News

F5 has released critical security updates for multiple NGINX vulnerabilities, including CVE-2026-42530 and CVE-2026-42055, both with a CVSS score of 9.2. These flaws can lead to code execution and denial-of-service (DoS) conditions. Exploiting these…

Microsoft has confirmed a zero-day vulnerability in its Defender software, tracked as CVE-2026-50656, which enables privilege escalation due to a flaw in the Malware Protection Engine. While a security patch is under development, the issue was brought to…

The UK's National Cyber Security Centre (NCSC) reported that 75% of cyber incidents affecting critical infrastructure in the UK during the past year stemmed from nation-state actors, primarily Russia, China, and Iran. In a speech delivered by CEO Richard…

The Velvet Ant group, linked to China, operated undetected within an organization's network for nearly a decade, as uncovered by Sygnia's incident response team in a campaign named Operation Highland. The hackers leveraged tools and tactics to implant a…

SailPoint has finalized an agreement to acquire Entro, an Israeli firm focused on non-human identity (NHI) and credential security. Valued at approximately $200 million, this acquisition aims to enhance SailPoint's capabilities in identity security,…

Cybercrime is surging in the Asia-Pacific region, driven by the rapid adoption of digital technologies, according to Interpol's latest report. Cybercrime now constitutes 30% of criminal activity in more than half of the surveyed countries. Key findings…

OpenAI has introduced a new feature called 'Scheduled Tasks' for ChatGPT, aimed at enhancing its proactive capabilities. This feature will allow users to schedule tasks that not only send reminders but also monitor the web for crucial updates automatically.…

Microsoft's AI business in China, primarily driven by ByteDance, has achieved significant growth despite geopolitical tensions and US export bans on high-end chips. ByteDance, a major client relying on OpenAI's models via Microsoft Azure, is projected to…

Moxa has revealed two critical vulnerabilities in its NPort serial device servers, particularly affecting devices bridging serial equipment to Ethernet networks. The most severe vulnerability, CVE-2026-10829, involves a stack-based buffer overflow, allowing…

Recent cybersecurity research by FortiGuard Labs reveals a new threat involving AsyncRAT AI lures, which are malicious archives disguised as AI learning resources. Users seeking AI education fall victim to these attacks. The malware typically starts with a…

Apple's WWDC 2026 showcased significant advancements in its artificial intelligence ecosystem through updates to developer tools such as Xcode 27, App Intents, and the Apple Foundation Models. Key highlights include: 1. **Agentic Coding in Xcode 27**: This…

WhatsApp is introducing a 'View Once' feature for text messages, similar to what is already available for photos and videos. Users will be able to send messages that can be read only once, with the text disappearing from both cloud storage and devices upon…

OpenAI has joined the Rust Foundation as a Platinum Member, making an annual contribution of $325,000 and a one-time donation of $275,000, totaling $600,000. This funding aims to support the Rust ecosystem maintainers, enhance the Rust infrastructure, and…

Apple is set to raise its product prices due to significant component shortages caused by the surge in AI development. CEO Tim Cook confirmed in an interview that the demand for memory and storage components has outpaced supply, leading to skyrocketing costs…

A significant cybersecurity breach, dubbed 'FortiBleed,' has revealed admin passwords for approximately 75,000 Fortinet firewalls exposed on the internet. Security researcher Bob Diachenko discovered access to valid Fortinet VPN credentials, which included…

The Acronis Threat Research Unit has revealed a previously unknown espionage campaign named Khmer Shadow, targeting Cambodian defense and public works sectors. The attackers distribute a new malware, NIGHTFORGE, via spear-phishing emails containing…

The article discusses the EU's proactive steps in developing security measures for the upcoming 6G network, dubbed "Shield-6G." This initiative aims to address the anticipated complexities and security challenges posed by increased interconnectedness and AI…

Microsoft Threat Intelligence reported a significant npm supply chain compromise impacting over 140 packages in the mastra scope, initiated through the takeover of the ehindero npm maintainer account. The attacker published a malicious package,…

The FortiBleed campaign has compromised 30,791 Fortinet firewalls and VPN credentials worldwide, affecting organizations across 194 countries, including banks, hospitals, and telecommunications companies. Identified by SOCRadar, the operation involves…

The content is a brief update from the Internet Storm Center (ISC) for June 18th, 2026, featuring Guy Bruneau as the handler on duty and indicating a threat level of green. There is a link to learn more about classes taught by Dr. Johannes Ullrich for SANS,…

This guest diary by Adam Nason examines SSH brute force attack behaviors over three months, analyzing over 20 million attempts logged by a DShield Honeypot. The study correlates these attacks with significant cyber events and geopolitical tensions,…

The 2026 vulnerability forecast from the Forum of Incident Response and Security Teams (FIRST) anticipates a significant increase in disclosed CVEs, reaching around 66,000—marking a 46.3% rise compared to original predictions. This surge is attributed to the…

OpenAI has taken action against two covert influence operations originating from China that misused ChatGPT to impact the US AI policy debate, as detailed in their June 2026 threat report. These operations involved creating misleading narratives about AI and…

The i18next prototype pollution flaw, tracked as CVE-2026-48713, poses a significant risk to the npm ecosystem's translation tools, specifically affecting i18next-fs-backend with a CVSS score of 9.1. The vulnerability allows unauthorized attackers to write…

Zyxel has issued firmware patches for a critical vulnerability in its GS1900 series switches, identified as CVE-2026-7273, which carries a CVSS score of 8.8. This stack-based buffer overflow flaw allows unauthenticated attackers on the same local network to…

The content discusses a newly identified Windows-based cryptocurrency clipper malware that has been affecting users since February 2026. This malware employs clipboard data theft to acquire valuable cryptocurrency information. It uniquely utilizes a portable…

The article discusses the increasing threat of malware attacks on Roblox developers, who are losing entire games to hackers. The attackers use social engineering tactics to persuade developers to execute malware disguised as legitimate software, leading to…

A significant breach has been reported involving Fortinet firewalls, providing Russian-speaking attackers access to major organizations, including Oracle and Chevron. The breach compromised nearly 74,000 Fortinet devices across 194 countries, with plaintext…

SOCRadar has launched a free FortiBleed Exposure Checker, enabling organizations to check if their IP addresses or domains are compromised in the FortiBleed dataset. This dataset reveals a significant leak affecting tens of thousands of Fortinet firewalls,…

The article discusses the rise of the ransomware group INC, which specializes in ransomware-as-a-service (RaaS) and has achieved notable success by targeting vulnerable sectors such as healthcare, where victims face immediate operational pressure to pay…

Microsoft introduced codename MDASH, a multi-model AI-powered scanning system for detecting and remediating software vulnerabilities. Unlike traditional methods that rely on fixed security reviews, MDASH operates at enterprise scale by integrating directly…

The Splunk AI Toolkit has two critical vulnerabilities: CVE-2026-20266, an OS Command Injection issue rated at CVSS 9.1, and CVE-2026-20265, an insecure default domain allowlist rated at CVSS 4.3. Patches are available in version 5.7.4. The OS Command…

The page discusses a critical vulnerability in the Gravity SMTP plugin, tracked as CVE-2026-4020, which currently has a CVSS score of 7.5. The vulnerability allows unauthenticated attackers to access sensitive information via a flawed REST API endpoint. The…

The page discusses critical vulnerabilities in the Cisco Identity Services Engine (ISE) and the ISE Passive Identity Connector (ISE-PIC). Two main vulnerabilities are highlighted: CVE-2026-20181, which allows remote code execution with a CVSS score of 9.1,…

Microsoft has been recognized as a Leader in The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026. The company achieved the highest rankings in the Strategy category and Vision, receiving top scores in critical areas including identity…

The article discusses a Crypto Clipper campaign that exploits fake reviews, AI narrators, and VirusTotal comments to defraud victims in cryptocurrency transactions. The campaign involves the use of social engineering tactics, where attackers manipulate…

Anthropic recently took its AI models, Claude Fable 5 and Mythos 5, offline due to a U.S. government export-control directive barring foreign access. The company had previously warned that these models possess capabilities for both cybersecurity defense and…

This article confirms the existence of a zero-day vulnerability in Microsoft Defender, referred to as RoguePlanet. Microsoft has acknowledged the issue and announced that a patch is currently in development. The article emphasizes the importance of prompt…