** provides a curated collection of notable articles and research pertaining to malware threats and developments. Key highlights include insights into various malware types such as IronWorm, Miasma, and…

The Security Affairs newsletter Round 581, authored by Pierluigi Paganini and released on June 14, 2026, features top security articles focusing on various cybersecurity topics including vulnerabilities, malware, and exploits. Key highlighted articles…

The article discusses the redesign of Apple Pay in iOS 27, emphasizing enhanced user experience through improved mobile payment functionalities. Key improvements include intuitive swipe gestures for switching between cards and a sophisticated grid layout…

Oleksii Lytvynenko, a Ukrainian extradited from Ireland, pleaded guilty in the U.S. for conspiracy to commit wire fraud connected to the Conti ransomware attacks. Lytvynenko was involved in attacks that encrypted victims' data and demanded Bitcoin ransoms…

GitHub is implementing significant changes in NPM version 12 to reduce the risk of supply chain attacks. Scripts from dependencies will no longer execute automatically on 'npm install' unless explicitly allowed by users, responding to recent security…

The U.S. Commerce Department has ordered Anthropic to suspend access to its AI models, Fable 5 and Mythos 5, for all foreign nationals, including its own employees. This directive, which Anthropic claims lacks transparency and specific evidence, has led the…

The article reports a critical vulnerability in Splunk Enterprise that allows attackers to execute code without authentication. This flaw poses a significant risk for organizations using the software, as it can lead to unauthorized access and control over…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Oracle PeopleSoft Enterprise PeopleTools, identified as CVE-2026-35273 (CVSS score 9.8), to its Known Exploited Vulnerabilities (KEV) catalog. This flaw…

Anthropic, an AI company, has taken its advanced AI models, Fable 5 and Mythos 5, offline to comply with a U.S. government directive aimed at blocking access to foreign nationals. This action follows an executive order by former President Donald Trump,…

The article discusses the U.S. government's order for Anthropic to suspend access to its AI models, Fable 5 and Mythos 5, for foreign nationals. This action is linked to national security concerns surrounding artificial intelligence and its potential…

A critical vulnerability identified as CVE-2026-48558 in SimpleHelp remote management software poses serious security risks. This flaw allows unauthenticated attackers to bypass authentication mechanisms and gain administrative control. The vulnerability is…

This alert discusses critical vulnerabilities identified in the Squid proxy software, including CVE-2026-47729 (out-of-bounds read) and CVE-2026-50012 (heap-based buffer overflow) that threaten system security. Administrators are urged to apply the latest…

On June 11, 2026, a significant supply-chain attack on the Arch User Repository (AUR) was reported, affecting over 400 community packages which were hijacked to deliver malware. This exploitation demonstrates how attackers can compromise open-source…