Investigators say the driver acted to override the car’s automated driving assistance system.

Read more →

Welcome to this week’s edition of the Threat Source newsletter.   “I do not know everything; still many things I understand.” ― Madeleine L’Engle, A Wrinkle in Time  “Don’t try to comprehend with your mind. Your minds are very limited. Use your intuition.” ― Madeleine L’Engle, A Wind in the Door  The World Cup. The 4th of July as the US turns…

Read more →

EU’s top court upheld a €4.1B fine against Google, ruling it abused Android’s market dominance through restrictive licensing practices. The Court of Justice of the European Union issued its ruling on July 2, 2026, and Google lost. The court dismissed the appeal brought by Google and its parent company Alphabet against an earlier judgment from…

Read more →

Turn these iMessage settings on or off for a cleaner, modern, and more private texting experience.

Read more →

Microsoft has announced it is investing $2.5 billion in its own AI deployment company, a new operating business called Microsoft Frontier Company. The new business structure will embed over 6,000 industry, AI, and engineering experts directly within customer organizations to co-design, deploy, and continuously improve AI systems that are tied to measurable business outcomes. Microsoft…

Read more →

The RAM price crisis is pushing hardware manufacturers to pursue deals with Chinese companies, against the wishes of the US government. Apple is one of those reportedly exploring such deals. “Apple is in negotiations to purchase chips from Chinese semiconductor makers ChangXin Memory Technologies Inc. (CMTI) and Yangtze Memory Technologies Co. (YMTC) to help reduce…

Read more →

FortiBleed, the Fortinet credential theft campaign, is now connected to INC Ransom and Lynx, with a Nextcloud zero-day vulnerability also under investigation.

Read more →

404 Media reports that a researcher has found a vulnerability in Apple’s Hide My Email feature that could allow someone to discover a person’s real email address. That’s especially concerning because protecting your real email address is exactly what the feature is designed to do. 404 Media did not publish technical details of the vulnerability…

Read more →

ClickFix attacks, which trick people into running malicious commands themselves, continue to evolve. This latest campaign uses fake Google and Cloudflare verification pages to convince victims to infect their own devices. A single mistake can install malware that steals passwords and other sensitive data, gives attackers remote access to your computer, or downloads additional malware…

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Microsoft SharePoint Server flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Microsoft SharePoint Server flaw, tracked as CVE-2026-45659 (CVSS score v3.1 of 8.8), to its Known Exploited Vulnerabilities (KEV) catalog. At the end of May, Microsoft released security updates…

Read more →

In this post, I will show you how an SPF Record can instantly improve your email deliverability. The Sender Policy Framework (SPF) is an essential email authentication system aimed at preventing email spoofing and enhancing the chances of email delivery. Essentially, an SPF record is a specific type of TXT record within the Domain Name…

Read more →

A 19-year-old alleged member of the Scattered Spider extortion crew was extradited to the United States last week and remains in federal custody awaiting several cybercrime charges, the Justice Department said Wednesday.  Peter Stokes, a dual citizen of the United States and Estonia, was allegedly involved in Scattered Spider since it formed in 2022 and…

Read more →

Court of Justice of the European Union (CJEU) has dismissed Google’s final appeal against a €4.1 billion ($4.7 billion) antitrust fine over the company’s use of Android to promote its Chrome browser and search service. […]

Read more →

ChocoPoC operates by hiding its malicious payload within a Python package that is pulled in as a dependency by the seemingly harmless PoC code.

Read more →

FEMA has clarified that state and local governments are prohibited from using federal cyber grant funds to pay for membership fees that bundle cybersecurity or technical services, as the agency cannot determine the reasonableness of these bundled costs.

Read more →

Palo Alto Networks’ Unit 42 has identified phantom squatting as a tactic where attackers purchase domains that LLMs hallucinate, meaning the AI models create web addresses that do not actually exist.

Read more →

Hackers gained access to Aflac Japan’s systems between June 15 and June 25, stealing personal information from the company’s policyholder portal.

Read more →

The attack chain exploits two reported weaknesses in Claude Cowork for Windows.

Read more →

The attack, which leveraged a deprecated OAuth flow called Resource Owner Password Credentials (ROPC), made over 81 million login attempts between June 12 and June 26, compromising at least 78 Microsoft accounts across 64 organizations.

Read more →

A suspected Scattered Spider member has been extradited to the United States to face charges linked to cyberattacks against U.S. companies, including the breach of a luxury jewelry retailer that led to an $8 million cryptocurrency ransom demand after attackers stole company data. The retailer’s security team removed the attackers from its network before any…

Read more →

Root.io offers agentic vulnerability remediation, utilizing AI agents to research, write, test, and deploy patches for newly published vulnerabilities within minutes.

Read more →

The attack chain begins with a single line of Python code executed via an unauthenticated Langflow API endpoint.

Read more →

The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that’s designed to gain surreptitious access to a victim’s email correspondence via the Google API. “In this campaign, the attackers focused their attention on corporate email communications hosted on Gmail, targeting access compromise via APIs,” Kaspersky said in a detailed…

Read more →

Available today, ExpressKeys now delivers more secure sharing, passkey support, and improved cross-device management.

Read more →

iboss has launched the AI Security Platform, a new service that gives any organization visibility into the AI tools its people are using, free of charge. Signup is instant, deployment takes an afternoon, and a complete AI footprint appears within hours. Organizations that want to go beyond visibility can upgrade on the same platform to…

Read more →

OpenAI API costs can spiral when agents run wild. Here’s how to set spend limits, enable hard caps, and avoid surprise AI bills.

Read more →

Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first

Read more →

Microsoft’s Linux server distribution is now available as an ISO to install on your own server or virtual machine.

Read more →

Rarlab has released a new version of the popular WinRAR tool to patch a vulnerability that can be abused in remote code execution attacks. The issue is fixed in WinRAR 7.23, but users must install the new version manually because WinRAR still does not offer automatic updates. They also need to make sure they download…

Read more →

IBM and Red Hat assign 20,000 engineers to the new Project Lightwell service as Anthropic’s Mythos findings ignite debate over how to secure the open-source software supply chain.

Read more →

Cloudflare introduced new controls that let website owners manage AI traffic across three categories: Search, Agent, and Training. The feature is available to all Cloudflare customers, including those on the Free plan, and gives website owners more control over how different types of AI crawlers access their content. “Content owners still want to be able…

Read more →

In this post, I will show you what to do before you automate your RFP process. The pitch for RFP automation is compelling: respond faster, reuse content intelligently, reduce the burden on subject matter experts, and free your best people to focus on strategy rather than formatting. All of that is true – when automation…

Read more →

Microsoft has fixed a known issue causing the Copilot Chat or Copilot buttons in Classic Outlook to disappear for Windows users with the Copilot Chat (Basic) license. […]

Read more →

Bitdefender researchers warned of curious ransomware campaign which has targeted businesses around the world

Read more →

Cisco confirmed that attackers are now exploiting a Unified Communications Manager (Unified CM) vulnerability patched in early June. […]

Read more →

Identity lifecycle management was architected around a person with an employment record, a manager, and a departure date. AI agents have none of those. As autonomous principals proliferate across enterprise environments, the governance model built for humans develops structural blind spots that traditional IGA tools weren’t designed to detect. This guide covers where that model…

Read more →

The campaign targets small businesses with fearmongering emails.

Read more →

Ivanti is expanding its partner strategy in the Americas with a renewed focus on distribution, partner recruitment, and services-led growth as demand for endpoint management continues to rise. Andrew King, vice president of Americas partner sales at Ivanti, told Channel Insider the company is prioritizing a more unified channel motion after years of acquisitions brought…

Read more →

A newly disclosed vulnerability in Argo CD is drawing attention to the security risks of GitOps platforms, with researchers warning that the flaw could allow attackers who gain a foothold inside a Kubernetes cluster to execute code and manipulate application deployments. Security firm Synacktiv said in a report that the flaw affects Argo CD’s repo-server…

Read more →

Opera has introduced Paste Protect, a security feature designed to block ClickFix-style attacks that trick users into executing malicious commands through social engineering. […]

Read more →

FortiBleed exposed 430,000 FortiGate firewalls, linked to INC Ransom and Lynx, enabling domain compromise and at least 12 ransomware attacks. SOCRadar’s Threat Research Unit has connected FortiBleed, a large-scale campaign that harvested credentials from over 430,000 FortiGate firewalls worldwide, directly to two active ransomware operations: INC Ransom and Lynx. The link isn’t circumstantial. An operator…

Read more →

A new Sysdig report traces how an LLM agent abused a Langflow flaw, stole credentials, reached production MySQL, and destroyed Nacos config data in minutes flat.

Read more →

If you like the idea of Brave’s browser security, but all of the other features just get in your way, the developers have created a solution for you.

Read more →

The NCSC has shared best practice advice from pen testers which could help improve system resilience

Read more →

Adobe fixed multiple critical flaws, including max severity bugs in ColdFusion and Campaign Classic that could lead to remote code execution Adobe has released security updates for ColdFusion and Campaign Classic, fixing multiple critical vulnerabilities, including seven maximum-severity issues (CVSS score of 10.0). If exploited, the flaws could allow attackers to execute arbitrary code, escalate…

Read more →

Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking in, stealing credentials, moving deeper into the network, then encrypting and wiping a company’s…

Read more →

If you like to see and manage your system processes on Linux, but aren’t happy with the tool you’re using, System76 might have just the app you’ve been looking for (and a reason to switch to either COSMIC Desktop or Pop!_OS).

Read more →

A teenager accused of hacking as part of Scattered Spider has been arrested

Read more →

Alleged Scattered Spider member Peter Stokes, 19, was extradited from Finland to the U.S. over hacking, fraud, and extortion charges. Peter Stokes, 19, an alleged Scattered Spider member known online as “Bouquet,” has been extradited from Finland to the U.S. to face hacking, fraud, and extortion charges. Prosecutors say he took part in multiple cyberattacks,…

Read more →

The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx ransomware operations, indicating that the verified, stolen credentials were intended for follow-on intrusions. “An operator tied to FortiBleed’s infrastructure was found actively working negotiation panels for both groups, tying mass FortiGate credential theft directly to ransomware deployment

Read more →

Ask an AI model to analyse a photograph and it might tell you it contains a person standing under a tree near the ocean on a sunny day. Ask a human who took the photo, however,…

Read more →

In this interview with Help Net Security, IGEL CTO Matthias Haas explains why backups alone do not equal recovery. He makes the case that endpoint recovery is often overlooked, leaving organizations exposed when thousands of devices go down at once. Haas walks through what a well-planned recovery looks like, where the bottlenecks appear, and why…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-45659 (CVSS score: 8.8), is a case of remote code execution arising from the deserialization of untrusted data. The issue

Read more →

Corporate networks keep sensitive files off individual workstations and store them on shared servers that staff reach through mapped network drives. That arrangement hands ransomware operators a target worth chasing. A single compromised laptop can begin encrypting files that live on a server across the building, and the encryption travels over the network as ordinary…

Read more →

A rebuilt columnar engine, native Prometheus support and agentic investigations that start before anyone gets paged. Elastic reckons it can query metrics 30x faster than…

Read more →

Open-source maintainers are receiving more vulnerability reports than they can act on, and a rising share now comes from an AI system working at machine speed. Over roughly two months this spring, Anthropic’s Claude Mythos Preview combed through more than 23,000 open-source code paths and routed verified findings to the projects that own them. Tuskira…

Read more →

Healthcare device firm Medtronic is notifying affected customers about a data breach that exposed their personal data to an unauthorized third party. […]

Read more →

SAP Asia Pacific APAC announced Verena Siow as President for the APAC region, effective immediately. Based in Singapore, she will focus on driving customer success,…

Read more →

CrayonIQ’s 2026 APAC Contact Centre CX Platforms with AI Buyers Guide Reveals AI Ecosystems, Hyperscalers, Emerging Partner Models And Regional Language Capability Are…

Read more →

Disney Mode for Skylight Calendar makes everyday chores and routines more engaging, with featured characters celebrating kids every step of the way

Read more →

Exabeam, the leader in Behavior Intelligence for the agentic enterprise, today announced new capabilities that help security teams detect, investigate, and reduce risk from AI…

Read more →

Researchers have discovered two vulnerabilities in the widely used Cursor AI-enabled integrated development environment (IDE) that can be exploited through prompt injection to achieve remote code execution (RCE). The two flaws, tracked as CVE-2026-50548 and CVE-2026-50549, allow attackers to break out of Cursor’s command execution sandbox, the protective layer that’s supposed to prevent the internal…

Read more →

AI expert Rhys Oxenham says Australia has received a sharp wake-up call following the sudden decision to switch off Anthropic models earlier this month.

Read more →

Microsoft this week tried to address the growing challenges surrounding notetaker bots in meetings by giving IT better control over them. Microsoft’s announcement said that users of Microsoft Teams will be able to block non-Microsoft bots “even in meetings where organizers allow participants to bypass the lobby.” When the feature is enabled, Teams automatically detects…

Read more →