News

Nebula Security identified and exploited a Linux kernel vulnerability tracked as CVE-2026-43499, named GhostLock, affecting all major Linux distributions since 2011. This use-after-free vulnerability, stemming from a cleanup function in the kernel, allows an…

Operation First Light 2026, funded by China's Ministry of Public Security, resulted in over 5,800 arrests and nearly $300 million in intercepted illicit assets from cybercrime activities across 97 countries from January 15 to April 30, 2026. This…

The article discusses a significant security flaw known as 'GhostApproval' that affects six major AI coding assistants, allowing malicious repositories to exploit approval prompts, potentially leading to unauthorized access and remote code execution.…

The article discusses the evolving landscape of cybersecurity, emphasizing the threats and challenges posed by AI technologies. Key points include the need for organizations to adopt comprehensive security measures, such as securing AI agents and AI-built…

The article discusses "GodDamn Ransomware" which employs the "PoisonX" driver to bypass endpoint defenses. This malware signifies an evolving threat in cybersecurity, using advanced methods to disable security mechanisms and increase its effectiveness. Key…

Mount Royal University (MRU) in Alberta, Canada, suffered a ransomware attack that resulted in the theft and deletion of employee and student data. Discovered on June 17, the attack disrupted internal systems and online services. MRU announced that a…

A new ransomware called 'GodDamn', operated by the group Hyadina, is utilizing a malicious kernel driver approved by Microsoft to disable security software. Hyadina, a ransomware-as-a-service operation, targets various American sectors including healthcare…

Meta has introduced a new AI image generation model, Muse Image, which allows users to create images using the likeness of individuals from public Instagram accounts. Users must opt out of this feature by navigating to their Instagram settings, though…

A new AI Security Charter has been launched, backed by over 70 cybersecurity firms, outlining nine principles for the responsible use of AI in cybersecurity. The principles focus on accountability, transparency, documentation, data handling, security, and…

Over 70 cybersecurity organizations have endorsed a new AI Security Charter, launched by CREST, emphasizing responsible AI use in cybersecurity. The charter includes nine guiding principles focused on accountability, transparency, documentation, data…

Google is removing all Manifest V2 (MV2) browser extensions by August 31, 2026, including popular ad blockers like uBlock Origin. This change is part of Google's push towards Manifest V3 (MV3), aimed at improving security and reducing resource usage for…

A new security vulnerability named **GhostApproval** has been discovered by Wiz, affecting several leading AI coding assistants like Claude Code and Amazon Q Developer. This attack exploits a longstanding issue with symbolic link (symlink) following,…

Microsoft has patched a critical vulnerability in its RoguePlanet Defender that could allow attackers to gain SYSTEM privileges. The issue highlights the ongoing cybersecurity challenges and the importance of maintaining updated defenses. This patch is part…

The article discusses an operation named Lurking Lizard where fake applications, specifically a fraudulent 7-Zip utility and WireVPN, convert user devices into residential proxy nodes without consent. Infoblox's research reveals that the threat actor has…

Google has introduced a new AI video editing feature, Video Remix, in Google Photos, powered by the Gemini Omni model. This feature allows users to easily reshape and transform their videos using simple instructions and a library of templates, eliminating…

A recent survey indicates a significant confidence gap in the security of collaboration tools among European organizations. While 84% of IT professionals in the UK, France, and Germany express confidence in their collaboration environments, only 29% believe…

The PolinRider supply chain attack, attributed to suspected North Korean hackers linked to the Contagious Interview cluster, has been identified as an ongoing campaign impacting developers across platforms like npm, Packagist, and Chrome. Researchers have…

Cybercriminals are increasingly utilizing AI agents and chatbots to conduct cyber-attacks. A report by ESET analyzed 900,000 AI skills in public repositories, finding tens of thousands of suspicious and malicious instances. The report states that the rise of…

Google released a Chrome 150 security update addressing 27 vulnerabilities, including two critical use-after-free flaws in the Ozone and Views components. This update patches 13 use-after-free defects, and highlights a trend where most vulnerabilities were…

Meta has introduced a new AI image tool allowing users to include public Instagram photos in AI-generated images. This development raises privacy concerns as it leverages user-generated content without explicit consent. The tool is indicative of a growing…

The KDDI data breach affected approximately 12.23 million users, with hackers stealing email addresses and around 7.61 million passwords. KDDI confirmed the breach on June 23 and updated the public on the incident on July 6. The hackers exploited…

Spanish startup 8Layers has secured a $1.1 million pre-seed extension round, raising a total of $2.9 million in initial funding. The funding, led by Criteria Venture Tech and Bankinter, comes as 8Layers launched its digital identity protection platform,…

The article discusses the vulnerability of AI agents developed to detect malicious code, highlighting that they can be misled into executing the very threats they are programmed to identify. It examines the implications for cybersecurity, emphasizing the…

A security researcher has identified an undocumented backdoor in various Tenda firmware versions, allowing unauthorized administrative access to devices' web management interfaces. This vulnerability, tracked as CVE-2026-11405, affects Tenda routers,…

Today's cybersecurity update outlines four active exploits detected: 1) CVE-2026-48908 - JoomShaper SP Page Builder allows unrestricted upload of harmful files; 2) CVE-2026-55255 - Langflow has an authorization bypass vulnerability; 3) CVE-2026-56290 -…

The article discusses vulnerabilities related to GhostApproval symlink flaws that may allow malicious repositories to execute code within AI coding agents. This poses significant risks to cybersecurity, especially as organizations increasingly rely on AI…

The article discusses the emergence of fake 7-Zip installers that exploit vulnerabilities by turning users' devices into residential proxy nodes. This malware facilitates unauthorized access and could potentially increase the risk of further cyber attacks.…

This document discusses a critical GitLab patch released on July 8, 2026, which addresses eight security vulnerabilities across various versions (19.1.2, 19.0.4, 18.11.7). The most severe vulnerability is a stored cross-site scripting (XSS) bug,…

Four active critical exploits were detected today, including vulnerabilities in JoomShaper SP Page Builder, Langflow, Joomlack Page Builder, and Adobe ColdFusion. A significant focus is on CVE-2026-0288, a buffer overflow vulnerability in Palo Alto Networks'…

The content details the handler on duty, which is Guy Bruneau, and notes the current threat level as green. It references the ISC Stormcast for July 9, 2026, and provides links to various resources such as classes taught by Dr. Johannes Ullrich, previous…

Google has released a security update for Chrome, addressing 27 vulnerabilities, including two critical use-after-free bugs. These bugs affect memory management in the Ozone and Views components, allowing potential exploitation without user interaction. All…

The content discusses an unusual scanning bot identified in DShield logs, with requests containing the message "HELP ME ESCAPE FROM BELARUS PLEASE." This bot reportedly scans open HTTP and SSH ports, and attempts to brute force SSH logins with default…

Mexico's National Cybersecurity Plan faces its first major challenge with the ongoing FIFA World Cup 2026. Established by the Digital Transformation and Telecommunications Agency, the plan aims to enhance cybersecurity capabilities across the government. As…

A lone attacker orchestrated a rapid breach of a large AWS environment in just 72 hours using AI to exploit multiple cloud weaknesses and stolen credentials for financial extortion. Sygnia, a security firm, detailed how the attacker utilized AI workflows to…