News

The article discusses the rising threat of synthetic identity fraud, which increasingly targets machine identities in cybersecurity. This type of fraud involves creating fake identities that can exploit systems, making it difficult for traditional security…

Google DeepMind has introduced Gemini 3.5 Flash Cyber, an AI model designed for vulnerability hunting and patching, exclusively available to governments and trusted partners. This model aims to identify and mitigate software vulnerabilities efficiently,…

A recent report from Sophos highlights that the rapid adoption of AI tools within enterprises has created a new and significant attack surface for cyber threats. The report notes a staggering 466.7% increase in active AI agents in just one year, with these…

The article discusses a security vulnerability where attackers exploit GitHub Actions Runners to compromise cPanel and WHM servers. It highlights the methods used by attackers, emphasizing the risks associated with utilizing these platforms without proper…

A coding flaw in the KARR Security System, an aftermarket car alarm installed in millions of vehicles, poses serious security risks allowing unauthorized access. Researchers from UC San Diego discovered that all devices share the same authentication key,…

A newly disclosed vulnerability in Adobe's Acrobat Chrome extension, tracked as CVE-2026-48294, allows attackers to access WhatsApp Web chats through a single visit to a malicious website. The flaw, discovered in June 2026, exploits the extension's elevated…

The article discusses challenges and advancements in confidential computing due to artificial intelligence (AI). Despite having addressed issues like cost, speed, and complexity of confidential systems, AI introduces new security risks because AI agents can…

The Raspberry Pi has launched the Touch Display 2, a ten-inch touchscreen with a resolution of 1200x1920 pixels and support for ten simultaneous touch points. Priced at $80, it simplifies device assembly by drawing power directly from the Raspberry Pi,…

Texas-based Upbound Group, Inc. reported a data breach due to cyber incidents resulting in $13 million in fraudulent contract losses, particularly affecting its Acima segment. Hackers accessed non-sensitive customer information, which was allegedly used to…

The article discusses a new malware known as Dolphin X, which is a Windows infostealer and remote access trojan that employs AI to prioritize attack targets. This malware can steal sensitive data from over 300 applications, including cryptocurrency wallets…

This report discusses the critical alert related to the Dolphin X stealer tool, a malware sold on cybercrime forums. Key points include: 1. **Threat Overview**: Dolphin X offers credential stealing and remote access capabilities, targeting primarily Windows…

Google has introduced a new recovery option for users locked out of their accounts, allowing them to use a selfie video for verification. This feature aims to enhance account accessibility and security, particularly for those who may not have access to…

Assaf Keren has been appointed as the new Chief Information Security Officer (CISO) of Meta, succeeding Guy Rosen who held the position since 2022. Keren brings extensive experience from his previous roles as SVP and CSO at Qualtrics and CISO at PayPal. He…

The Nuvem subsea cable, financed and controlled by Google, links Myrtle Beach, South Carolina, to Sines, Portugal, via Bermuda and the Azores, spanning 6,900 kilometers with a capacity of 384 Tbps. This project enhances internet connectivity between the US…

The article discusses a recently patched vulnerability in Apple's 'Hide My Email' feature, which was initially discovered by researcher Tyler Murphy in June 2025. This flaw allowed attackers to access users' real email addresses despite the feature's intent…

GitHub has announced significant changes to its bug bounty program, transitioning from a flexible payment structure to fixed compensation based on severity assessments. This change aims to reduce compensation disparities and administrative overhead. The new…

A critical vulnerability in the RefluXFS Linux file system, present for nine years, allows local users to gain root access on default Red Hat Enterprise Linux (RHEL) installations. Discovered on July 23, 2026, this flaw poses significant security risks and…

A recent GST phishing campaign has been identified targeting Indian businesses, using fake tax refund emails to distribute Remcos RAT malware. Attackers disguise malicious emails as official communication, leading victims to open infected attachments. The…

A recent survey by Proofpoint reveals that 65% of organizations affected by ransomware believe AI has enhanced attack effectiveness. AI tools help cybercriminals create more genuine phishing emails and impersonation attacks, complicating detection. Common…

Google has enhanced its iOS to Android migration tool, making it easier for users to transfer data from an iPhone to an Android device. The new tool now supports a broader range of data categories, including Google account credentials, saved passwords, Wi-Fi…

A recent cybersecurity report by Kaspersky describes the ongoing HelloNet campaign, linked to a suspected Chinese-speaking APT group, which targets large Russian organizations across various sectors, including government and industry. Active since May 2026,…

The article discusses the resurgence of the 'Lampion' banking Trojan in Portugal, which originates from Brazil. This malware exploits the shared language between Brazilian hackers and Portuguese victims, making Portuguese businesses particularly vulnerable.…

Check Point has released a patch for a critical vulnerability in its SmartConsole that allowed unauthorized users to gain full administrative access. The flaw, initially exploited in the wild, posed significant risks to network security. Organizations using…

**Summary of the Cyberattack on Bangladesh Military by DoNot APT**: A live cyber-espionage operation by the DoNot APT group (APT-C-35), suspected to be India-aligned, targets the Bangladesh military using spear-phishing techniques. **Key Points**: **Attack…

The US government updated its cybersecurity advisory on Iranian-linked cyberattacks targeting industrial control systems (ICS) made by companies such as Siemens, Schneider Electric, and Rockwell Automation. Initially released in April, the advisory…

The ISC Stormcast for July 23rd, 2026, is presented by handler Johannes Ullrich. The current threat level is green. Listeners can engage more deeply through various resources, including podcasts, discussions, and SANS classes taught by Ullrich. Additional…

The content discusses critical vulnerabilities in the Ninja Forms WordPress plugin identified as CVE-2026-65048, CVE-2026-65049, CVE-2026-65050, and CVE-2026-65052, affecting over 600,000 sites. The notably severe CVE-2026-65048 is an unauthenticated stored…

A cyberattack on Nichirei, a Japanese frozen-food supplier, disrupted its operations, leading to food shortages affecting major customers like Kentucky Fried Chicken. The attack, attributed to the Russia-linked ransomware group RansomHouse, caused…

The article discusses features introduced by StepSecurity to help organizations manage their GitHub Actions secrets. These features allow users to identify used, unused, and stale secrets, and to determine which can be replaced with OpenID Connect (OIDC)…

The article discusses CVE-2026-8933, a high-severity security vulnerability in Ubuntu affecting versions 24.04, 25.10, and 26.04. Disclosed by Qualys, this local privilege escalation flaw allows unauthorized users to gain root access through a race condition…

The article discusses a new cyber threat known as Sandworm_Mode, which exploits trusted AI tools and CI/CD workflows to conduct malicious activities that appear legitimate. Researchers at Socket Security identified this self-propagating worm that spreads…

A critical vulnerability in the Adobe Acrobat Chrome extension, designated CVE-2026-48294, was disclosed by Guardio Labs, allowing attackers to exploit the extension to silently steal WhatsApp Web chats, contacts, and messages by tricking users into visiting…