Application Security Analyst Stellantis | USA | On-site – View job details As an Application Security Analyst, you will perform application security testing using SAST, DAST, IAST, and other assessment tools to identify vulnerabilities and support remediation efforts. You will integrate security controls into CI/CD pipelines, implement and manage web application firewall (WAF) protections, and…
Global Security News
AI-generated reports push GNOME to shorten its disclosure window
Volunteer maintainers of open source projects now receive a steady flow of security vulnerability reports produced with AI tools. Many arrive with no mention that a language model helped write them. The volume has grown enough that GNOME is revising the rules it uses to track and disclose vulnerabilities across its projects. The changes come…
Global Security News
Nutanix to Demonstrate Enterprise AI Innovations for the Agentic AI Era at AMD Advancing AI 2026
Nutanix NASDAQ: NTNX, a leader in hybrid multicloud computing, will showcase its vision for enterprise Agentic AI at AMD Advancing AI 2026, demonstrating how organisations can…
Global Security News
Celonis and Valence use AI to slash invoice deduction disputes from weeks to days
Celonis has joined forces with Valence Intelligence to make it easier for Finance teams to track and recover deductions when suppliers don’t pay the full invoice amount.
Global Security News
ISC Stormcast For Tuesday, July 21st, 2026 https://isc.sans.edu/podcastdetail/10016, (Tue, Jul 21st)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Global Security News
The EU’s AI transparency deadline is weeks away. Is your enterprise ready?
Providers and deployers of AI systems: You only have a couple of weeks left until you must explicitly inform users when they are interacting with AI content. To assist in the effort, the European Commission (Commission) has published guidelines to help AI deployers get in line with the AI Act’s transparency obligations, which will begin…
Global Security News
Top American AI Execs Sound Alarm on Chinese Models
The White House is divided on how to respond to recent advances in Chinese AI and has weighed crackdown measures.
Global Security News
I wore Meta’s $499 prescription Ray-Bans for 6 weeks: They’re stylish but not for me
Meta’s Ray-Ban Blayzer Optics are made specifically for prescription eyeglass wearers with a lightweight, stylish design.
Global Security News
How to simplify corporate meetings at a tech company
Most advice about corporate meetings starts after the invite goes out. Build an agenda. Invite fewer people. End on time. That advice is useful, but it skips the point where…
Global Security News
Teradata Autonomous Knowledge Platform Reaches General Availability Across Cloud and On Premises
A foundation to deploy agentic AI without trading control for capability or performance for cost
Global Security News
Estée Lauder discloses data breach via Oracle E-Business flaw
Cosmetics giant Estée Lauder is notifying customers of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations. […]
Global Security News
SonicWall SMA1000 flaws exploited as zero-days to push custom malware
Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances. […]
Global Security News
Hackers steal $23.7 million in crypto from Ostium in off-chain attack
The Ostium trading platform announced that an attacker stole $23.75 million from its liquidity provider vault last week, after compromising off-chain infrastructure used to feed prices into the protocol. […]
Global Security News
Introducing the Amazon GuardDuty investigation agent: on-demand AI-powered threat assessment
The new Amazon GuardDuty investigation agent (now in public preview) investigates security findings across your Amazon Web Services (AWS) environment, reducing investigation time from hours to minutes. GuardDuty is our managed threat detection service that continuously monitors your AWS accounts and workloads for suspicious, potentially malicious activity, and unauthorized behavior, delivering detailed security findings for…
Global Security News
DocuSign Phishing Kit Delivers RMM Tools to Windows and macOS
Phishing campaigns are increasingly shifting away from traditional malware in favor of trusted business applications and legitimate IT tools. Research from BlueVoyant shows attackers are using realistic DocuSign-themed pages to trick users into installing legitimate remote monitoring and management (RMM) software. By abusing trusted administrative tools, the attackers can establish persistent access to Windows and…
Global Security News
Bridging the divide: The convergence of AI and infosec
AI development and cybersecurity are on a collision course. Here’s why the inevitable crash could be better for both.
Global Security News
‘WP2Shell’ Opens Millions of WordPress Sites to Remote Takeover
Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.
Global Security News
Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes
Researchers escaped the sandboxes in Cursor, Codex, Gemini CLI and Antigravity by having the AI agent write files that trusted host tools later run. Multiple CVEs, patches, and Google downgrading two Antigravity findings. […]
Global Security News
Want to add Android Auto to your old car? Here are two ways – including one that’s under $20
If you feel like you’re missing out on Android Auto by having a vehicle with no screen, here’s your chance to fix that.
Global Security News
JadePuffer agentic attacks now target AI model data with ransomware
The JadePuffer autonomous AI agent has upgraded with custom malware called EncForge that focuses on encrypting AI assets, such as training datasets, vector databases, and model checkpoints. […]
Global Security News
Hugging Face Says Autonomous AI Agent System Breached Production Infrastructure
An AI-led cyberattack breached limited Hugging Face datasets and service credentials, while public models, Spaces and published packages showed no signs of tampering.
Global Security News
Guide helps organizations evaluate AI in security operations centers
The guide, developed by Prophet Security in collaboration with former Gartner analysts, addresses the high failure rate of enterprise AI projects in production, estimated between 80% and 95%.
Global Security News
LG monitors criticized for silently installing McAfee ads via Windows Update
The LG Monitor App Installer, identified by YouTube channel Gamers Nexus, installs automatically when a compatible LG monitor is connected to a Windows PC.
Global Security News
Hugging Face uses GLM 5.2 to investigate AI agent-driven cyberattack
Hugging Face turned to an open-weight model after being restricted by frontier model guardrails.
Global Security News
South Korea proposes new rules for seizing self-custody crypto wallets
South Korea’s proposed legislation seeks to amend the Criminal Procedure Act to accommodate the seizure of digital assets held in self-custody wallets, such as hardware wallets.
Global Security News
HollowGraph malware uses Microsoft 365 calendar for command and control
HollowGraph, believed to be part of the Cavern command-and-control framework, targets organizations in Israel for espionage purposes.
Global Security News
Ecopetrol confirms ransomware attempt, data stolen from 3,300 accounts
The incident involved an unidentified threat actor accessing Ecopetrol’s IT infrastructure and exfiltrating pseudonymous data from 3,300 user accounts.
Global Security News
U.S.-Iran Tensions Jostle Markets
Plus, China’s AI advances worry U.S. officials, and the big contracts propping up the AI boom may not be sure things.
Global Security News
Craneware confirms customer and employee data exposed in security incident
The breach, which occurred on July 20, saw a significant volume of file names viewed and exfiltrated by unauthorized individuals.
Global Security News
F5 fixes critical nginx vulnerability CVE-2026-42533
The vulnerability, with a CVSS score of 9.2, allows an unauthenticated attacker to trigger a heap buffer overflow by sending specially crafted HTTP requests.
Global Security News
Remediating Vulnerabilities With LLMs: Inside Ivanti’s Automation Push
Ivanti CSO Daniel Spicer says frontier models have shown surprising effectiveness in early stages; but cost and human-in-the-loop viability remain open questions.
Global Security News
ServiceNow’s sandbox escape RCE hole now exploited in the wild
A sandbox security hole that could lead to remote code execution (RCE), patched last week by ServiceNow, is being actively exploited in the wild, according to a report from threat intel firm Defused. The report, posted on X, said the firm is “observing in-the-wild exploitation of the ServiceNow pre-auth sandbox-escape RCE (CVE-2026-6875).” Defused CEO Simo…
Global Security News
Head of federal AI testing lab resigns after three months
The director of a key federal government AI testing lab, Chris Fall, is stepping down from his position just three months after taking the helm, according to a recent report by CyberScoop.
Global Security News
Cyber resilience fuels AI growth, but CISOs see key gaps
Global Security News
CISOs Feel the Heat Over AI Risk
Job pressures have increased as companies run headlong into AI adoption, causing 26% of top security executives to consider leaving their position.
Global Security News
The Odyssey piracy scams surface hours after its theatrical debut
Christopher Nolan’s The Odyssey had barely reached theaters before scammers began targeting people searching for pirated copies, according to Malwarebytes. Within hours of the film’s release, researchers found two separate scams running on cloned piracy sites: fake browser warnings and Windows executables disguised as movie downloads. “Neither scam has anything to do with the movie…
Global Security News
Critical ServiceNow AI flaw exploited days after patch release
Global Security News
WordPress Exploitation Underway (CVE-2026-63030), (Mon, Jul 20th)
Last week, Searchlight Cyber released details about a vulnerability they are calling “wp2shell”. The vulnerability was initially announced without a CVE number. But now has been assigned CVE-2026-63030. Many WordPress plugin vulnerabilities are never assigned CVE numbers. But wp2shell is different. It is a SQL injection vulnerability in WordPress Core, not a plugin, and can…
Global Security News
Attackers Combo Up Evasion Tactics for BEC Phishing
“The TFF Trap” uses fileless techniques and loaders with low detection rates to deploy various RATs and stealers, including Agent Tesla, Remcos, XWorm, and Best Private Logger.
Global Security News
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign codenamed FakeGit. “FakeGit uses copied projects, lookalike developer profiles, convincing READMEs, and malicious ZIP
Global Security News
Director of Commerce AI standards office out after three months
The head of a key federal government AI testing lab is leaving his post just months after taking over. A Department of Commerce spokesperson confirmed to CyberScoop that Chris Fall is stepping down as director of the Center for AI Standards and Innovation, and his position is being backfilled. “Following Chris’s departure, NIST Director Dr.…
Global Security News
New HollowGraph malware uses Microsoft Graph for stealthy C2 comms
A malicious component dubbed HollowGraph uses the calendar feature in compromised Microsoft 365 mailboxes as a command-and-control channel to receive attacker commands and exfiltrate stolen data. […]
Global Security News
I tested a 4TB quantum-resistant USB drive – but you don’t have to spend $3000 for this security
Apricorn’s new 4TB Aegis Secure Key is the biggest-capacity hardware-encrypted flash drive on the market right now.
Global Security News
Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains. One was already live against Windows users in Mexico, delivering an infostealer through a fake government ID-lookup site over WebDAV. What makes it…
Global Security News
HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel
Microsoft 365 calendars have become a hiding place for espionage malware, with commands and stolen files stashed inside appointments dated to the year 2050, researchers from Group-IB discovered. Targeted campaign tied to Iranian espionage activity The malware, which Group-IB calls HOLLOWGRAPH, is one component of a bigger toolkit the company links with high confidence to…
Global Security News
The best rugged phones in 2026: Expert tested
Most mainstream phones are durable enough for everyday use, but if you’re the adventure-seeking kind, check out our top rugged phones.
Global Security News
HuggingFace breach that’s blamed on AI agent is defended by AI, too – what users should do next
An agentic AI infiltrated the production infrastructure of an AI project. Then an AI detected it. Is this the future of cyberattacks, and how will they be defended against?
Global Security News
An AI agent breached Hugging Face before an AI defender caught it: What users should do next
An agentic AI infiltrated the production infrastructure of an AI project. Then an AI detected it. Is this the future of cyberattacks, and how will they be defended against?
Global Security News
2026 ISO and CSA STAR certificates are now available with two additional services
Amazon Web Services (AWS) successfully completed an onboarding audit with no findings for ISO 9001:2015, 27001:2022, 27017:2015, 27018:2019, 27701:2019, 20000-1:2018, and 22301:2019, and Cloud Security Alliance (CSA) STAR Cloud Controls Matrix (CCM) v4.0. EY Certify Point auditors conducted the audit and reissued the certificates on May 31, 2026. The objective of the audit was to…
Global Security News
Slide CEO: MSP Backup Is Overdue for Modernization
Backup and disaster recovery may be a mature technology category, but much of the infrastructure protecting MSP customers was designed for a far different threat landscape. Michael Fass, co-founder and CEO of backup and disaster recovery provider Slide, argues that aging BCDR platforms can create security, recovery and operational risks for MSPs already contending with…
Global Security News
Why I still recommend Synology’s DS225+ NAS – even if it can’t replace your cloud storage
Soaring hard drive prices are making NAS boxes a niche product, but the Synology DS225+ still makes sense. Here’s why.
Global Security News
Hugging Face Discloses Autonomous AI Agent Attack
Hugging Face disclosed that attackers breached its production infrastructure using an autonomous AI agent attack. The attackers gained access to internal datasets and credentials by exploiting vulnerabilities in the company’s data-processing pipeline. While the investigation is ongoing, the company said it has found no evidence that public-facing models, datasets, or Spaces were modified, and its…
Global Security News
Odyssey piracy scams appear within hours of the movie’s release
Christopher Nolan’s The Odyssey is one of the biggest movie releases of the year and scammers wasted no time taking advantage of it. Within hours of the film’s release, we found scams targeting people looking for pirated copies. Some used fake browser warnings on piracy sites, while others disguised malware as movie downloads. Some used…
Global Security News
2026 North America Community Meeting Agenda Highlights
Join us in Vancouver, BC, Canada, September 15-17 for the 2026 PCI SSC North America Community Meeting! The entire payment card industry is invited to come together as a community for important Council updates, insights on industry trends, strategies on best practices, engaging keynotes, and industry expert speakers.
Global Security News
Cruciferra Crypter Uses Process Ghosting to Evade Detection
Cruciferra crypter used process ghosting and 90 custom ciphers to hide payloads for multiple actors
Global Security News
Paidwork breach exposes sensitive data of 23 million user
Data belonging to more than 23 million users has been exposed following a breach at Paidwork, a platform that pays people for completing online microtasks. Paidwork markets itself as a way to earn money through simple tasks like watching ads, testing apps, and completing surveys, with most jobs paying only a few cents at a…
Global Security News
LG Monitors Spotted Installing Adware-Like App on Windows PCs
Connecting certain LG monitors prompts Windows Update to install an LG app without consent, while the software runs at startup and displays McAfee trial adverts.
Global Security News
Scale Computing Brings AMD CPUs to SC//HyperCore 9.7
Scale Computing, an edge computing and network solutions provider, is expanding deployment options for its edge solutions to include support for AMD EPYC and AMD Ryzen AI processors. SC//HyperCore now supports AMD CPU infrastructure Scale Computing’s SC//HyperCore virtualization suite version 9.7 adds support for AMD CPU-based infrastructure, expanding support for customers and partners and providing…
Global Security News
AI adoption and business acceleration are changing the expectations of technology risk management
As AI becomes embedded in customer experiences, internal workflows, and throughout the supply chain, security leaders are being asked to do more than manage risk. They are being asked to help the business make more informed decisions and move faster. At the same time, AI has evolved faster than the programs built to govern it.…
Global Security News
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar events dated to the year 2050. Group-IB, which named the malware HollowGraph, says the approach moves tasking and stolen data through legitimate Microsoft Graph API traffic,…
Global Security News
ServiceNow pre-auth RCE exploited in the wild (CVE-2026-6875)
Attackers have begun exploiting CVE-2026-6875, a critical pre-authentication vulnerability in the ServiceNow AI Platform, according to threat intelligence firm Defused. About the vulnerability ServiceNow AI is a Platform-as-a-Service that lets organizations build and automate digital workflows. CVE-2026-6875 is a code injection vulnerability that lets unauthenticated attackers escape ServiceNow’s script sandbox and execute code remotely on…
Global Security News
Healthcare giant Abbott probes two cyber incidents amid extortion claims
Abbott Laboratories, one of the world’s largest healthcare and medical device companies, is investigating two apparently unrelated cyber incidents after confirming unauthorized access to internal systems. While Abbott says there has been no impact on manufacturing, laboratory operations, or patient care, cybercriminal groups ShinyHunters and ShadowByt3$ claim the breaches were far more extensive. Those claims…
Global Security News
Mitel’s Ben Macdonald Outlines Partner Growth Strategy
Mitel’s new global channel leader says hybrid communications, AI, and stronger partner alignment represent the company’s biggest opportunities for growth as organizations continue modernizing their collaboration environments. Ben Macdonald, who joined Mitel in June as Vice President of Global Channel Go-to-Market, told Channel Insider he plans to focus on simplifying the partner experience while using…
Global Security News
WordPress Remote Code Execution Flaws Get Public Exploits
Organizations running WordPress should prioritize installing the latest WordPress security update after public proof-of-concept (PoC) exploits were released for WordPress vulnerabilities that can be chained to achieve remote code execution (RCE). “This is going to hurt. WordPress runs on hundreds of millions of websites globally. Some of those will be auto-patched by their hosting providers,…
Global Security News
SleeperGem attack targets Ruby ecosystem with malicious gems
The SleeperGem attack utilizes three malicious Ruby gems: git_credential_manager, Dendreo, and fastlane-plugin-run_tests_firebase_testlab.
Global Security News
How I configure DNS on Ubuntu Linux distros via the command line – it’s easier than you think
DNS is a critical component for PC networking, searching, and security. If you want to learn how to set it up on Ubuntu-based distros from the command line, here’s how.
Global Security News
Audit reveals gaps in FAA and TSA cybersecurity strategies
The GAO audit found that the FAA has only fully implemented three out of seven objectives for protecting agency networks, with critical areas like cyber monitoring, response, and the transition to zero-trust security remaining incomplete.
Global Security News
US federal workers mandated to use app with Russian-founded vendor’s code
The application, costing $1.4 million, was mandated for use by the FAA and other federal employees.
Global Security News
Why blocking AI models won’t stop the cyber threats they create
2026 has turned out to be the year when predictions about AI-powered cyberattacks, long hypothesized as a potential risk associated with AI improvement, seem to be coming true. New models have capabilities on par with the best human hackers, marking a pivotal window of opportunity in both AI and cybersecurity policy. This is a transitional…
Global Security News
HelloNet campaign abuses ViPNet update mechanism to target Russian organizations
The HelloNet campaign targets organizations using ViPNet, a Russian information-security product suite commonly used in government and regulated environments.
Global Security News
JadePuffer Returns With Ransomware Designed to Wipe AI Models
JadePuffer follow-up campaign deployed ENCFORGE locker built to destroy AI model artifacts
Global Security News
HollowByte vulnerability allows denial-of-service attacks on OpenSSL
The HollowByte vulnerability, detailed by Okta’s Red Team, exploits a flaw in how OpenSSL handles TLS handshake messages.
Global Security News
An AI SOC Evaluation Guide for Security Leaders
Choosing an AI SOC platform requires understanding how it will perform in your own environment, not just during an evaluation. Prophet Security shares a practical framework for assessing AI SOC solutions, including how to validate accuracy, operating models, long-term reliability, and production readiness. […]
Global Security News
Abbott Laboratories investigates 2 separate cyber incidents
The first incident was highlighted when the ShinyHunters extortion gang claimed to have accessed Abbott’s internal legacy Exact Sciences systems in its Cancer Diagnostics business.
Global Security News
Cybersecurity Keeps Events ‘Uneventful’
From the World Cup to the United States’ 250th celebration, this year’s event calendar has been packed with high-profile gatherings that drew global audiences, intense scrutiny, and enormous security demands.
Global Security News
Researchers Build WordPress Exploit Using OpenAI’s GPT
A researcher who discovered a critical vulnerability in WordPress has used OpenAI’s latest model to develop an exploit chain
Global Security News
Android lock screen vulnerability allows Gemini to send messages without PIN
The vulnerability requires physical access to an Android device and involves a specific multi-touch gesture.
Global Security News
New npm malware cluster targets Vite ecosystem
The ViteVenom campaign, attributed to the threat actor SuccessKey, builds upon the tactics seen in the earlier ChainVeil attack.
Global Security News
How to check if ChatGPT and other AI tools cite your website – and improve your chances in 2026
SEO is not dead. Here’s how to get cited more often and boost search visibility in AI tools today.
Global Security News
wp2shell (CVE-2026-63030, CVE-2026-60137): Frequently asked questions about remote code execution chain in WordPress Core
An unauthenticated attacker can chain two WordPress Core vulnerabilities, CVE-2026-63030 and CVE-2026-60137, to achieve remote code execution against affected WordPress installations. Multiple security firms have confirmed active in-the-wild exploitation within days of public disclosure, and public proof-of-concept exploits are circulating. Key takeaways: Two WordPress Core vulnerabilities, CVE-2026-63030 and CVE-2026-60137, can be chained together to achieve…
Global Security News
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
A single request should not be able to do this much. But this week, small inputs led to code execution, memory loss, stolen keys, and disabled security tools. The paths were often simple: exposed systems, weak checks, old drivers, fake prompts, and public code used for malware delivery. Some bugs were new. Others were already…
Global Security News
China’s Top AI Event Delivers Message to the U.S.: We’re Coming for You
Any hopes the U.S. held for building an impregnable lead in the technology were dashed by the progress seen at a convention in Shanghai.
Global Security News
Dutch Intelligence Warns Russia Uses Hacked IP Cameras for Military Espionage
Dutch intelligence says Russia hacks IP cameras to monitor NATO military logistics and weapons shipments to Ukraine. The Netherlands’ AIVD and MIVD, the civilian and military intelligence services, published a joint advisory on July 10 confirming that at least one Russian intelligence service is systematically compromising internet-connected IP cameras across the Netherlands, other EU and…
Global Security News
Apple could ‘run the table’ on AI if it does things right
Looking ahead just a short time, Apple could hold a powerful position in AI where it most makes sense: deployment. Not only will the company offer up its own AI models for the kind of tasks millions use ChatGPT to do today, but it will provide more sophisticated on-device agentic models to help users get…
Global Security News
Italy fines WINDTRE €1.7 million over security flaws behind two data breaches
Italy’s data protection authority, the Garante per la Protezione dei Dati Personali, fined WINDTRE €1.7 million over “serious data security shortcomings” that let hackers breach its systems twice and exfiltrate personal data belonging to more than 365,000 customers. The regulator opened its investigation after WINDTRE, one of Italy’s major telecom operators, reported two separate data…
Global Security News
Radware Introduces New DefensePro X Protection
Radware, a provider of AI and application security and delivery solutions for multi-cloud environments, has announced a new cloud-augmented protection architecture for DefensePro X, which protects against distributed denial-of-service attacks (DDoS). The new architecture will extend the platform with AI-powered cloud algorithms while keeping traffic inspection and mitigation on-premises. For channel partners, including Radware’s MSSP…
Global Security News
A Vulnerability Chain in WordPress Core Could Allow for Remote Code Execution
A vulnerability chain has been discovered in WordPress Core that could allow for remote code execution. WordPress is an open-source content management system (CMS) used to design, build, and publish personal and commercial websites. Successful exploitation of vulnerability chain could allow for remote code execution in the context of the affected service account. Depending on…
Global Security News
Patch now: WordPress REST API bug allows remote code execution
Organizations running recent versions of WordPress are being asked to patch a newly detailed pre-authentication remote code execution (RCE) vulnerability affecting the platform’s built-in REST Batch API. The flaw, dubbed wp2shell, enables attackers to execute arbitrary code against a default WordPress installation without requiring plugins, authentication, or special configuration. Adam Kues of Searchlight Cyber first…
Global Security News
New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2 Communications
Researchers have linked HollowGraph malware to the Cavern framework after discovering its use of Microsoft 365 calendars and Microsoft Graph APIs as a stealthy C2 channel
Global Security News
The top AI fear for 6,000 tech pros isn’t losing their jobs – it’s more work for the same pay
Most tech professionals wouldn’t recommend their own role to someone entering the industry today.
Global Security News
20th July – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 20th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Ernst & Young, a global accounting and professional services company, has disclosed a data breach involving a compromised third-party IT support platform. The exposed support tickets may have contained client documents, tax information,…
Global Security News
Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine
At least one Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukraine, using the feeds to watch military transport routes, weapons shipments bound for Kyiv, and the locations of Ukrainian troops. That is the finding of a cybersecurity advisory published July 10 by the AIVD and MIVD, the Netherlands’ civilian and…
Global Security News
I recreated OpenAI’s Codex Micro for a lot less – and mine is more customizable
The $230 Codex Micro sold out before I could buy one, so I turned my Stream Deck+ into a surprisingly capable alternative.
Global Security News
The Hidden Risk in Enterprise AI Agents: Ungoverned Context
Enterprises are handing AI agents real access to customer records, financial systems, internal documents, and the tools that…
Global Security News
New ACR Stealer campaigns use WebDAV, MSHTA to evade detection
Microsoft has issued a warning about a recent surge in ACR Stealer activity that uses ClickFix-style social engineering to steal credentials, browser data, and sensitive business documents. In a new report, Microsoft researchers detailed two separate campaigns observed between late April and mid-June 2026 that use different execution techniques for the same theft. The campaign…
Global Security News
Hugging Face discloses breach linked to autonomous AI agent
The Hugging Face artificial intelligence repository disclosed that attackers gained access to internal datasets and credentials after breaching its production infrastructure using an autonomous AI agent system. […]
Global Security News
Mythos Didn’t Break Your Security Program. Your Exposure Window Could.
The industry spent the initial months after Anthropic’s April 7 Mythos reveal focused on volume. How many new CVEs would Mythos add to an already overloaded pipeline? How quickly would the flood of AI-driven discovery overwhelm triage capabilities? How long would it take adversaries to weaponize Mythos findings at scale? Those questions were and remain…
Global Security News
FBI Arrests Florida Man in $220,000 Steam Crypto Theft Case
FBI agents arrested a Florida man accused of spreading Steam game malware that stole $220,000 in crypto, including $32,000 from a terminally ill cancer patient.
Global Security News
Infostealer Malware Infects Millions of Devices
Malware designers have evolved beyond their initial simplicity, becoming more devious in their abilities to access your personal data. Gone are the days of attempting to hack into corporate systems; they are finding it a lot more lucrative to go after private individuals. This malware is of particular interest to those in South Africa as…
Global Security News
Q&A: Why boutique consultancies might be better for AI rollouts than the bigwigs
Major AI labs are unleashing forward-deployed engineers (FDEs) to try and grab enterprise customers. Large consultancies are dishing out tokens and assembling armies of consultants — both human and agent — to do the same. But smaller firms are in the mix now, as well. AI is helping 28Stone Consulting, a New York-based, 230-person technology…