News

The article discusses a new attack method called the "BioShocking Attack," which exploits AI browsers to leak user credentials. This attack poses significant risks to user privacy and security by manipulating browser functionalities to extract sensitive…

A multi-stage malware campaign targeting the hospitality sector, particularly hotel staff in Europe and Asia, has been active since April 2026. Attackers employ phishing techniques using fake attachments to bypass email security and install a persistent…

The article reports that over 300 UK firms experienced ransomware attacks in the past year, with small and medium-sized enterprises (SMEs) being the most affected. The City of London Police's data indicates that the number of reported incidents was around 26…

The article discusses a critical security vulnerability in Progress Kemp's LoadMaster system, which could allow attackers to execute root commands without authentication. It emphasizes the importance of addressing such vulnerabilities in API security to…

The identified malware, STOCKSTAY, is linked to the Russian threat actor Turla, primarily targeting Ukrainian military and Italian diplomatic entities. It utilizes spear-phishing emails with malicious RDP files and WinRAR exploits (CVE-2025-8088) for…

Apple has released updates to address over 30 vulnerabilities in its iOS, macOS, and Safari platforms, which include bugs discovered through AI techniques, particularly in the WebKit framework. These updates are crucial for ensuring the security of Apple's…

Quantifind has raised $200 million in a growth funding round, bringing its total funding to nearly $320 million. Led by Summit Partners, previous investors included Citi Ventures and S&P Global. Based in Palo Alto, CA, Quantifind offers AI-based risk…

A major cyber espionage campaign by a group identified as CL-STA-1062, suspected to involve Chinese-speaking hackers, has compromised at least ten organizations across Southeast Asia, specifically targeting critical energy infrastructure and government…

The article discusses the launch of OpenClaw, a new agentic AI app now available on iOS and Android. This app allows users to grant AI deep system permissions, enabling it to perform tasks autonomously by accessing device features like the camera, calendar,…

Critical vulnerabilities have been discovered in Daktronics controllers, impacting highway signs and digital billboards. A cybersecurity researcher identified three key issues: a path traversal exploit, an authenticated file upload vulnerability, and the use…

The article discusses a critical vulnerability identified in the Oracle E-Business Suite, designated as CVE-2026-46817, which is currently being actively exploited. It emphasizes the importance of addressing this flaw to prevent unauthorized access and…

The article highlights the release of the iOS beta version of the AI-driven coding tool, Cursor. This mobile application allows developers to remotely connect to their development machines, enabling them to issue tasks, monitor progress, and merge code from…

A data breach at Tata Electronics led to a significant leak of confidential information regarding the iPhone 18 Pro and Pro Max, including supplier lists and device specifications. The hackers have begun releasing internal documents on the dark web after…

WhatsApp has introduced a new 'Usernames' feature aimed at enhancing user privacy by allowing individuals to communicate without sharing their phone numbers. Users can reserve their usernames starting this week, with the official feature launching later. The…

In June 2026, WSO2 patched seven vulnerabilities in its API platform, including the critical [CVE-2026-5430](https://securityonline.info/cve-watchtower/?cve_detail=CVE-2026-5430), which scores 10/10 for allowing JWT authentication bypass. This vulnerability…

The report details a session led by Rob VandenBrink, highlighting the current threat level as 'green'. A podcast titled 'ISC Stormcast For Tuesday, June 30th, 2026' is available for listeners. Additionally, there are links to SANS classes taught by Dr.…

Synology has resolved three critical vulnerabilities in its MailPlus Server, particularly highlighting CVE-2026-13136, which has a CVSS score of 10. This vulnerability enables remote attackers to read/write files and execute denial-of-service attacks. Other…

Developers have patched six high-severity vulnerabilities in the wolfSSL embedded SSL library, which include a critical X.509 trust-chain bypass and dangerous heap buffer overflows. Immediate updates are necessary to prevent potential remote code execution…

The EVoke Charging Station Management System has four critical vulnerabilities with a highest severity score of 9.4, allowing unauthorized access and disruption of charging services. The main vulnerabilities include authentication bypass and insufficient…

**Critical Alert: Cacti Vulnerabilities Summary** **Product:** Cacti **Number of Vulnerabilities:** 4 (including CVE-2026-39893, CVE-2026-39948, CVE-2026-39955, CVE-2026-39938) **Severity Rating:** High (9.3 to 9.8, Critical) **Key Issues:** 1.…

WhatsApp is introducing usernames later this year, allowing its 3 billion users to connect without sharing phone numbers. Users can reserve their usernames now to avoid name overlap at launch, enhancing privacy by preventing strangers from accessing personal…

An independent security researcher uncovered 14 vulnerabilities in Indian government systems, including critical ones that could have compromised personal data of millions. Key findings included poor access controls on government education and civil service…

A recent article discusses innovative clothing designs aimed at evading facial recognition technology. Researcher Bill Swearingen proposes the creation of graphic tees and other garments with patterns that can confuse AI models used in surveillance systems.…

Nation-state actors, particularly from Iran, Russia, and China, are increasingly targeting water systems worldwide, leveraging weak passwords and exposed PLCs rather than sophisticated malware. Research from DomainTools highlights that these attacks, dating…

The article discusses a malicious Chrome extension named 'Perplexity', which intercepts user searches and input in the address bar, posing a significant security threat. It outlines how the extension compromises user privacy, potentially allowing…

Microsoft Threat Intelligence has identified a malicious Chromium extension posing as an AI-powered search tool, specifically imitating Perplexity AI. The extension was created to intercept search queries and collect user data by routing them through a…

WhatsApp is introducing usernames to enhance user privacy by allowing users to share their identities without disclosing personal phone numbers. This change aims to address security concerns and increase safety in communications on the platform.

WhatsApp is launching a new username feature that allows users to communicate without revealing their phone numbers. This update caters to users who may be hesitant to share their phone numbers in various scenarios, such as group chats or when meeting…

The article discusses a cyber threat attributed to the Mustang Panda group, revealing their use of Zoho WorkDrive as a command channel to launch attacks against the Indian government. This represents a novel approach, leveraging legitimate software to avoid…

OpenAI has unveiled GPT-5.6 Sol, a new advanced model in its GPT-5 series, specifically tailored for cybersecurity tasks. Access is currently limited to selected partners, a decision influenced by the US government. The new model is described as the most…

In the latest episode of the Lock and Code podcast, host David Ruiz discusses the concept of algorithmic wage discrimination with UC Irvine law professor Veena Dubal. The episode highlights how companies like Uber and Amazon utilize data-driven models to…