The European Commission fined Google €890 million ($1 billion) on Thursday after finding the company had violated the European Union’s Digital Markets Act (DMA), which ensures fair online competition. […]
Here’s how Anthropic’s AI tools work, what they can accomplish, and why security, cost, and your oversight still matter.
Most people understand identity theft as an attacker stealing a real person’s sensitive information and impersonating them. Synthetic identity fraud is much harder to catch. Instead of stealing a real identity, the attacker manufactures a new one, frankensteining together several real data points with fabricated ones to create a person who doesn’t exist. Since no…
Google DeepMind unveiled Gemini 3.5 Flash Cyber, an AI model for vulnerability discovery and patching, available only to governments and trusted partners. Google DeepMind announced Gemini 3.5 Flash Cyber on Tuesday, a security-focused AI model built on top of the existing 3.5 Flash architecture and designed specifically to find, validate, and patch software vulnerabilities. It…
A nine-year-old race condition vulnerability in the Linux kernel’s XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges. […]
Sophos report warns that the rapid adoption of AI by businesses is leaving them vulnerable to a new source of cyber threats
Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost Manager (WHM) instances. The activity involves malicious Packagist development versions spanning 10 packages associated with a legitimate PHP and DevOps developer, dinushchathurya, between July 12 and 13,
A car alarm vendor’s coding mistake has left millions of vehicles vulnerable to theft and location tracking. Thanks to the way dealers sell car alarms, many affected drivers don’t even know they have one installed. The device is the KARR Security System, a Bluetooth-enabled aftermarket alarm built by Acrisure Protection Group. It’s installed by dealers,…
HermeticReader is the name given to a recently disclosed vulnerability in the Adobe Acrobat PDF extension for Chrome, tracked as CVE-2026-48294. Researchers discovered the issue in early June 2026 and reported it to Adobe, which patched the flaw over a single weekend. They found that a single visit to a malicious website could turn Adobe’s…
Core issues that slowed down adoption of secure data vaults are being resolved by technology, but artificial intelligence poses new ones. Experts have some answers.
The best Wi-Fi routers provide a strong internet connection, rapid speeds, and plenty of coverage for working, streaming, gaming, and more.
Choosing between one access point and full-home internet coverage? Here’s the verdict after extended testing.
South Korea’s Foreign Ministry has disclosed that attackers breached the Korea National Diplomatic Academy’s online education system, compromising personal data belonging to current and former ministry staff and diplomats stationed abroad. The Korea National Diplomatic Academy launched the online training platform in 2022 to support remote learning during the COVID-19 pandemic. Since then, it has…
ZDNET’s latest Lab Award goes to the Wi-Fi router with the widest coverage.
Attackers are exploiting a critical authentication bypass vulnerability (CVE-2026-16232) that affects Check Point Security Management and Multi-Domain Security Management, the management servers that push policy to Check Point security gateways (i.e., firewalls). “An unauthenticated attacker can obtain an application login token and use it to login via SmartConsole with full admin privileges and apply changes…
Cisco Talos has identified a Rust-based remote access trojan it attributes to the Chaos ransomware group, named msaRAT after four of the binding names left in the binary. The tool starts its own instance of Chrome or Edge on the victim machine and controls it through Chrome DevTools Protocol, a debugging interface built into both…
Fortinet has found a new TrickBot variant hiding commands in DNS traffic and using scheduled tasks and added modules to maintain access on infected Windows PCs.
Dolphin X is a new infostealer that uses AI to sort and rank victims, giving cybercriminals a faster way to identify lucrative targets
Threat intelligence feeds give SOCs and MSSPs the data they need to detect malicious activity, enrich alerts, investigate threats, and respond faster. Depending on the platform, this may include malicious IPs, domains, URLs, file hashes, malware behavior, threat actor activity, vulnerabilities, phishing infrastructure, and geopolitical risk. This guide covers several commercial and open-source threat intelligence solutions used…
Plus, the U.S. gives the president more muscular military options as he considers expanding the Iran war, and we go inside Taco Bell’s rush to contain cyclospora.
Google’s new account recovery option prompts users to upload a selfie to prove their identity. Here’s what to know.
Cisco Talos has discovered a new Rust-based remote access trojan (RAT) we call “msaRAT” attributed to the Chaos ransomware group. The name is derived from the binding names found in the binary: “msaOpen,” “msaClose,” “msaError,” and “msaMessage”. msaRAT is implemented using the Tokio asynchronous runtime, with primary capabilities of browser-leveraged remote code execution and covert…
We’re looking forward to having some great conversations with those of you heading to the desert for Hacker Summer Camp 2026. We have a presence within the Cisco and Splunk booth (2633) during Black Hat where you can chat to us about our latest threat research, incident response, and how Talos powers the Cisco portfolio…
Google on Thursday announced a new way for users to sign-in to their accounts by letting them take a selfie video. The selfie for sign-in, per the tech giant, is another option on top of existing recovery methods to log in to an account, including an email address or a phone number. The idea is…
On July 1, the Cybersecurity and Infrastructure Security Agency (CISA) published a seven-page notice in the Federal Register that could fundamentally change how the U.S. government works with private companies to protect critical infrastructure from cyber threats and natural disasters. The notice, “Establishment of the Alliance of National Councils for Homeland Operational Resilience – Critical…
The new research from the creator of Gemini comes amid rising concern over the impact of artificial intelligence on the labor market.
The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing it through the Chrome or Edge browsers. […]
The Python Package Index (PyPI) now rejects uploads of new files to releases older than 14 days to prevent attackers from poisoning long-stable releases if a project’s publishing tokens or release workflows are compromised. “This change will protect Python users and reduce the amount of “cleanup” work associated with project compromises for PyPI admins. This…
Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers’ mailboxes since Sunday. […]
Data security and data management enterprise, Cohesity, has named Seb Fitzjohn as Vice President, Partner Channel Sales and GTM, Europe. Cohesity eyes data resiliency demand in EMEA Fitzjohn will be charged with expanding the organization’s partner ecosystem as data resiliency becomes a key priority for organizations. Working through the Cohesity Aspire Partner Program, Fitzjohn will…
Cybercriminal group Everest is demanding 10 million Swiss francs ($12.3 million) from Swiss rail vehicle manufacturer Stadler after breaching a data exchange platform shared with one of its suppliers through compromised credentials. Stadler operates 16 production and component plants and eight engineering centers, backed by a global service network of more than 95 locations, and…
The Defense Department’s decision to pause the next phase of Cybersecurity Maturity Model Certification (CMMC) implementation has added another layer of uncertainty for defense contractors. But while assessment timelines may have shifted, the need for cybersecurity preparation has not—creating a growing opportunity for managed service providers, security consultants, and compliance specialists to help customers navigate…
GitHub is changing its bug bounty program to reward higher-quality vulnerability reports and reduce low-effort submissions, including AI-generated reports. The changes will take effect on July 27, 2026. Reports submitted before that date will be honored under the previous bounty structure. “Alongside the growth in legitimate reports, we’ve seen a sharp increase in submissions that…
Check Point addressed a critical authentication bypass flaw, tracked as CVE-2026-16232, in SmartConsole that is being actively exploited. Check Point has released security updates to fix multiple vulnerabilities, including CVE-2026-16232 (CVSS score of 9.3), a critical authentication bypass flaw affecting Security Management and Multi-Domain Management (MDSM). The vulnerability, which is under active exploitation, allows unauthenticated…
Israeli cybersecurity firm Check Point Software has addressed an actively exploited zero-day flaw in the company’s SmartConsole graphical user interface (GUI) admin panel. […]
RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and Amazon Linux can meet the conditions for exploitation. The…
A new study of organizations which have fallen victim to ransomware suggests the rise of AI-tools being used by hackers is making life harder for defenders
Cyber Crime dominated the first half of July 2026, driving 76.5% of all confirmed activity, with Malware the clear weapon of choice at 43.5% of attack techniques. Exploitation of public-facing applications (MITRE T1190) led initial access methods at 27.6%, while Information & Communication infrastructure bore the brunt of targeting, accounting for 32% of sector hits…
85 confirmed cyber incidents shaped the first half of July 2026, with cyber crime accounting for more than three-quarters of all attacks. Malware — spanning RATs, infostealers, spyware, and backdoors — was the dominant weapon, involved in 37 of 85 incidents (43.5%). Information & Communication infrastructure emerged as the hardest-hit sector, targeted in nearly 1…
Axonius has announced new capabilities across the Axonius Asset Cloud to better address asset intelligence and exposure management use cases. The enhancements make it easier than ever to address CMDB visibility gaps and respond to vulnerabilities, while extending asset intelligence capabilities to IoT and OT devices. “Every security and IT leader we speak to has…
Microsoft 365 Director Jeremy Chapman this month took to video to tell Windows admins that the days of delaying security patches are over. Complex enterprise systems and historic incidents involving patch problems have caused many admins to hold fire on immediately applying security patches, in many cases deferring patch rollouts for two to four weeks…
Portuguese businesses operate in the same native language as Brazilian hackers, making those businesses easy targets.
Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under active exploitation in the wild. The security flaw, tracked as CVE-2026-16232 (CVSS score: 9.3), is an authentication bypass affecting the Check Point SmartConsole login process that allows an
Artificial intelligence has moved from experimentation to everyday business operations with remarkable speed. Employees are using it to summarize documents, draft communications, analyze spreadsheets, write code, build automations, and create AI-powered workflows across nearly every business function. Microsoft’s 2026 Work Trend Index found that employees often adopt AI faster than their organizations can adapt to…
AI is multiplying enterprise identities as quantum computing reshapes the cryptographic trust that secures them, and enterprises need to solve both together. Traditional identity security was built for people with predictable, auditable access, not autonomous, short-lived agents that share credentials and break those patterns. Gartner predicts that by 2028, the average global Fortune 500 enterprise…
Plaud has announced the launch of the Plaud ChatGPT App, a native integration available on web and mobile that allows users to connect their Plaud account directly inside…
How is Acronis assessing and addressing the cybersecurity risks associated with advanced frontier AI models, like Mythos, that may be capable of identifying, generating, or…
Vulnerability management runs on a shorthand. A CVE shows a linked patch, someone applies it, and the ticket moves to closed. That shorthand covers most open source fixes. A share work in a different way, arriving as a run of two or more commits where the first one leaves the flaw in place. Researchers at…
Back in 2021, I wrote about a shift that was already underway: the CISO and CFO needed to move from operating in parallel to working in genuine partnership. Cybersecurity had…
Theori built 28 apps with AI coding agents and scanned each one through its pentesting platform. Five models did the building, split between Anthropic and OpenAI, across apps written from a spec, thrown together from a casual prompt, and rewritten from an aging PHP codebase. The team went in expecting injection everywhere. SQL injection, cross-site…
Samsung tipped 5 new devices out of the bag at its London Unpacked overnight: 3 foldables, 2 watches, a pile of agentic AI, and a pair of AI glasses arriving later. Australian…
Leader, Australia’s 2025 Distributor of the Year and a four-time ARN Channel Choice Awards winner, today announced it has been appointed an Intel Authorised Distributor,…
In this Help Net Security video, Venkata Pavan Kumar Gummadi, Professional Software Engineer at Broadridge, explains how to build a defense in depth strategy for protecting sensitive data. He argues that a single control, like encrypting a disk or turning on DLP, leaves gaps that attackers exploit by finding the seams between layers. Venkata walks…
Bringing trusted content into AI workflows is already becoming part of how work gets done. As customers increasingly connect Dropbox with the AI tools they use every day, usage…
Global research from TeamViewer finds IT leaders expect nearly 45% of digital workplace services to run autonomously by 2030
Cohesity, the leader in AI data security, today announced the appointment of Peter Hanna as Vice President of Sales and General Manager, Asia Pacific and Japan APJ. Based in…
Industrial PCs are hot property, even with rapidly inflating price tags. MSI has some unique offerings and insight. Here’s what you should know.
Telecommunications is built on moments that matter: a business customer waiting for a new mobile service to be switched on, a household trying to resolve a billing issue, or a…
ENTECH, Australia and NZ’s longest-running AV trade roadshow and the only event for AV and entertainment technology professionals that visits every major population centre, is…
Lenovo’s Near Real-Time AI Infrastructure Enables IPTV Delivery, Operational Control, and Transformative Fan Experiences at Unprecedented Global Scale
Accomplished AI and technology executive to lead IAS’s next phase of innovation and growth; Lisa Utzschneider to serve as Special Advisor to the Board through year-end
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
The observations presented in Friday’s report reinforce the importance of looking beyond purchase price and vehicle specifications when assessing a vehicle brand. As the…
Sony Electronics introduces the FX5, a new full-frame camera in its Cinema Line series. A newly developed fully stacked CMOS image sensor raises sensitivity performance1 with…
Seeing Machines Limited AIM: SEE, “Seeing Machines” or the “Company”, the advanced computer vision company focused on transport safety, announces it has secured a new Driver &…
A cyberattack on a food and logistics firm disrupts the supply of frozen food to thousands of clients, including major franchises like Kentucky Fried Chicken.
Healthy software companies typically don’t suddenly eliminate one-fifth of their workforce, but monday.com is doing just that as it bets on flatter teams, AI agents, and customer implementation expertise as the winning combination in the AI era. Monday.com co-founder and co-CEO Eran Zinman today announced the “very difficult decision” to reduce the AI work platform…
Participation in OpenAI’s Daybreak program and Anthropic’s Cyber Verification Program advances vulnerability research, security testing, and proactive threat defense
Arvind Krishna says the enterprise tech giant’s mindset still has ties to massive licensing deals of the past.
SoftwareOne, a global software and cloud solutions provider and distributor, today announced a new partnership with NinjaOne, unifying IT to simplify work. SoftwareOne will…
Danish healthcare company Novo Nordisk in partnership with Celonis, the global leader in Process Intelligence, is speeding up clinical development with AI agents to reduce drug…
Adactin, an Australian technology services provider with deep expertise in cloud, AI, and software engineering services, today announced it has partnered with Cyara, the global…
A global law enforcement crackdown has seized infrastructure serving the massive phishing-as-a-service (PhaaS) group Kratos, as well resulting in the arrest of an unnamed Kratos “developer and technical administrator” in Indonesia. The effort was managed by German law enforcement and involved agencies from the US, Indonesia and other countries. Although a German statement claimed that…
Global research from TeamViewer finds IT leaders expect nearly 45% of digital workplace services to run autonomously by 2030
The sheer number of Linux kernel CVEs, published recently, has raised questions about effective vulnerability management.
The Exchange Server team confirmed that there will be no further extensions beyond the current Period 2 ESU program, which concludes in October 2026.
The HermeticReader vulnerability (CVE-2026-48294) exploited a flaw in the Adobe Acrobat extension, allowing any malicious website to inject commands into the extension.
The global economy in 2026 is being shaped by forces that are moving in very different directions. Technology investment remains strong in several major markets, while…
This TrickBot variant, detailed in research by Fortinet’s FortiGuard Labs, utilizes a modular architecture but features a redesigned transport layer.
A report by the GSMA, a global trade body representing the telecom industry, suggests the direct cost of replacing equipment from designated high-risk vendors could range from €30 billion to €40 billion.
Only 5% of Australian firms would be able to sustain operations for 4-6 months if there was a major disruption to their supply chain, according to findings by Proxima’s 2026…
The vulnerability stems from a security hardening change made in July 2025, where snap-confine shifted to a set-capabilities model.
The exposed files, identified as belonging to Carla, contained personal information of drivers including names, email addresses, phone numbers, rental details, confirmation numbers, and travel patterns.
The new platform integrates OneSpan’s existing authentication tools, including one-time passcodes, FIDO2, the Digipass line, and Cronto transaction signing, which were previously offered as separate products.
A Russian intelligence-linked hacker is arrested in Thailand while enjoying a beach holiday – and the trail of evidence that nailed him to the Russian government includes 14 separate orders of chicken McNuggets. Meanwhile, AI music generator Suno has been hacked – and the stolen data appears to show exactly how much copyrighted music they…
The exercise, hosted by the Center for Strategic and International Studies, simulated a Chinese military exercise around Taiwan in 2027, followed by suspected Chinese cyberattacks on U.S. ports, freight rail, and airports.
The incident, which occurred in mid-July, involved the theft of non-security-relevant technical information from a supplier.
The 2026 State of Threat Exposure Management Report by Vectra AI found that dynamic enterprise environments, with new devices and roles appearing constantly, undermine static asset inventories.
The Kimsuky group compromised a groupware vendor through an externally accessible mail server by exploiting a remote code execution vulnerability.
The Edge Threat Management (ETM) for VeloCloud SD-WAN packages zero trust branch office security with a common operating system, a uniform enforcement engine, and standardized security policies.
Inside the New Attack Class That Breaks the Security Model Behind Modern AI Assistants For decades, software security has relied on a deceptively simple principle: never let untrusted data become trusted instructions. That rule shaped everything from SQL injection defenses to cross-site scripting protections, email security, operating system privilege boundaries, and modern browser sandboxes. Software…
Qualys disclosed CVE-2026-8933, a high-severity Ubuntu flaw that lets local attackers gain root privileges through a race condition in snap-confine. Qualys has disclosed a high-severity local privilege escalation vulnerability, tracked as CVE-2026-8933 (CVSS score of 7.8), affecting default installations of Ubuntu Desktop 24.04, 25.10, and 26.04. The flaw stems from a race condition introduced during a…
OpenAI says several of its AI models autonomously breached Hugging Face infrastructure during an internal cybersecurity test. The incident offers one of the clearest public examples yet of AI agents independently identifying vulnerabilities, escalating privileges, and adapting their attack strategy to achieve a goal. “I don’t think this changes what enterprises should demand from AI…
OpenAI said GPT-5.6 Sol and a pre-release model exploited vulnerabilities to “cheat” on ExploitGym.
