Month: July 2026

Server DRAM contract prices jumped by around 90% in the March quarter, and TrendForcehttps://www.trendforce.com/presscenter/news/20260331-12995.html forecast another 58 to 63%…

Read more →

iTWire TV interviews Neil Westhof, HP’s head of personal assistant category for Australia and New Zealand, about the launch of the HP Elite Board G1.

Read more →

Finding it difficult to choose a suitable VPN service provider? Here’s a checklist for choosing VPN service. Virtual Private Networks, otherwise known as VPNs, are designated services used to spoof locations on the internet. They are mainly deployed to bypass geo-restrictions and access censored content on the web. There are numerous VPN service providers out…

Read more →

Jacob Tsimerman won the biggest prize in math. Now he’s working on the most important problem of his career.

Read more →

Bets on consumer chatbots and flashy side projects overshadowed AI coding opportunity, which rival Anthropic used to capture the lead.

Read more →

OpenAI’s Hugging Face incident disclosure prompted Anthropic to review its own evaluations.

Read more →

The attack chain begins with a spear-phishing email containing a link to an encrypted archive.

Read more →

Bitsight researchers uncovered the operation by monitoring an expired domain used for factory backdoors and telemetry.

Read more →

The Italian Senate’s EU Policies Committee approved a decree allowing the storage of facial biometric data from cameras in sensitive public areas for seven days.

Read more →

The I-GRIP initiative connects law enforcement agencies across 196 countries with financial institutions to expedite the process of stopping fraudulent money transfers.

Read more →

Researchers from four universities conducted a study pitting AI chatbots against human scammers in a simulation of “pig butchering” scams, a form of romance scam that escalates to fake cryptocurrency investments.

Read more →

Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers. […]

Read more →

Read more →

The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. […]

Read more →

South Korea warned that nation-state actors are using phishing and compromised websites to silently infect citizens and businesses. South Korea agencies (The National Intelligence Service, the National Police Agency, the Korea Internet & Security Agency, and the Financial Security Institute) jointly published an advisory warning that a state-backed hacking group is actively targeting South Korean…

Read more →

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors’ clipboards with ones controlled by an attacker. […]

Read more →

Read more →

Read more →

Anthropic said its Claude-based security models gained unauthorized access to the sensitive production environments of three outside organizations during internal testing designed to measure the models’ offensive cyber capabilities. The events, which Anthropic revealed Thursday, are the second revelation in 10 days that AI models from the world’s wealthiest providers have trespassed into protected networks,…

Read more →

AI is beginning to do more than find software vulnerabilities. Anthropic says its Claude Mythos Preview model has now contributed new techniques for analyzing the mathematics behind cryptographic systems. The model developed an improved attack against the post-quantum signature candidate HAWK and accelerated an existing line of attack against a seven-round version of AES-128, according…

Read more →

President Donald Trump blamed Minnesota Friday for the cyberattacks its water systems have suffered in recent days, saying the state was “behind it.” Trump said the state being “incompetent” was the issue, but it wasn’t clear whom he thought actually conducted cyberattacks that U.S. investigators have attributed to Iran — if, perhaps, somehow Minnesota incompetently…

Read more →

Apple’s iPhone and Mac businesses are generating record revenue, but worsening component constraints could limit shipments. Apple reported its strongest June quarter on record, with revenue rising 16% year over year to $109.4 billion and earnings per share reaching $2.02. The biggest drivers were the iPhone and Mac businesses, which both posted record June-quarter sales.…

Read more →

AI-powered managed crowdsourced testing company Testlio announced Wednesday it has become the first and only crowdsourced testing platform currently listed on both the AWS Marketplace and Microsoft Marketplace, following a strong first half of 2026. The company reported 55% year-over-year bookings growth during the first six months of the year, driven by expansion in payments…

Read more →

Artificial intelligence is changing ransomware at a pace many enterprises are struggling to match. While most cybersecurity conversations continue to center on preventing attacks, the growing sophistication and speed of AI-enabled ransomware is forcing organizations, and the channel partners that support them, to rethink cyber resilience from the standpoint of recovery. AI expands the ransomware…

Read more →

Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations.

Read more →

Cybersecurity vendor Coro is expanding its EMEA partner footprint, adding distribution relationships and recruiting MSPs and VARs as European customers seek simpler security platforms, greater automation, and more control over where their data is stored. Ingo Schaefer, vice president of sales for EMEA at Coro, said persistent cybersecurity talent shortages and tighter budgets are pushing…

Read more →

Identity systems sit at the center of enterprise security, but they are also one of the first places attackers look when launching ransomware and other disruptive cyberattacks. In this eSecurityPlanet video podcast, Marty Momdjian, Global Field CTO at Semperis, joins the conversation to discuss how attackers compromise Active Directory and Entra ID, what warning signs…

Read more →

Identity systems sit at the center of enterprise security, but they are also one of the first places attackers look when launching ransomware and other disruptive cyberattacks. In this eSecurityPlanet video podcast, Marty Momdjian, General Manager, Ready1 & Strategic Initiatives at Semperis, joins the conversation to discuss how attackers compromise Active Directory and Entra ID,…

Read more →

Today, we’re releasing the HIPAA Security Rule on AWS: Technical Safeguards Implementation and Readiness Guidance. This helps covered entities and business associates configure, implement, and evidence compliance with the HIPAA Security Rule Technical Safeguard requirements (45 CFR §164.312) when building healthcare workloads on AWS. The HIPAA Security Rule’s Technical Safeguards (§164.312) define five standards and…

Read more →

Hims & Hers patients may have shared more than symptoms and treatment concerns when they sought care online. The Federal Trade Commission (FTC) has filed a lawsuit against Hims & Hers, alleging that the company allowed advertisers to collect and share sensitive patient information while telling customers their health information would remain confidential. The complaint,…

Read more →

OpenAI says it has reduced the price of two GPT-5.6 models, cutting Luna’s API price by 80% and Terra’s by 20% as it works to make its models more efficient. […]

Read more →

A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025. These targeted organizations operate across several sectors, such as healthcare, research, government offices,

Read more →

CISA reports surge in cyberattacks targeting water utility PLCs.

Read more →

Google has used AI tools to detect and patch 1,072 vulnerabilities in versions 149 and 150 of its Chrome browser, the company announced in a blog post. That’s more vulnerabilities patched than in the previous 23 updates combined, according to Bleeping Computer. One vulnerability detected by AI had been present in Chrome for 13 years…

Read more →

A couple-dozen changes to SBOM fields will make them more comprehensive, but some argue that the framework lacks real risk-management improvements.

Read more →

Microsoft has quietly pushed out a new OneDrive Photos app to Windows 11 users. What’s it all about?

Read more →

In the U.S., regulation can protect incumbents while discouraging entrepreneurs. China gives fast-moving startups room to grow before exerting state control.

Read more →

What you’ll get back depends on how much you spent – but don’t expect much.

Read more →

A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. […]

Read more →

South Korea’s Personal Information Protection Commission (PIPC) has fined KT Corp. 53.9 billion won ($37.4 million) after finding that weak network access controls allowed hackers to expose the personal information of 16,647 mobile customers. The regulator said hackers accessed KT’s wireless network through an unauthorized femtocell, a small base station used to extend mobile coverage,…

Read more →

OWASP NHI guidance highlights detection gaps as the biggest security challenge.

Read more →

Brinks Home is investigating a cybersecurity incident that attackers claim began with a Microsoft Entra voice phishing campaign targeting employee identities.  The company confirmed an attacker has threatened to publicly release information allegedly stolen from its systems.  “The party responsible for this situation has threatened to release information it claims to have taken. We are…

Read more →

Disclosure: This article was created in collaboration with Status Labs.

Read more →

Apple’s outgoing CEO, Tim Cook, bade an emotional farewell to analysts and shareholders on Thursday as the company announced a record June quarter. His successor, John Ternus, takes over at the beginning of September with the company seemingly in solid shape. The results were impressive, though some worrying challenges were confirmed. Apple managed to set a new…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector. […]

Read more →

Worried about your personal AI chats being exposed? Here’s how to tighten your privacy across several of the major chatbots.

Read more →

Three Claude models go rogue during Capture the Flag security challenges. Here’s the trail of damage each left behind.

Read more →

Behind the rogue agent’s attack on Hugging Face was a particular sequence of human decisions. We all need to pay better attention – because threat actors are learning, too.

Read more →

LinkedIn’s ‘Seems like AI slop’ button is coming to users, and its existence signals a changing perspective on AI infiltrating digital communities.

Read more →

Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted archive, which holds a Windows Shortcut (LNK). Executing the file triggers a multi-stage chain that

Read more →

Walking around Dubai, it’s hard to believe a war is still going on in neighboring countries. No missiles have struck the city, and it was clear during a recent visit that local residents are keeping to their routines. The biggest public worry, as it has been in many parts of the world, is the extreme…

Read more →

Over at Best Buy, the 2024 Moto G Play dropped down to $100, making this Android one of the budget buys around.

Read more →

Fortnite scam pages like the ones below appear by the dozen every day, recycled endlessly under different names and designs. One version promises $50 from a fake superhero collaboration. Another claims it can calculate what your locker is worth. Both lead to the same destination: a fake Epic Games login page designed to steal your…

Read more →

As newspapers move online, the buildings that once housed their printing presses need new occupants. The Minnesota Star Tribune has just sold its old printing plant on the edge of Minneapolis to the aptly named property developer Legacy Investing, which plans to create a new data center there. has found the ideal way to bring…

Read more →

It’s a sign of the times: Security conference DefCon has added smart glasses to its list of banned audio- or video-recording devices. The organizers have said that, with no consistent way to understand whether smart glasses are recording or not, they have taken the step to ban them in their entirety on the grounds that…

Read more →

It’s a sign of the times: Security conference DefCon has added smart glasses to its list of banned audio- or video-recording devices. The organizers have said that, with no consistent way to understand whether smart glasses are recording or not, they have taken the step to ban them in their entirety on the grounds that…

Read more →

Here’s why in a world where AI models can hack other companies, we have to outreason our adversaries.

Read more →

Software supply chain attacks are evolving beyond compromised software packages into attacks targeting the people, identities, and workflows used to build and distribute software.  Intel 471’s report, Poisoned Trust: How Supply Chain Attacks Weaponize Developer Ecosystems, found that threat actors are increasingly targeting developer accounts, CI/CD pipelines, repositories, IDEs, and publishing infrastructure.  By compromising these…

Read more →

We tested the best laptop cooling pads to keep your device running smooth with powerful cooling, RGB lights, high RPM and more.

Read more →

ZDNET’s latest Data Byte highlights the Netgear Orbi 370’s performance in our lab testing. Here’s what the numbers say.

Read more →

Discover how to apply Zero Trust principles to secure AI adoption, manage agentic risk, and mitigate the threats of frontier AI models.

Read more →

A Chinese-speaking threat actor has been using DeepSeek’s AI models to orchestrate cyber-attacks targeting Asian organizations

Read more →

Managed detection and response services give organizations access to 24/7 threat monitoring, investigation, and incident response without requiring them to build a complete security operations center. They combine security technology, automation, and human expertise to help organizations identify and contain threats more efficiently. We evaluated five leading MDR providers for 2026 based on threat coverage,…

Read more →

Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then click ads on websites run by the same operators. Researchers named the operation Fuyao and attributed it to Zhejiang Fengwo IoT Technology Co., Ltd., a mainland China company founded in…

Read more →

OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a packed July roundup

Read more →

Organizations are rapidly embedding artificial intelligence (AI) into enterprise resource planning (ERP) systems, but many cybersecurity leaders remain unconvinced that their organizations are prepared to secure these environments.  According to the 2026 Onapsis State of AI, Security, and ERP report, AI adoption is accelerating across SAP, Oracle, and Salesforce environments even as concerns about security,…

Read more →

This week’s cybersecurity landscape was defined by attacks against critical infrastructure, actively exploited enterprise flaws, rapidly expanding AI exposure, and major compromises involving healthcare, energy, financial, and retail data. At the same time, AI agents demonstrated how quickly vulnerabilities can be discovered and weaponized, reinforcing the need for faster patching, stronger identity controls, continuous asset…

Read more →

Attackers are adapting established techniques to AI platforms, emerging technologies, and changing user behavior. ESET’s new threat report examines the rise of malicious AI skills, AI-assisted malware, ClickFix attacks, record quishing activity, and ransomware tools designed to disable security software. […]

Read more →

The most valuable move any security team can make is building a certificate and key inventory.

Read more →

Google is creating a new naming scheme for the bad actors behind cybersecurity threats, hoping that it will help to standardize the way that attacks are reported. Spoiler: It won’t. Security researchers use these naming schemes so that they can attribute attacks without necessarily knowing exactly who is behind them. Google had naming schemes in…

Read more →

Google says AI found and helped fix 1,072 Chrome security bugs in two releases, dramatically accelerating vulnerability detection and patching Google’s Chrome Security team published a detailed account of how AI models have transformed their vulnerability management pipeline, and the headline figure is difficult to dismiss: in the last two Chrome releases alone, the team…

Read more →

New York Attorney General Letitia James’s office said Kalshi’s prediction market meets the legal definition of gambling because users are betting on events outside of their control in a game of chance.

Read more →

Broadcom has addresses five vulnerabilities in its VMware product range, three of which have been accorded a “critical” rating. The affected products are: VMware ESX, VMware vCenter, VMware Workstation, VMware Fusion, VMware Cloud Foundation, VMware vSphere Foundation, VMware Telco Cloud Platform, and VMware Telco Cloud Infrastructure CVE-206-59309 affects the VMware Directory Service. According to Broadcom,…

Read more →

When a fraudulent transaction occurs, law enforcement agencies must work quickly to halt payments before cybercriminals cash out.

Read more →

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.

Read more →

Cybercrime has become a commercialized ecosystem where criminals can buy or rent nearly every capability needed to launch sophisticated attacks. These services provide anonymity, plausible deniability, and access to short-lived infrastructure that is difficult to detect, attribute, and disrupt, enabling low-skilled actors to operate at scale, according to the Infoblox 2026 Threat Landscape Report. “Cybercrime…

Read more →

The organization behind Team USA’s Olympic/Paralympic fencing teams has automated identity verification to handle growing membership, cutting manual review time while ensuring athletes compete in the correct categories.

Read more →

Microsoft has had a narrow escape from total embarrassment: A security company uncovered a critical vulnerability that could have compromised all Azure Cosmos DB databases — both those of customers and Microsoft’s own. Google subsidiary Wiz found a flaw in the database’s Gremlin API, usually used for storing and managing property graph data. If bad…

Read more →

Google on Thursday announced that it fixed a whopping 1,072 security bugs in Chrome versions 149 and 150, surpassing the total number of flaws the company fixed across the prior 23 milestones combined. Both versions were released last month. In its latest patch for Chrome 151, released Wednesday, the tech giant resolved 370 flaws, out…

Read more →

An AI-assisted audit found 29 flaws in GlobaLeaks, showing LLMs make large-scale code reviews faster, cheaper, and accessible. GlobaLeaks, a mature whistleblowing platform that had already undergone six independent professional audits over the past thirteen years, was subjected to an LLM-assisted security review that cost roughly USD 3,140 in API calls. The review identified 29…

Read more →

A security investigation into inexpensive Android TV boxes led researchers to an ad fraud operation that had remained unnoticed for several years. Fuyao apps ecosystem (Source: Bitsight) According to Bitsight, the operation, named Fuyao, uses preinstalled Android apps, device identity spoofing, AI-generated websites, and residential proxy services to generate advertising revenue without device owners’ knowledge.…

Read more →

XRP volatility drives faster crypto trading as AI tools gain traction, while phishing, exchange attacks and automation risks test digital asset safeguards.

Read more →

An academic study has disclosed a “widespread class” of security vulnerabilities impacting 4G and 5G core networks that, if successfully exploited, could trigger denial-of-service (DoS) attacks and even session hijacking, allowing an attacker to seize control of a user’s network session. The findings have been released by a group of researchers from Singapore’s Nanyang Technological…

Read more →

According to the newly-published study, phishing and social engineering are becoming more expensive to recover from, trickier to detect, and increasingly augmented by artificial intelligence. Read more in my article on the Fortra blog.

Read more →

Device code phishing – the abuse of the OAuth 2.0 device authorization grant to steal access tokens – has evolved from a niche red-team technique to an industrial-scale threat in under six months. Designed for input-constrained devices like smart TVs, printers, and so on, the device authorization login flow has been adopted by a wide…

Read more →

Palo Alto Networks’ Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch attacks autonomously. After an initial Telegram instruction, the agent found internet-facing systems and selected public exploits. The researchers recovered no further operator input in the session. The operator, tracked through the aliases knaithe and KnYuan,

Read more →

Researchers have described a campaign that delivers a remote access Trojan (RAT) called AtlasRAT through a fake Flash Player installer. People still go looking for “Flash player” because a surprising amount of content and software was built around Flash and never properly migrated. Users often just want a quick way to get those old sites,…

Read more →

We live and work in browsers. It’s where we spend most of our time — and it’s where we waste most of our time as well. Web browsing is slow, inefficient, and full of time-sapping annoyances. But it needn’t be that way. You can turn your browser into a lean, mean productivity machine. To do…

Read more →

Amazon linked the campaigns through overlapping C2 indicators, TTPs and code.

Read more →

JetBrains is warning of a critical security vulnerability in its TeamCity DevOps platform that could allow unauthenticated attackers to execute arbitrary operating system commands on vulnerable servers. “If exploited, this vulnerability may allow an unauthenticated attacker with HTTP(S) access to a TeamCity server to bypass authentication checks and execute arbitrary commands,“ the company said in…

Read more →

If you want to get started with trading, then using either a mobile or desktop device is a great idea.

Read more →

Organizations no longer need to choose between strong endpoint security and a productive workforce.

Read more →

We almost never get both sides of an intrusion. This time we did. Last month, Hugging Face disclosed a breach into part of its production infrastructure, saying an autonomous AI agent system ran the attack from start to finish. Five days later, OpenAI revealed that its own models, including GPT-5.6 Sol along with an unreleased…

Read more →

Plus, an AI startup offers job interviews to candidates who get tattooed, and Kevin Warsh’s honeymoon with the bond market is already over.

Read more →

AWS has linked North Korea to the axios campaign to other attacks on npm libraries

Read more →

Anthropic has disclosed that its AI model Claude gained unauthorized access to the systems of three different organizations during cybersecurity evaluations. The disclosure follows OpenAI’s July 21 announcement that some of its models had escaped an isolated testing environment by exploiting a previously unknown vulnerability and reached the systems of Hugging Face, the open-source machine…

Read more →

The Smartwings window shades are convenient and fully customizable, making them a good option for non-standard windows.

Read more →

U.S. policy has long favored lower taxes on profits and investment. That might need rethinking.

Read more →

I was asked for help with a problem similar to the following. Here is a ZIP file, analyzed with zipdump.py: The filename you see, is in Simplified Chinese: zipdump.py relies on the zipfile or pyzipper Python modules to parse the given ZIP file, and have the metadata (filenames and comments) decoded correctly. If this ZIP…

Read more →

Less than two weeks after OpenAI disclosed that an experimental AI model breached Hugging Face during a cybersecurity evaluation, Anthropic has revealed that its own review uncovered three incidents in which Claude models gained unauthorized access to the production infrastructure of three organizations during similar testing. Anthropic said it launched the review after OpenAI disclosed…

Read more →