With Chrome, Google pioneered the rapid release model for browser security. Now, Google says updates may need to change in the face of AI security analysis. According to the company, the number of bug fixes in Chrome releases has skyrocketed in recent months because AI is detecting so many flaws. We could be looking at…
Certification rubber-stamping is the most common form of governance decay.
The Cybersecurity and Infrastructure Security Agency published a guidebook for federal agencies Thursday to aid them on managing security risks with open-source software, touching on topics like patching and open-source AI models. An executive order President Joe Biden signed and that President Donald Trump amended ordered CISA and other agencies to issue open-source security recommendations…
Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install…
Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages displaying a full-screen non-existent update sequence to deliver malware as part of a new iteration of the long-running Contagious Interview campaign. The defining aspect of the attack is that bogus macOS…
Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. […]
Can the platform make the gap between what the organization claims and what the evidence supports visible before the response is sent?
KKR sold private-equity investments to boost profits, while Blue Owl said investor withdrawals had bottomed out.
OpenAI has revealed that the rogue AI agent involved in a recent breach of AI platform Hugging Face also accessed accounts belonging to four other publicly available services during the same incident. OpenAI said the AI agent used publicly exposed credentials to access four additional accounts across four publicly available services during the same incident…
Broadcom has released security updates to fix five vulnerabilities in VMware vCenter, ESX, Workstation, and Fusion, including three critical flaws that allow attackers to bypass authentication, execute arbitrary code, or escape from a virtual machine to the host. […]
Welcome to this week’s edition of the Threat Source newsletter. For my fianceé’s 30th birthday, I took her on a weekend trip to Shenandoah National Park – a favorite of ours since we went to a wedding there several years back. We’ve done several incredible hikes over the years, but one in particular had always…
Google’s guarantees of power and lease obligations would help the developer secure financing for the 1.6-gigawatt Texas project.
Attackers continue to leverage AI to target our edge appliances – so why hasn’t the industry built-in AI into those devices yet?
Jscrambler launched its Unified Client-Side Security Platform, introducing a new approach to securing applications and customer data where AI-powered risks increasingly operate: inside the browser. “AI didn’t create browser risk—it dramatically accelerated it,” said Rui Ribeiro, CEO and Co-Founder of Jscrambler. “Today, software compromise and AI-driven data harvesting occur simultaneously inside the browser, yet most…
Amazon Inspector is an automated vulnerability management service that continually scans Amazon Web Services (AWS) workloads for software vulnerabilities. The vulnerability management capabilities of Amazon Inspector are powered by an asset inventory engine known as the Amazon Inspector SBOM Generator (inspector-sbomgen), a standalone command-line tool that produces a software bill of materials (SBOM) from container…
Resecurity warns AI offensive agents are lowering hacking barriers, fueling an AI-driven race between attackers and defenders. Resecurity analyzed how autonomous offensive security agents such as T3MP3ST, Strix, CyberStrike, XBOW, PentAGI, PentestGPT, and Nebula lower the barriers to vulnerability identification and exploitation. The analysis also explores why AI is being repurposed for real attacks and…
Anthropic CEO Dario Amodei is pushing back on claims that the AI company supports banning open-weight models, arguing instead that policymakers should focus on the technologies and capabilities that make advanced AI systems potentially dangerous. The clarification follows Anthropic’s decision not to sign an industry letter backed by Nvidia, Microsoft, Meta and other technology companies…
The FCC’s robot ban includes many of the world’s most popular vacuums and lawn mowers. Is that Roomba in your closet a security risk?
The Ozlo Sleepbuds 2 improve on what made me fall in love with the first generation, but they’re not perfect.
Google has expanded the use of AI in Chrome’s security workflow, using it to find vulnerabilities, triage bug reports, generate patches, and review code to shorten the time between discovering software flaws and delivering security updates. “Historically, triaging a single security report took anywhere from 5 to 30 or more minutes, and relied primarily on…
Google says artificial intelligence is dramatically increasing the number of security vulnerabilities it can find and fix in Chrome, with more than 1,000 security bugs patched across the browser’s two most recent releases as it expands its use of AI. […]
Oracle and Google Cloud are expanding their AI partnership to bring Gemini models into Oracle AI Agent Studio, Fusion Applications and NetSuite, giving partners more options for building AI agents and automating enterprise workflows. The integration will let developers select Google’s models for specific business use cases while helping customers balance performance, governance and cost…
Russia has charged Telegram founder and CEO Pavel Durov with aiding terrorism and placed him on an international wanted list, escalating its pressure on the messaging platform. The Federal Security Service (FSB) alleges that Telegram became a channel for crime and other operations linked to Ukrainian intelligence because the platform failed to stop such activity. …
Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user’s Internet connection out to strangers. But a groundbreaking new analysis finds these devices also routinely spoof themselves as mobile phones clicking ads…
Residential security company Brinks Home has disclosed that hackers breached some of its systems and are threatening to leak allegedly stolen data. […]
The cost of a data breach is climbing again, but the biggest story in IBM’s 2026 Cost of a Data Breach Report is not the price tag itself. It is how artificial intelligence (AI) is changing both sides of the cybersecurity equation. While organizations use AI to strengthen detection and response, attackers are using it…
In the cloud-based enterprise, Linux servers can’t stay isolated on legacy authentication systems.
The AI Capability Verification Matrix will help test claims critical to the purchase decision
Microsoft is expanding its artificial intelligence portfolio into cybersecurity with the launch of a new agentic cybersecurity platform alongside its first AI model built specifically to find software vulnerabilities. Announced Monday, Project Perception and MAI-Cyber-1-Flash are designed to help security teams identify vulnerabilities, prioritize risks, and respond to cyber threats faster by using AI agents…
Apple may be moving faster than expected in its modem development work, and Qualcomm’s latest comments suggest that shift is already reshaping the iPhone supply chain. Qualcomm overnight said supply constraints are shrinking some of its Apple business faster than anticipated. “It’s availability of supply,” CEO Cristiano Amon told Reuters. While he wasn’t specific, that likely reflects…
It’s not your imagination. Windows installation files have been creeping up in size. It might even be fair to call them bloated. And you’ll never guess where the problem comes from.
Melbourne, Florida, 30th July 2026, CyberNewswire
The same autonomous OpenAI agent that escaped its test environment and breached Hugging Face was also busy hacking other AI systems. Lucky us.
When you’re setting up a new PC or looking for an app you already know, the Microsoft Store is often the easiest place to start. It’s built into Windows and lets you find, install, and update apps in one place. Malwarebytes for Windows is now available there too. Malwarebytes for Windows is still available from…
Threat actors are impersonating IT support staff in Microsoft Teams calls to gain remote access to corporate devices and deploy Chaos ransomware in attacks targeting North American organizations. […]
Almost all field service organizations use AI, and revenue gains in key areas offer insights for professionals in other business functions.
In this edition of Reporters’ Notebook, our journalists discuss the ins and outs of Anthropic’s Claude Mythos rollout. How seriously should we take its risks? How big of a deal is it?
A lot of security still comes down to trusting the wrong screen. This week, that screen might be a login page, an install guide, a recruiter call, or a familiar service behaving slightly wrong. Behind it: reused credentials, exposed systems, quiet loaders, abused trust, and exploit paths that should have been harder. Some defenses improved.…
The post We know how to protect our troops from telecom attacks. We’re just not doing it. appeared first on CyberScoop.
Cybersecurity researchers at Wiz found CosmosEscape in Azure’s Gremlin API, exposing a master key that could access any Cosmos DB account. Microsoft fixed it, with no customer impact found.
American semiconductor company Analog Devices announced that an unauthorized party accessed some of its systems and exfiltrated certain files. […]
Cisco has released emergency hot fixes for an actively exploited vulnerability impacting Cisco Secure Firewall Management Center (FMC) Software. The issue is caused by static credentials for a low-privileged account and allows an unauthenticated remote attacker to sign in to an affected appliance and access sensitive information. Although the flaw has a CVSS score of…
Novee announced the expansion of its AI penetration testing platform to mobile applications. With this addition, Novee becomes the industry’s first complete AI pentesting platform across the modern application attack surface, providing continuous, autonomous coverage. The platform tests web apps and APIs, along with desktop, AI and LLM-enabled applications. Novee transforms mobile pentesting from a…
Ruby on Rails has released security updates for a critical Active Storage vulnerability that can allow an unauthenticated attacker to read arbitrary files from an application server through crafted image uploads. Tracked as CVE-2026-66066 and rated 9.5 on the CVSS scale, the flaw can expose secrets accessible to the Rails process and potentially enable remote…
Broadcom has released emergency security updates for a critical VMware ESXi vulnerability that can allow an attacker to escape from a virtual machine and execute code on the underlying hypervisor host. Tracked as CVE-2026-47876 and rated 9.3 on the CVSS scale, the issue resides in the VMXNET3 network adapter. Successful exploitation requires the attacker to…
A 41-year-old Ghanaian national was sentenced to 85 months in prison for stealing more than $10 million from mostly older, lonely and vulnerable victims via romance scams, the Justice Department said Tuesday. Derrick Van Yeboah was a longtime and high-ranking member of a criminal organization primarily based in Ghana linked to more than $100 million…
A Russia-aligned threat actor known as TA488 has launched a new campaign exploiting a cross-site scripting (XSS) vulnerability in Microsoft Outlook Web Access (OWA). The campaign demonstrates increasingly sophisticated techniques for compromising organizations through what researchers describe as “half-click” attacks. Key takeaways of the TA488 Outlook Web Access attack TA488 is exploiting CVE-2026-42897 in Microsoft…
Brad Blakestad, director of the National Quantum Coordination Office, emphasized that quantum technology is not monolithic, encompassing computing, sensing, and networking, each with distinct components and multiple modalities within computing alone.
Russia-affiliated cyber espionage group Laundry Bear (aka Void Blizzard, aka TA488) is exploiting CVE-2026-42897, a cross-site scripting vulnerability in Microsoft Exchange, to target US and European government entities and a variety of private sector organizations via email. The warning comes from Proofpoint, who detected emails carrying the concealed exploit hitting inboxes. “The subject lines and…
Attackers rarely stop after gaining initial access. Huntress analyzes a real-world intrusion to show how threat actors establish persistence, disable defenses, and reshape compromised systems, and why defenders must investigate the original entry point rather than simply remove the malware. […]
The proposed Enhancing K-12 Cybersecurity Act, co-sponsored by Senators Mark Warner and Marsha Blackburn, would allocate $20 million over two years to fund several key initiatives.
The US Federal Trade Commission (FTC), together with Utah and California, has filed a lawsuit against telehealth provider Hims & Hers. The FTC alleges that the company shared consumers’ sensitive health information with third‑party advertising platforms despite promising strong privacy protections. Hims & Hers is a telehealth and digital health platform that connects users with…
The line between physical security, cybersecurity, privacy and reputation management is dissolving. A data leak can surface a home address. Related: Defending the CEO attack vector A breached account can put an executive’s family in physical danger. The threats don’t stay in their lanes. That’s the terrain Chuck Randolph, Jonathan Wackrow and Fred Burton map…
A now-patched vulnerability in Azure Cosmos DB could have let an attacker escape the service’s Gremlin query sandbox and obtain full read and write access to databases across customer tenants, according to Wiz. Wiz, which codenamed the chain CosmosEscape, said the exploit chain began with a crafted query against a Gremlin database controlled by the…
Samsung is betting on an unorthodox form factor to take its foldables forward – and its own Z Flip could be the first casualty.
Action1 report finds sysadmins overestimated their use of AI in predictions made two years ago
AI agents are now being allowed to create business records, approve transactions, and execute financial workflows. ERP security firm Pathlock says most organizations don’t know if that is all they are doing. The company’s 2026 AI Governance Gap Report found that 79% of organizations do not have a dedicated AI governance team, despite AI agents…
A security researcher has demonstrated how Microsoft Copilot for Word can be tricked into spreading a self‑propagating prompt‑injection “AI worm.” The attack silently alters documents and embeds its own hidden instructions into newly created files, allowing it to spread through normal document-sharing workflows without macros or traditional malware. The technique allows an attacker to hide…
A security researcher has demonstrated how Microsoft Copilot for Word can be tricked into spreading a self‑propagating prompt‑injection “AI worm.” The attack silently alters documents and embeds its own hidden instructions into newly created files, allowing it to spread through normal document-sharing workflows without macros or traditional malware. The technique allows an attacker to hide…
Chipmaker Analog Devices disclosed a data breach after detecting unauthorized access to systems on June 23. The investigation is ongoing. Semiconductor giant Analog Devices (ADI) disclosed a data breach following a cyberattack that resulted in unauthorized access to some of its systems on June 23. Analog Devices, Inc. (ADI) is a major semiconductor company that…
Can Google Earth’s new AI accurately redesign homes, recreate history, and imagine the future? I tested Nano Banana across several locations, and the results ranged from useful to gloriously absurd.
A critical vulnerability in the open-source AI agent platform Ruflo could allow unauthenticated attackers to take control of enterprise AI environments by exploiting an exposed Model Context Protocol (MCP) bridge, according to research published by Noma Security. The flaw, tracked as CVE-2026-59726 and dubbed RufRoot, carries a maximum CVSS score of 10.0 and affects Ruflo…
Running low on hard disk space or just want to get rid of junk files? The free BleachBit utility can easily handle that assignment. Here’s why it beats Storage Sense.
Technology customers increasingly expect partners to support complex, multi-vendor environments, but a new Global Technology Distribution Council (GTDC) report finds a substantial gap between those expectations and current channel capabilities. According to the GTDC research, conducted with Channelnomics, 76% of customers consider multi-vendor systems support critical, while only 22% believe their IT partners can provide…
The US Cybersecurity and Infrastructure Security Agency (CISA), together with its co-authoring partners, has released the 2026 Minimum Elements for a Software Bill of Materials (SBOM), replacing the 2021 guidance published by the National Telecommunications and Information Administration (NTIA). An SBOM is a list of the components that make up a software package and their…
The tender will support up to seven AI facilities in an effort to build out the bloc’s tech capabilities.
Technology spend and risk intelligence organization Flexera recently announced that Mike Jerich has taken over as CEO. Jerich currently serves as the organization’s President and will maintain both roles. Jerich succeeds Jim Ryan, who will transition to Vice Chairman of Flexera’s Board of Directors and support Flexera’s long-term strategy and growth. This move comes as…
Check Point researchers detail phishing attack as an example of attackers dropping fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure
Hidden instructions in a Word document can make Microsoft 365 Copilot rewrite figures in a report, then copy the same instructions into the finished file. Håkon Måløy disclosed the technique on July 28, 144 days after reporting it to Microsoft. In his proof of concept, the internally generated file triggered the same behavior when it…
Rising memory and storage prices are creating new cost, availability, and architecture challenges for IT solution providers as AI infrastructure demand outpaces the industry’s ability to add supply. Channel Insider spoke with Eric Herzog, CMO of Infinidat, a Lenovo company, and Brendan Lynch, the CEO of Eastern Computer Exchange, about what the market pressures mean…
Orca Security has announced two new AI-powered capabilities: Orca AI AppGen Security, which discovers and secures AI applications built outside the development pipeline on AI-powered platforms like Claude, Supabase, and Lovable, and AI Code Security Auditor, which delivers deep AI-driven static analysis for code developed within traditional pipelines. The capabilities extend the Orca Platform to…
Network firewalls are the workhorses of modern cybersecurity. They are trusted to protect the network, blocking malicious traffic and preventing intrusions and breaches. And for decades, network security teams have built controls around a relatively stable model: users connect to applications, applications exchange data, and security tools inspect packets, protocols, and destinations. Firewalls
There is a story about online school that much of the public still believes: it was an emergency measure.
Attackers are moving away from fake Microsoft login pages in favor of abusing Microsoft’s own authentication system, letting phishing campaigns slip past the warning signs employees are trained to spot, according to Check Point. Between June 25 and the second week of July, researchers found over 200 phishing emails targeting around 120 organizations in a…
Digital document verification in businesses with global coverage of clients and an immense network of AI models brings forth nothing but accuracy and speed. The divergence from conventional methods of authenticating a client’s ID by corporate and the financial sector so far has made commendable improvements in the business cycle of organizations. Successful enterprises in…
White label document verification puts your brand and domain on every verification page, so verifiers trust what they see and forgeries stand out. Key Takeaways White label document verification means every verification page and QR code carries your own brand and domain, with no third-party tool in sight. Verifiers judge a document by the domain…
In this post, I will answer the question – what is an OGG file type and give you a complete guide. If you ever downloaded an audio file that is music, a podcast or a game, then most likely you encountered an OGG File extension. While MP3 is still the most well-known audio format on…
All right, quiz time: In a single sentence, can you tell me exactly what Google Voice does? It’s a question even the most giddy Google-appreciating geeks struggle to answer succinctly — and for normal, non-tech-obsessed Homo sapiens, the answer typically falls somewhere between “Huh?” and “Wait, is that the same thing as gChat?” Really, it’s…
A Russia-aligned threat group used a “half-click” exploit against Microsoft Exchange’s Outlook Web Access to install a browser-based backdoor when recipients opened specially crafted emails. The campaign began on July 22 and was conducted by TA488, which is also tracked as Void Blizzard and Laundry Bear, according to a report from the cybersecurity firm Proofpoint.…
A static credentials vulnerability (CVE-2026-20316) in Cisco Secure Firewall Management Center (FMC), a platform for centrally managing multiple Cisco Secure Firewall devices across a network, is being leveraged by attackers, CISA warned. Two FMC flaws, one indicator of compromise CVE-2026-20316, reported by Jimi Sebree of Horizon3.ai, is found in the FMC software’s web interface. The…
Dropzone AI has announced the general availability of AI Threat Hunter, its proactive threat hunting agent. The tool enables security teams to run structured hunt packs across their environments to identify hidden threats, emerging risks, and security coverage gaps that traditional alerts may miss. Security alerts flag activity that matches predefined detection rules, helping teams…
PortSwigger has announced the public beta of Burp AT, a new addition to Burp Suite that brings agentic AI to professional penetration testing. Burp AT enables penetration testers to delegate defined investigative tasks to AI agents that use Burp Suite’s tools, project context, and purpose-built pentesting capabilities. Testers control how much work the agents perform,…
South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A compromised page could infect a system running a vulnerable AnySign4PC version without a prompt or
The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (BYOVD) attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT (aka Winos 4.0) for persistent remote access. “In this campaign, the group combines new vulnerable-driver abuse, newly observed…
The FCC added foreign robots and power inverters to its Covered List, while allowing security updates for existing authorized devices until 2029. The FCC just widened its Covered List again, this time adding foreign-produced advanced robotic devices and power inverters. In plain terms, that means new models in those categories generally can’t get the equipment…
While not as speedy as its NVMe cousins, the Samsung 870 Evo 2TB SSD is still a great choice for both work and play – especially at this price.
Cybersecurity is rarely a straight line. In this special Black Hat edition of Humans of Talos, Amy looks back at the incredible journeys that brought past guests to the world of threat intelligence. From forensic labs and newsrooms to the kitchen line, we’re revisiting the stories and lessons that define the people behind the threat…
Big Blue is racing to show that its quantum computing business can be profitable following a historic stock tumble.
Plus, we look at new fronts erupting in the Iran war, and a daring mission to recover American POWs from the ocean floor.
Flush with cash, Wall Street and Silicon Valley are vying to hire the same tiny pool of genius graduates.
The company’s all-out splurge is running into higher costs, borrowing constraints and investor pushback.
For years, North Korea’s state-trained hackers have been one of the world’s most prolific robbers of banks – stealing huge sums of money from foreign financial instituions, draining cryptocurrency exchanges of billions, and funnelling the proceeds into the country’s weapons programme. But now, in a remarkable twist, some of the same elite hackers appear to…
The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Secure Firewall Management Center (FMC) flaw, tracked as CVE-2026-20316 (CVSS score of 5.3), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-20316 is a…
Apple’s budget MacBook Neo is already affordable, but if you’re an educator or student, you can get one for even less.
A coordinated cyberattack on July 26 and 27 hit operational technology (OT) systems at more than 30 community water utilities across Minnesota, prompting an immediate response from Minnesota IT Services (MNIT) to contain the threat. MNIT confirmed the attack in a statement published July 28 and said it activated its cybersecurity incident response capabilities as…
Satechi’s CubeDock combines a high-speed docking station with a built-in SSD enclosure – and it works so well.
