News

Nvidia and a coalition of technology and cybersecurity companies have launched the Open Secure AI Alliance to develop open source tools for securing AI systems. The initiative, aligned with the Linux Foundation's Akrites project, includes major participants…

The SourTrade malvertising campaign uses innovative techniques to build malware within victims' browsers without exposing the complete malware payload on the network. Active since 2024, SourTrade mimics well-known trading platforms to lure users into…

Coca-Cola has confirmed a ransomware attack on its subsidiary Fairlife, leading to a data breach. The company paused production at Fairlife facilities in the U.S. for an investigation after the Anubis ransomware group claimed to have stolen 1 TB of data and…

Research from Depthfirst highlights a critical remote code execution (RCE) vulnerability in GitLab, resulting from two memory corruption bugs in the Oj JSON parser. These vulnerabilities affect authenticated users who can push to projects and view commit…

The Electronic Frontier Foundation (EFF) reviewed major smart wearables and found that most lack essential privacy protections and transparency. Despite the growing use of devices like smartwatches, rings, and bands, only Apple and Google publish…

Beelzebub, an AI-native cybersecurity company based in Milan, has raised €3 million (approximately $3.4 million) in seed funding led by United Ventures, totaling $3.8 million since its founding in 2025. The company has developed a platform that utilizes red-…

Mobile devices pose significant security challenges as they operate beyond organizational security perimeters, often housing vulnerable components within applications. Lookout's CEO highlighted the WolfSSL vulnerability, prevalent on over a billion devices,…

The article discusses the Cruciferra Crypter, a malware tool that employs techniques such as Bring Your Own Vulnerable Driver (BYOVD) and process ghosting to evade detection within Windows systems. The focus is on the strategies used by modern malware to…

A cybersecurity alert highlights ongoing attacks where threat actors compromise public Wi-Fi gateways to target traveling corporate employees' Microsoft 365 accounts. The attackers employ DNS poisoning to redirect users to fraudulent sites for credential…

The article discusses the cybersecurity risks associated with wearable technologies, emphasizing the complexity of their ecosystem, which includes devices, companion apps, and cloud services. Key points include the extensive risk posed by companion apps,…

The article by Johannes Ullrich discusses Java Spring Boot's '/actuator/heapdump' endpoint used to gather application debug information, noting its potential to expose sensitive data such as API keys and database passwords. The author observes unusual…

Anthropic has launched Claude Opus 5, a more affordable alternative to its high-end Fable 5 AI model. Opus 5 is particularly effective at identifying software vulnerabilities, nearly matching the capabilities of Mythos 5 but falling short in exploit…

A recent report by Halcyon reveals that ransomware groups are increasingly employing techniques to shut down endpoint detection and response (EDR) tools before initiating attacks, now a common practice among the most proactive ransomware groups. In Q2 2026,…

DentaQuest, a dental benefits administrator, has notified millions of individuals that their personal and dental health information may have been compromised in a data breach discovered on May 20, 2023. Investigations revealed unauthorized access from May 17…

The article discusses the use of Telegram by the cyber threat group 'TELESHIM' for command and control operations targeting Middle Eastern governments. It highlights vulnerabilities in execution through common communication platforms, stressing the need for…

A public proof-of-concept has been released for CVE-2026-61511, a pre-authentication Remote Code Execution (RCE) vulnerability in vBulletin, allowing unauthenticated attackers to execute PHP on servers via a math-parsing flaw. The vulnerability affects…

Zscaler ThreatLabz revealed the TELESHIM malware, which targets government entities in the Middle East using Telegram for command and control. The attackers employ DLL side-loading techniques, hiding malicious payloads within legitimate software. The malware…

GitHub has implemented a 3-day cooldown for its Dependabot service to help users avoid the adoption of vulnerable packages in their software supply chains. This measure aims to enhance security by preventing the rapid use of potentially harmful dependencies.…

The SOCRadar Dark Web Team has uncovered a series of alleged data breaches involving various sectors, including healthcare and military. Key findings include: 1. **Transtreme/HealthNet-CMC/Aetna-CA Data Breach**: Claims of exposure involving 1.16 million…

The RenPy Loader is a malware threat that disguises itself within fake game and software installers. It operates through a multi-stage infection chain, ultimately delivering the Amatera Stealer which targets sensitive information including passwords and…

This article summarizes key cybersecurity events from July 20 to July 26, 2026. Highlights include various scams such as TikTok resin art fraud and a Call of Duty Mobile scam aimed at stealing player accounts. Security issues faced by major entities like…

APT42, an Iranian-linked group also known as TA453, has enhanced its TAMECAT backdoor using AI for spear-phishing targeting notable figures in defense, government, and the nuclear sector. Their techniques include social engineering through believable…

The decline in organic search traffic for digital publishers is primarily attributed to Google's AI Overviews, which scrape original content and provide AI-generated summaries directly in search results. This trend has prompted major media entities like…

A report has linked 148 ransomware attacks to Italian organizations in the first half of 2026, with manufacturing being the most affected sector. Approximately 25 claims were reported per month, leading to the exfiltration of over 13,400 GB of data, though…

Samsung's One UI 9 introduces stricter lockscreens security measures, discontinuing unlimited unlock attempts. After 13 consecutive incorrect passcode entries, the device becomes permanently locked, requiring a factory reset that leads to total data loss if…

Atlanta-based medical business management company MCBS experienced a significant data breach affecting over 1.2 million individuals after being hacked in September 2025. The breach involved access to personal information, including names, addresses, SSNs,…

This article discusses a misconfiguration issue with Claude AI that led to shared conversation links being indexed by Google, exposing sensitive user data. Despite users believing shared links were private, search engines were able to crawl and index these…

Microsoft's recent update, Windows 11 Build 26300.8935, optimizes the deletion of large fragmented files, reducing the time required for this process. This update rolled out on July 20, 2023, but will be gradual, so not all users will notice the change…

Intel plans to reintroduce Hyper-Threading in its upcoming Coral Rapids Xeon server CPUs, which are expected to launch in 2028. During a recent earnings call, CEO Lip-Bu Tan highlighted strategies to regain market share in CPU markets lost to competitors…

The EU has accused TikTok of violating the Digital Services Act (DSA) by failing to protect the privacy of underage users. Key issues include allowing minors to have public accounts, which exposes their content to anyone online, and promoting videos of 16-…

Qualcomm is set to raise prices across its silicon portfolio by at least 10% starting September 1, 2026, due to increasing supplier costs. This increase affects a wide range of products including mobile processors, wearable tech, and IoT hardware. The…

The content features a post from Johannes Ullrich regarding the ISC's threat level, which is currently green. It promotes various resources offered by SANS, including a podcast for July 27, 2026, and links to classes that Ullrich is teaching. Users are…

The weekly threat intelligence briefing from July 20-26, 2026, highlights a severe increase in cybersecurity vulnerabilities, with 2,887 new vulnerabilities reported, including 407 classified as critical. Six actively exploited CVEs were flagged by CISA,…

CVE-2026-49176 is a critical elevation of privilege vulnerability in Windows WalletService that allows standard users to gain SYSTEM rights. The flaw, rated with a CVSS score of 7.8, affects multiple versions of Windows 10, including 1607 and later. It…

The Cruciferra crypter service, identified by Proofpoint, is an advanced malware-packing tool that allows multiple cybercriminal organizations to conceal and deliver malware, primarily remote access trojans (RATs) and infostealers. The service targets…

This article discusses security scans targeting the ESAFENET CDG 3 Document Management System, which is associated with weak logins. The product, aimed primarily at the Chinese market, is vulnerable to basic security threats like SQL Injection, XSS, and uses…

The Security Affairs Malware Newsletter Round 107, published by Pierluigi Paganini on July 26, 2026, provides an overview of significant malware-related articles and research. It covers various new threats and techniques related to malware, including the…