Month: June 2026

Microsoft has introduced a new Teams admin policy that allows organizers to prevent third-party bots from joining meetings without approval. […]

Read more →

A wave of phishing emails sent to Booking.com partner accommodations in Japan in May led to blockchain-hosted malware

Read more →

Read more in my article on the Hot for Security blog.

Read more →

With AI agents increasingly expected to remember conversations, preferences, and decisions over extended periods, Microsoft Research has developed Memora, a memory system designed to provide more scalable and reliable long-term recall than existing approaches. AI agents are increasingly expected to retain context across weeks or months rather than individual chat sessions. Memory can become fragmented,…

Read more →

Attackers are exploiting CVE-2026-48558, a recently patched authentication bypass vulnerability in SimpleHelp RMM, to drop the novel Djinn Stealer malware on victim computers. The malware is capable of targeting Windows, macOS, and Linux systems, and “collects credentials associated with cloud platforms, source control, package registries, infrastructure tooling, AI development assistants, browsers, SSH, and cryptocurrency wallets,”…

Read more →

This setting meshes perfectly with how my brain works, and I don’t miss deadlines anymore.

Read more →

For a US automotive manufacturer working with more than 200 active vendors, supplier file intake had become a growing security and cost challenge. Suspicious submissions often reached the SOC without enough context, forcing Tier 1 analysts to escalate most cases and slowing detection and response across the business.  By introducing a scalable triage and analysis process…

Read more →

There are a variety of security concerns about artificial intelligence (AI), especially when it comes to the behavior of agentic AI. But until recently, the concept of locking down the models to prevent tampering hasn’t gotten a lot of attention. Now, a security technology called “confidential computing” has emerged that could help solve that problem:…

Read more →

Kali Linux 2026.2, the second release of the year, is now available for download, featuring 9 new tools and numerous Kali NetHunter improvements. […]

Read more →

The Blackfield ransomware gang is asking for a $2 million ransom from Nidec Corporation, a large Japanese manufacturer of electronic components for automotive and computing applications. […]

Read more →

Woolworths is turning Olive, its long-running customer-service chatbot, into an AI agent that plans your meals, builds your basket and hunts for cheaper swaps. The upgrade runs…

Read more →

Apple released updates for iOS/iPadOS, macOS, and Safari on Monday. There have been no updates for other Apple operating systems (visionOS, watchOS, tvOS). Usually, Apple updates all products at the same time. Most of the vulnerabilities affect the web browser (WebKit, libxslt, WebRTC, and Web Extension). Only four of the vulnerabilities are not directly related…

Read more →

Brick is building a devoted user base of phone addicts who want to stop doomscrolling

Read more →

SonicWall records 264,000 events in first five months of 2026 as UK hospitals come under siege

Read more →

Two researchers have found six security flaws in AirDrop and Quick Share, the wireless features that beam files between nearby devices with no cables or shared network. An attacker within wireless range, with just a laptop and no prior connection, can crash the sharing service on a Mac or iPhone set to receive from anyone,…

Read more →

A utility called Fluent Cleaner will analyze your Windows environment to find and remove junk files, temp files, unused Registry entries, and other clutter – for free. Here’s how to use it.

Read more →

Attackers are exploiting a critical flaw in Oracle E-Business Suite, CVE-2026-46817, that allows remote, unauthenticated attackers to take over Oracle Payments. A critical vulnerability in Oracle E-Business Suite, tracked as CVE-2026-46817, is being actively exploited in the wild, according to cybersecurity firm Defused Cyber. “CVE-2026-46817 (CVSS 9.8 unauth HTTP takeover in Oracle E-Business) is being…

Read more →

Wireless charging is a helpful feature, but you may not be getting the optimal speed with your accessories.

Read more →

The future of work is likely to require a careful blend of human skills and AI agents. Here’s how to work successfully with your agentic counterparts.

Read more →

Read more →

Similar to the events that unfolded with the Conti ransomware group’s demise in 2022, leaked internal chat logs of the Black Basta cybercrime group last year gave us a peek behind the curtain of modern ransomware operations. We found that these groups have continued to evolve into highly sophisticated and organized syndicates, taking a corporate-style…

Read more →

Google Cloud used its Sydney summit to declare the “agentic era” open for business. The proof points for the Australian version of the summit were satisfyingly local: Bunnings’…

Read more →

CISA confirmed on Monday that ransomware gangs are now exploiting a Microsoft Defender privilege escalation vulnerability, dubbed BlueHammer, that has previously been abused in zero-day attacks. […]

Read more →

Taiwanese authorities escalated a probe into the unauthorized diversion of advanced artificial-intelligence servers made by Super Micro Computer, as part of efforts to crack down on the alleged smuggling of Nvidia chips to China.

Read more →

Convince an AI browser that it is playing a game, and it can hand over your login details. That is the finding behind BioShocking, a technique from security firm LayerX that tricked six AI browsers and assistants into copying a user’s credentials and sending them to an attacker. The targets included OpenAI’s ChatGPT Atlas, Perplexity’s Comet,…

Read more →

Penetration testers who run Kali Linux inside virtual machines boot their systems faster after the 2026.2 release. The change comes from a decision about graphics firmware, the code that drives NVIDIA, AMD, and Intel GPUs. That firmware has grown large enough to slow the early stages of startup, and few virtual machines need it. Kali…

Read more →

Report Fraud data reveals that more than half of 323 UK ransomware victims last year were SMEs

Read more →

OpenClaw, a self-hosted personal AI assistant that connects to existing chat apps, is now available on iPhone, iPad and Apple Watch. The release brings chat, real-time voice conversations, approvals, device capabilities, and private automations to iOS. Connecting OpenClaw to iPhone The app pairs with an OpenClaw Gateway, enabling users to communicate with their AI assistant…

Read more →

A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API. The flaw, tracked as CVE-2026-8037, carries a CVSS score of 9.8 according to ZDI. A patch is available. If you run LoadMaster with the API enabled, update now. Progress published…

Read more →

Apple on Monday released security updates for iOS, macOS, and the Safari web browser to address over three dozen flaws, including four vulnerabilities in WebKit that were discovered using artificial intelligence (AI) tools like Anthropic Claude and OpenAI Codex Security. The WebKit vulnerabilities are listed below – CVE-2026-43707 – A memory corruption issue that could…

Read more →

Phones and laptops ship with a feature that sends files to nearby devices over the air, with no cables, accounts, or prior pairing. Apple calls its version AirDrop. Google and Samsung call theirs Quick Share. Both run inside privileged background services that wake when another device comes within wireless range, and both read a stack…

Read more →

Latest updates in Oracle Cloud SCM also include new inventory optimisation capabilities.

Read more →

AVG Mobile Security for iOS helps protect users against online threats with features including Web Guard, VPN, Scam Guardian Pro, Hack Alerts, and Photo Vault. It also identifies suspicious calls and scam text messages and helps keep personal information private while using Wi-Fi networks with its VPN. The app is available for Windows, macOS, Android,…

Read more →

Across the open source world, people are reporting software flaws in record numbers, and the systems built to verify those reports are straining under the weight. The GitHub Advisory Database, which feeds automated security alerts to millions of projects, has reached a point where some new advisories take weeks to publish. In May 2026, the…

Read more →

Boomi enables Australasian operations and services provider to centralise vendor management, connecting onboarding, compliance, and financial systems.

Read more →

The latest email threats: real Microsoft login phishing, device code scams with a kill switch, split-click attacks, and the shift to malware delivery

Read more →

A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cyber. The vulnerability, tracked as CVE-2026-46817 (CVSS score: 9.8), refers to an improper privilege management and authentication flaw in Oracle Payments that could be abused to take over susceptible instances. “Easily exploitable vulnerability allows

Read more →

The latest email threats: real Microsoft login phishing, device code scams with a kill switch, split-click attacks, and the shift to malware delivery

Read more →

Presented here is a curated selection of noteworthy open-source cybersecurity solutions that have drawn recognition for their ability to enhance security postures across diverse settings. OWASP Agent Memory Guard: Stop AI agents from being weaponized through their own memory AI agents keep memory across sessions. Conversation history, vector stores, scratchpads, and RAG indexes persist between…

Read more →

Containers power a large share of cloud-native applications, AI workloads, and testing and deployment pipelines. Developers working on Windows have long pulled in third-party software to build and run them. That step becomes optional with WSL containers, a feature that arrived at Microsoft Build 2026 and reached public preview in the pre-release version of the…

Read more →

Dematic has wrapped up three days of innovation, industry engagement and education at CeMAT Australia 2026, showcasing the technologies, software and expertise shaping the…

Read more →

Improving your online presence requires more than just guessing what works for your website.

Read more →

CMMC requirements are appearing in defense contracts and moving down through supplier networks to thousands of companies new to this kind of compliance work. Many run on limited budgets with lean security teams. The picture comes from nearly 900 defense contractors, C3PAOs, federal suppliers, and cybersecurity professionals who attended the 2026 Secureframe National Cybersecurity Summit.…

Read more →

For large organisations, scaling content production is a major challenge that often leads to quality issues or performance drops.

Read more →

Improving your online presence requires more than just guessing what works for your website.

Read more →

AI Offensive Security Engineer AGAPI | UAE | On-site – View job details As an AI Offensive Security Engineer, you will leverage AI and LLMs to accelerate offensive security research, exploit development, vulnerability discovery, and security automation. You will validate AI-generated findings through manual testing, conduct authorized security assessments, and produce high-quality technical reports and…

Read more →

Vodafone’s EOFY sale is boasting major savings across devices, postpaid and prepaid plans, tablets, wearables and accessories.

Read more →

Interactive doubles down on AI strategy, embedding AI internally as Customer Zero while accelerating customer adoption

Read more →

GIGABYTE TECHNOLOGY Co. Ltd, a leading manufacturer of motherboards, graphics cards, and hardware solutions, announced its highly anticipated EOFY promotion in Australia….

Read more →

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Read more →

While AI can be the catalyst for significant gains, organisations that don’t implement it smartly will struggle to realise them.

Read more →

Barry Plant has achieved a significant milestone in the lead-up to Australia’s Anti-Money Laundering and Counter-Terrorism Financing AML/CTF reforms, becoming fully prepared…

Read more →

New DroneShield Report Reveals Serious Gaps in Airport, Critical Infrastructure Counter-Drone Security

Read more →

New DIMETRA Connect solution provides seamless roaming between TETRA and broadband for more than 45,000 emergency services users

Read more →

Mable, Australia’s leading platform connecting people seeking disability and aged care support with independent support workers, has gone live with Contentful to power its…

Read more →

Infoblox Threat Intel links more than 236,000 scam sites to one framework and logs five million enterprise attempts to reach them.

Read more →

Sophos X-Ops presents a working taxonomy for attacks using, and targeting, AI

Read more →

WhatsApp will introduce usernames later this year, letting its 3 billion users connect without sharing phone numbers. WhatsApp has over three billion users, and it’s finally letting them talk to each other without exchanging phone numbers. The company announced this week that usernames are coming later this year, and reservations are open now. The problem…

Read more →

ESET reported that Gamaredon conducted 35 distinct spear-phishing campaigns targeting Ukrainian governmental and military institutions in 2025, primarily in the latter half of the year.

Read more →

The National Institute of Standards and Technology (NIST) scaled back on the number of CVEs it selects for in-depth analysis, but the move has produced mixed results, according to researchers.

Read more →

Nissan Americas disclosed in a filing to the California Attorney General that a cyber event involving Oracle’s personnel records led to the potential theft of payroll information, bank details, and Social Security numbers.

Read more →

The StegoAd campaign employed steganography to hide malicious JavaScript within image and font files, making the extensions appear legitimate and functional.

Read more →

In this post, I will talk about CS2 scams and show you red flags you should never ignore. If you want to trade CS2 skins seriously, a few fundamentals matter before anything else, and account security tops the list. Without proper protection, your skins and your balance are both at risk. This article focuses on…

Read more →

In a 6-3 decision, the Supreme Court ruled that the Fourth Amendment’s protection against unreasonable searches and seizures applies to location data collected by companies like Google.

Read more →

Arcova has launched a new end-to-end data center development offering that integrates engineering, cybersecurity, regulatory compliance, and grid-planning coordination into a single team.

Read more →

Microsoft will continue to offer hotpatching for Windows Server 2022 Datacenter: Azure Edition until 2027, a move that extends support beyond the mainstream end date of October 13, 2026.

Read more →

The identified weak keys exhibit patterns of regularly spaced blocks of zeros.

Read more →

AI browsers help automate tasks, but new LayerX research shows they can be manipulated into accepting a false reality and bypassing security guardrails.  The researchers call the technique “BioShocking,” a reference to the game BioShock, where a character is conditioned to follow instructions they would not normally accept. Key Takeaways LayerX researchers discovered the BioShocking…

Read more →

The U.S. offers up to $10M for information on Russian hackers targeting Signal and WhatsApp accounts of officials and journalists. The U.S. government is offering rewards of up to $10 million for information leading to the identification of members of the Russian-linked groups UNC5792 and UNC4221. The hackers target government officials, military personnel, journalists, and…

Read more →

The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp, targeting credentials linking development and admin environments to wider enterprise systems.

Read more →

A new Senate draft bill would establish a list of AI agent software providers that people can use to establish human ownership and securely run agents on social media and other online platforms. The Artificial Intelligence Access, Gatekeeper Exchange, and Nondiscriminatory Transfer (AI AGENT) Act, led by Sen. Mark Warner, D-Va., would allow end users…

Read more →

Trump order accelerates U.S. quantum strategy, boosting post-quantum security.

Read more →

Researchers spotted 212 new domains registered after Venezuela’s earthquake, warning donors of donation scam risks and urging them to verify relief sites first.

Read more →

One critical vulnerability, among many discovered by a researcher, could have allowed anyone to walk in and take over a national government portal.

Read more →

AI governance gaps are putting CISOs under pressure as customers demand stronger compliance.

Read more →

Nissan is warning that it suffered a data breach affecting current and former employees after threat actors exploited an Oracle PeopleSoft vulnerability in data theft attacks previously linked to the ShinyHunters extortion group. […]

Read more →

The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available data, outdated logs, and configuration files after breaching its systems by exploiting a zero-day vulnerability in an Oracle PeopleSoft server. […]

Read more →

Here’s how to leverage your power station’s capabilities when it’s not during an emergency.

Read more →

Does life feel Orwellian sometimes? One researcher has a solution for you: graphic tees that confuse the neural networks in surveillance cameras.

Read more →

The AWS Customer Incident Response Team (AWS CIRT) encounters patterns that repeat across engagements when helping customers respond to security incidents. We’re passionate about making sure that information is accessible so that everyone can improve their security posture and their organization’s resilience to disruption. The primary method we use to share this information is the…

Read more →

Ford has rehired approximately 350 experienced engineers after the company’s investment in AI and automated quality control systems failed to meet expectations, according to Bloomberg. In short, the technology did not detect enough problems. “We mistakenly believed that we could create a high-quality product simply by introducing artificial intelligence and inputting our design requirements,” Charles…

Read more →

Nation-state attackers breach water systems through weak passwords, exposed PLCs, and poor segmentation — not sophisticated malware.

Read more →

A few weeks ago, I replaced my iPhone 14 Pro battery at the Apple store – and was pleasantly surprised by the results.

Read more →

Japanese telecommunications operator KDDI Corporation has disclosed a data breach that may have exposed email addresses and passwords for up to 14.2 million customer accounts across six internet service providers (ISPs).  The company discovered unauthorized access to a shared email system on June 17, blocked the attacker, and implemented additional defensive measures.  Key Takeaways of…

Read more →

Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every query and every character typed into the address bar through an attacker-controlled server before redirecting users to real results. Microsoft says Google removed it from the store after responsible disclosure.…

Read more →

WhatsApp is finally allowing users to reserve usernames, a privacy feature that lets them hide their phone numbers from people not in their contact list. […]

Read more →

All three are related to smart home connectivity, and it’s critical that you understand their differences.

Read more →

In a 5-4 decision, the Supreme Court upheld the right of states to accept mail-in ballots that are postmarked by Election Day, but can arrive up to five days later through the mail system. The case stems from a lawsuit brought by the Republican National Committee against Mississippi and its Secretary of State, arguing they…

Read more →

The Supreme Court ruled Monday that collecting phone location data from a geographic area is a Fourth Amendment search, in a decision that both privacy advocates and critics of the ruling say will have vast implications for tech privacy. The 6-3 ruling in Chatrie v. The United States is a “major win” for privacy under…

Read more →

Microsoft has extended Windows Server 2022 hotpatching until October 2027, one year after the mainstream end date of October 2026. […]

Read more →

The wish lists ranged from the mundane to the fantastic. There’s a good chance many will actually happen.

Read more →

The Albanese Government says major platforms are not doing enough to keep children off age-restricted social media services, as it moves to double penalties and give eSafety…

Read more →

I needed a way to connect my phone to my router, and have it work reliably. Turns out, I have 3 options (and I saved the best for last).

Read more →

The US Cybersecurity and Infrastructure Security Agency (CISA) added a vulnerability (CVE-2026-12569) in Windchill and FlexPLM, two product lifecycle management software platforms developed by PTC, to its Known Exploited Vulnerabilities (KEV) catalog. Entries in the KEV catalog don’t contain links to reports of exploitation, but PTC’s advisory keeps getting updated with indicators of compromise and…

Read more →

Benchmark scores aren’t enough anymore Patronus AI just announced a $50 million Series B, bringing its total funding to $70 million as it expands into another part of the AI stack. The company builds simulated environments where AI agents can learn, fail, and improve before they’re trusted with real work.  The round was led by…

Read more →

A recent ISACA poll reveals that while 90% of organizations believe employees are using AI, only 22% have seen returns meet or exceed expectations.

Read more →

The attack, which occurred on September 11, 2021, targeted the Texas Republican Party’s website, hosted by Epik.

Read more →

WhatsApp on Monday officially announced the start of global reservations of usernames with an aim to protect the privacy of more than three billion users on the messaging platform. The optional feature is designed to help users connect with someone on the service through usernames, as opposed to directly sharing their phone numbers. Username reservations…

Read more →

The breach occurred when threat actors exploited a vulnerability in third-party software used by KDDI.

Read more →

Attackers are employing sophisticated tactics, hiding malicious code behind convincing government branding and legal references to trick victims into downloading a ZIP archive, according to CYFIRMA.

Read more →