News

The article discusses the expansion of the ORB network by the China-linked group UAT-7810, which involves the deployment of new LONGLEASH malware. Key points include the significance of this development in cybersecurity, particularly concerning network…

The article highlights the recent launch of SpaceXAI's Grok 4.5 model, which has undergone extensive testing and is set for global release on July 9, 2026. Key features include its impressive architecture built on a 1.5-trillion parameter foundation and…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added vulnerabilities related to Adobe ColdFusion, Joomlack Page Builder, Langflow, and JoomShaper SP Page Builder to its Known Exploited Vulnerabilities catalog. The key vulnerabilities…

The content discusses the rollout of OpenAI's GPT-5.6 series, featuring three models: Sol, Terra, and Luna, each tailored for distinct needs. Sol is the flagship model with advanced intelligence and robust safety features. Terra balances performance and…

The article discusses the emergence of phantom squatting, a cybersecurity threat where attackers register domains generated erroneously by AI tools like chatbots. This method allows malicious websites to bypass traditional security measures, as newly…

The UK's National Cyber Security Centre (NCSC) has announced plans for the 'Cyber Shield', an AI-powered national cyber-defense initiative designed to counteract threats posed by AI-enabled cyberattacks. Key features of this project include the use of…

Estonia plans to assign official government ID numbers to AI agents, enabling their use in government interactions. This initiative, spearheaded by Estonia's advisory council, aims to ensure that AI can perform administrative tasks while maintaining…

The article reports on the detection of critical vulnerabilities today, including CVEs related to JoomShaper SP Page Builder and Adobe ColdFusion. It highlights a malicious Chrome extension campaign analyzed by D3Lab, which targeted Italian users through…

The content discusses the end of life for Ubuntu 25.10, a non-LTS release, which is scheduled for July 9, 2026. Users are urged to upgrade to Ubuntu 26.04 LTS to continue receiving security updates and access new features. The upgrade process is…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is deploying Anthropic’s Mythos AI to scan federal code for vulnerabilities, aiming to detect potential security flaws before they can be exploited by hackers and foreign intelligence. The…

The article discusses the Biden administration's Broadband Consumer Labels initiative, which aimed to enhance transparency in internet billing. However, the FCC plans to roll back these measures, allowing ISPs to obscure fees and bypass itemization…

The Accenture breach, reported on July 6, 2026, involves a claim by a threat actor named '888', announcing the sale of 35GB of sensitive data, including source code and cloud access credentials, on a cybercrime forum. Accenture acknowledged the breach but…

The article discusses a new cybersecurity threat called "HalluSquatting," which exploits vulnerabilities in large language models (LLMs) used in AI coding assistants. Prompt injections have become a significant threat, as LLMs struggle to distinguish between…

A 15-year-old vulnerability, known as GhostLock, has been identified in Linux distributions that allows root and container escapes, significantly endangering cloud security. The flaw is a crucial concern for cybersecurity professionals, highlighting the…

The page discusses a critical security alert regarding active exploits, specifically detailing four new vulnerabilities associated with CVEs affecting various software. Notable mentions include a dangerous upload vulnerability in JoomShaper's SP Page Builder…

The article reports on CISA's addition of four actively exploited vulnerabilities in Adobe, Joomla, and Langflow to its Known Exploited Vulnerabilities (KEV) catalog. This includes details on the nature of these flaws and emphasizes their exploitation in…

The report highlights critical vulnerabilities affecting WordPress due to outdated PHP versions and neglected plugins. Key findings include: 1. **Active Exploits**: Four active vulnerabilities were detected today, including those in JoomShaper and Adobe…

The content discusses the ISC Stormcast for Wednesday, July 8th, 2026, featuring handler Xavier Mertens. It reports a current threat level classified as green, indicating a low threat status. Links are provided to learn more about classes taught by Dr.…

The document discusses an active banking fraud operation in Mexico named REF6045, which employs a PowerShell toolkit called SCMBANKER to facilitate fraud against customers of banks and fintech services. SCMBANKER allows operators to monitor banking sessions,…

The article discusses GitHub's new public monitoring feature, aimed at scanning for leaked secrets across all public content on github.com for enterprise users. Key points include its functionality, what it cannot detect, and strategies for preventing data…

Unit 42 researchers from Palo Alto Networks have uncovered a financially motivated malware campaign primarily utilizing the Vidar Stealer and XMRig cryptocurrency miner. Attackers leverage malvertising techniques to lure victims into downloading fake…

A phishing campaign targeting marketing professionals has been uncovered, utilizing fake job recruitment emails from big brands like Coca-Cola, Netflix, and FIFA to steal Google credentials. This sophisticated scam employs nested redirects to hide phishing…

In July 2026, Varonis disclosed a critical vulnerability named "Rogue Agent" in Google's Dialogflow CX AI platform. This flaw allowed attackers to potentially seize data from AI agents by exploiting the Code Blocks feature, which could facilitate persistent…

Spanish authorities arrested a suspected collaborator of the pro-Russian hacktivist groups CyberArmy of Russia Reborn (CARR) and Z-Pentest. The suspect, detained in Palencia, faces charges including collaboration with terrorist organizations and computer…

The article discusses a scam on Reddit and Discord where scammers use social engineering tactics to steal accounts. The scam starts with a direct message claiming someone reported the victim's account or that the victim accidentally reported someone else.…

A U.S. government entity reportedly paid $1 million in ransom to the Kairos cyber extortion group following a data breach that occurred in May 2025. Initially, the attackers demanded $3 million, but through negotiations, they settled for $1 million after the…

The article discusses the emergence of malware packages like RedWing MaaS designed for Android bank fraud, which are rented out via platforms like Telegram. The piece highlights how sophisticated malware has become, allowing cybercriminals to easily access…

The article discusses a vulnerability in Google Dialogflow CX that could have allowed attackers to hijack chatbots. This rogue agent flaw poses significant security risks as it can compromise the interactions managed by AI-driven chat systems. The potential…