News

The weekly roundup from SecurityWeek highlights essential cybersecurity news and developments: 1. Aubrey Cottle, linked to Anonymous, was sentenced to 18 months for a cyberattack on the Texas GOP. 2. KDDI's data breach affected 14 million users. 3. Push…

Sony will stop producing physical game discs for new releases starting January 2028, marking a shift to a fully digital PlayStation ecosystem. In response, GitHub launched a limited-time initiative to burn public code repositories onto CD-ROMs, allowing…

The article discusses two new cybercriminal strategies targeting users: a ClickFix attack spreading malware through a sponsored advertisement on X, specifically targeting Mac users, and a ConsentFix technique that steals Microsoft 365 accounts without…

Chinese firms have recently unveiled two advanced AI models aimed at enhancing vulnerability discovery, raising alarms among cybersecurity professionals. Notably, Zhipu AI's GLM 5.2 model has shown superior performance in vulnerability detection benchmarks…

The article discusses the rise of Qilin as a leading player in the ransomware-as-a-service (RaaS) market, holding approximately 16% market share as of July 2026. Qilin's emergence follows the disruption of other major groups like LockBit and RansomHub,…

The page discusses the situation surrounding the Claude Fable 5 subscription model by Anthropic, which has reset weekly quotas for premium subscribers following its restoration. A free trial period extends until July 7, after which users will need to…

Google Chrome is introducing an auto-pin feature for extensions, addressing the issue of users forgetting about newly installed extensions hidden in a collapsed menu. This new functionality allows extensions to automatically appear in the main toolbar upon…

The article discusses a new partnership between the Vect ransomware group and TeamPCP, a cybercriminal gang specializing in supply chain attacks. This alliance creates a 'new model' of industrialized ransomware, combining large-scale credential theft with…

The article discusses how a member of the European Parliament, involved in investigating spyware issues, became a victim of hacking through the Pegasus spyware. This incident highlights the ongoing challenges in mobile security and the vulnerabilities that…

Claude Fable 5 is now accessible to developers under a subscription until July 7, but usage is limited to 50% of the allowance. Post this date, extra credits will be required for continued access. A model classifier assesses tasks' difficulty and may…

The article discusses the 2026 Vercel breach, which was triggered by an unvetted AI tool that was adopted by an employee. This breach illustrates the emergence of 'Shadow AI', a subset of Shadow IT, posing new risks for enterprises. In this case, attackers…

Medtronic has notified over 3.8 million individuals about a data breach where personal and medical information was compromised. The breach, attributed to the extortion group ShinyHunters, occurred in April 2026, involving the theft of over 9 million records.…

The FBI and Google's Threat Intelligence Group successfully disrupted the NetNut proxy network, which co-opted over two million consumer devices to facilitate cybercriminal activities. The operation targeted the network's infrastructure, seizing numerous…

Peter Stokes, a dual US-Estonian citizen and alleged member of the hacking group Scattered Spider, was extradited to the US following his arrest in Finland. At 19 years old, he faces multiple charges including conspiracy and fraud related to a cyberattack on…

JFrog's research has revealed a supply chain attack attributed to the Lazarus group from North Korea, involving malicious npm packages that mimic legitimate Rollup polyfill packages. These six fake packages, designed to steal credentials and crypto wallet…

Google, in collaboration with the FBI and Lumen, has disrupted NetNut, a large residential proxy network that illegally routed internet traffic through compromised home devices. This operation follows a previous action against the IPIDEA network and aims to…

Google, in collaboration with the FBI, has dismantled the NetNut residential proxy network, which consists of over 2 million compromised Android devices. This operation targeted malware-infected devices that the network operator, linked to Israeli company…

The Silent Swap crypto clipper is a malicious browser extension recently identified that intercepts cryptocurrency transactions by tampering with the clipboard. It operates as a fake Google Notes extension, stealing digital assets by replacing copied wallet…

The article discusses the PamStealer malware, which targets macOS devices by utilizing counterfeit websites resembling legitimate Maccy sites to steal user credentials, particularly login passwords. The malware manipulates users into entering sensitive…

A Comparitech analysis of email security across 5,849 domains highlights significant vulnerabilities in the government and healthcare sectors, which scored poorly on essential email authentication protocols (SPF, DMARC, DKIM, MTA-STS). Government domains…

Two critical vulnerabilities in the AI code editor Cursor, identified as CVE-2026-50548 and CVE-2026-50549 with a CVSS score of 9.8, can lead to remote code execution (RCE) on the underlying operating system. The first issue involves the sandbox's security…

On July 2, 2026, kernel.org experienced a significant outage due to a configuration error during the addition of a new primary mirror by the Linux Foundation. This misconfiguration caused all hosted kernel files to become inaccessible, resulting in HTTP 404…

On July 2026, the EU Court upheld a €4.1 billion fine against Google for antitrust violations related to its Android operating system. The ruling dismissed Google's final appeal, confirming that it abused its dominant market position by requiring default…

A new Android Remote Access Trojan (RAT) named Glitch SPY has been detected, targeting individuals in Poland through fake rental property websites. It is delivered via a loader that disguises itself as a rental app, requesting permission to install from…

Security analysts have identified the ToddyCat APT group utilizing the Umbrij tool to hijack corporate Gmail accounts, bypassing standard security measures through OAuth token theft. This malware operates in headless mode to conduct unauthorized access to…

A critical vulnerability, designated CVE-2026-48282, in Adobe ColdFusion allows for arbitrary code execution without user interaction. This flaw exploits a path traversal issue, enabling attackers to gain full control of affected servers remotely. The…

A critical vulnerability, CVE-2026-57517, has been disclosed in Control Web Panel, with a CVSS score of 9.8. It allows for blind SQL injection via the 'userRes' parameter in versions prior to 0.9.8.1225, potentially enabling remote code execution by…

Two critical vulnerabilities have been disclosed in UltraVNC's repeater tool's HTTP admin server, impacting versions through 1.8.2.2. The first vulnerability, CVE-2026-7840, allows arbitrary code execution via a repeater HTTP server global buffer overflow…

WatchGuard has issued patches for seven critical vulnerabilities in its Firebox appliances, with the most severe being CVE-2026-13368, which allows unauthenticated remote code execution (RCE) with a CVSS score of 9.2. This flaw can expose the entire network…

Apache has addressed nine vulnerabilities in ActiveMQ (CVE-2026-54475) with version 6.2.7, notably affecting denial-of-service and temporary destination takeover. These issues are significant as ActiveMQ is widely used in Java applications and often exposed…

Icinga 2 has released patches addressing three critical vulnerabilities detected on June 29, 2026. Two of these allow unauthenticated attackers to take over or crash the monitoring server, while the third affects authenticated API users. The reported…

CISA has issued an advisory concerning five critical vulnerabilities in StoneFly Storage Concentrator, which could allow unauthenticated attackers to execute root commands and compromise sensitive data. Two of these vulnerabilities have a CVSS score of 10.0,…

A critical Microsoft Exchange vulnerability, tracked as CVE-2026-45504, allows low-privilege users to read arbitrary files from an Exchange server. Scoring 8.8 on the CVSS scale, this flaw is significant as it can expose sensitive data held by Exchange…

The article discusses a study by the Australian Institute of Criminology revealing that cybercrime rates in Australia decreased in 2025, with only 45.1% of respondents reporting victimization, down from 47.8% in 2024. However, business owners, particularly…

Palo Alto Networks' recent article discusses the addition of WebAuthn support to a browser-based Remote Desktop Protocol (RDP) client. This innovation makes it the first non-Windows RDP client to implement WebAuthn redirection. The team faced challenges with…