News

A newly disclosed zero-day vulnerability in GeoServer allows for SQL injection and potential remote code execution (RCE). Discovered by researcher q1uf3ng, the flaw has yet to receive a CVE identifier and is already being actively exploited, with hundreds of…

Apple has submitted a new commission proposal to the U.S. District Court in its ongoing legal dispute with Epic Games, proposing a fee structure for developers that use external website payment links in their apps. The suggested rates range from 5% to 15%,…

Microsoft is instituting a feature freeze for Microsoft 365 applications on Windows 10, effective with version 2608, which will be the last to feature new updates. Users will continue to receive critical security updates until October 10, 2028, after which…

A critical vulnerability in the User Profile Builder plugin for WordPress, tracked as CVE-2026-15826, poses a severe risk to over 40,000 sites by allowing unauthenticated attackers to log in as administrators. This security flaw has a maximum CVSS score of…

Microsoft plans to merge its consumer and enterprise Copilot applications into a unified platform by the end of Q3, establishing the Copilot Super App. This move aims to integrate various capabilities like AI-driven coding and conversational features to…

Apple has warned users in over 110 countries about targeted mercenary spyware attacks, indicating that some users may be compromised. This spyware, developed by private firms like NSO Group, is used for targeted surveillance, primarily affecting high-profile…

Mozilla has rotated the GPG signing key for Firefox and Thunderbird on Linux due to a previously used subkey being unintentionally committed to a private GitHub repository. Although an audit revealed no unauthorized access to the key, Mozilla has not…

Google's Gemini AI assistant app has surpassed 1 billion monthly active users, making it the company's fastest-growing product. This accomplishment was announced by CEO Sundar Pichai and follows significant growth in user engagement, with daily active users…

Recent issues with VLC media player on Windows 11 have caused audio playback failures, freezing for thirty seconds before showing file-opening options. The VLC development team identified the root cause as an error from Microsoft Defender, which incorrectly…

Delta Air Lines is investigating a fake WiFi network on Flight 591 from Las Vegas to Atlanta, suspected to be created by an attendee of the DEF CON hacker convention. The unauthorized network, named 'Delta WiFi Fast', was identified by the crew, who…

OpenAI has launched a preview of the ChatGPT desktop application for Linux, specifically supporting Ubuntu, Debian, and Fedora distributions. Users will have access to features like ChatGPT, Codex, and Work, with data synchronization possible across devices.…

SpaceXAI has launched the Grok 4.6 AI model series which enhances capabilities for complex, long-horizon tasks in software engineering and interactive visual projects. The model benefits from extensive training on reasoning pathways, software repositories,…

Recent changes by Microsoft and Google to phase out Manifest V2 (MV2) extensions have led to significant concerns for users relying on ad blockers like uBlock Origin. Firefox, however, retains essential features such as the webRequestBlocking API, allowing…

Google is testing a new AI-exclusive mode for its search engine with select users. This mode replaces the traditional search button with an AI option, prioritizing AI-generated responses for user queries while still displaying conventional search results…

The article features an interview with Cezary Piekarski, the Chief Information Security Officer (CISO) of Standard Chartered, discussing the evolving role of CISOs in addressing cybersecurity challenges within the financial sector. Piekarski emphasizes the…

Dutch officials have reported that CVE-2026-65400, a severe macOS vulnerability, is being actively exploited, allowing attackers to gain full control of Macs by executing malicious code. This vulnerability is linked to the macOS screen sharing feature and…

The National Institute of Standards and Technology (NIST) is addressing the rising volumes of software vulnerabilities, exacerbated by AI-driven research and scanning. An RFI has been issued to seek public feedback on integrating AI into the management of…

Apple has issued warnings to hundreds of users across 110 countries regarding potential targeted attacks from mercenary spyware, which threatens individuals due to their roles or activities. The alerts, part of a program established in 2021, notify users…

A data breach affecting the Scottish government's Crown Office and Procurator Fiscal Service (COPFS)has resulted from a contractor's leak of personal information of government employees. The breach was linked to an online data maturity assessment facilitated…

Researchers have confirmed that the ExfilSquad data extortion group has exfiltrated sensitive data from at least 13 organizations across various sectors, including government and education, with experts validating the group's claims about their access.…

The article discusses why boards often underestimate technology risks and outlines the critical need for awareness and proactive management. Key points include that many essential technology investments do not yield immediate visible returns, making them…

Cloudflare has announced new capabilities for its Model Context Protocol (MCP) to enhance security around AI agents. Traditional human-controlled resource permissions are at risk due to the rapid decision-making ability of AI agents, which can lead to…

The Cloudflare blog post discusses new features to enhance application security using Cloudflare Workers. Key points include: 1. **Employee Application Deployment:** Employees can now easily build applications, but this poses a risk of exposing internal…

A new Linux botnet named 'Evooo1Bot,' derived from the Mirai malware, has been identified exploiting various vulnerabilities in edge devices. Discovered by Yi Ping (Cara) Lin from Fortinet, the botnet targets known weaknesses in devices from manufacturers…

Apple has enhanced its threat-notification system, now alerting users directly on their iPhone's Lock Screen and in Settings if targeted by mercenary spyware. This initiative aims to ensure such critical warnings are harder to overlook, complementing…

Cyera plans to acquire Oasis Security for approximately $1 billion to enhance its data security platform by integrating non-human identity (NHI) and AI agent management into a single control plane. This move reflects a broader trend where companies are…

Meta has introduced a new beta feature called Scam Alert for WhatsApp, which utilizes an on-device machine-learning model to detect potential scam messages from non-contacts. Given the rising threats of impersonation, fake jobs, and various scams via…

This week's cybersecurity news roundup highlights several significant stories affecting the evolving cyber threat landscape. Key points include criticism of the Pentagon's $821 million contract to Accenture for an AI platform, an FBI investigation into a…

The LiteLLM supply chain attack, attributed to TeamPCP, affected over 2,500 organizations, primarily due to a compromised version of Aqua Security’s Trivy scanner. The attack propagated through multiple packages and repositories, exploiting a malicious…

Google Cloud has released an updated roadmap for transitioning to post-quantum cryptography (PQC), aiming for full readiness by 2029. Key areas of focus include mitigating Store Now Decrypt Later (SNDL) risks, enhancing digital signatures against forgery,…

A new macOS infostealer named AmnesiaStealer is being disseminated through ClickFix social engineering attacks, warning users of its sophisticated data theft capabilities. This Rust-based malware targets user credentials, browser data, and live sessions,…

On July, the popular business communications platform RingCentral suffered a data breach, allegedly involving the theft of personal information of approximately 1.6 million individuals by the extortion group ShinyHunters. The breach resulted from a social…

UK-based CRM provider Beacon reported a data breach affecting over 1,000 charities, with potential exposure of personal supporter information. Malicious activity was first observed on July 27, 2026, utilizing a compromised AWS access key. While attackers…

The article discusses the CoolClient backdoor attributed to the HoneyMyte APT group, which has evolved to include a kernel-mode driver enhancing its stealth and operational capabilities. Initially documented in 2022, the malware has been used in…

AmnesiaStealer is a new macOS infostealer developed in Rust that targets users via counterfeit GitHub pages, utilizing a technique called ClickFix. The malware operates in three stages: it downloads and launches a payload, harvests sensitive information from…

A recent leak exposed 7.3 million Chess.com user profiles, attributed to large-scale data scraping rather than a server breach. The leaked file, a 15.5 GB compressed archive, included various user data fields such as usernames, emails, real names, countries,…