Category: Global Security News

In this post, I will show you the 7 leading document verification solutions for 2026. Document fraud has quietly outrun the tools built to stop it. Forged passports and altered driver’s licenses are now joined by AI-generated documents, tampered PDFs, and synthetic bank statements convincing enough to pass a human reviewer and many automated checks.…

Read more →

OpenAI has revealed Astra, an unreleased model designed to tackle complex, long-running tasks, after an internal version produced ten significant advances in mathematics and theoretical computer science. […]

Read more →

Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter TAG-195 Upgrades MaaS Ecosystem with Modular Tools  Inside a DPRK BlueNoroff ClickFix Kit SourTrade: Browser-Assembled Malware Delivered Through Malvertising   MedusaHVNC: A Hidden Desktop That Steals Live Windows Sessions   Unpacking “Cruciferra”: An Analysis of a…

Read more →

A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens Adobe fixed a maximum-severity vulnerability flaw in…

Read more →

Plus, what AI content does to our brains, Meta’s mountain of lawsuits, the million-dollar talent wars for math geniuses and more.

Read more →

Almost every company can now produce a list of what’s inside its software. Almost none can prove the list is right. Related: SBOM’s role in cybersecurity Construction solved this a century ago. Every steel beam carries a stamp naming the mill that poured it. Every concrete truck arrives with a ticket recording the batch. Every…

Read more →

The best investment I’ve made for my MacBook Pro only cost me $13 – here’s why I recommend it.

Read more →

In a rare show of bipartisan agreement, both the U.S. House and the Senate have voted to approve bills aimed at battling fraud — especially scams aimed at older adults.

Read more →

Including New Secret Switch, Enterprise Storage Flagship, Backup Appliances, AI-Driven Surveillance And More

Read more →

After attacks hit 30+ Minnesota water systems, CISA urged utilities to remove internet-exposed PLCs and strengthen OT security. Between Sunday and Monday, July 26 and 27, a coordinated cyberattack hit operational technology (OT) systems at more than 30 community water utilities across the state, according to Minnesota IT Services (MNIT). “A coordinated cyberattack targeted operational technology…

Read more →

Silicon Valley startups are setting up open models, with some operating on shoestring budgets because of limited interest from venture capitalists.

Read more →

For most of the past two years, AI-generated video was a novelty. The clips were short, physically incoherent, and unmistakably synthetic — good for a viral demo, useless for…

Read more →

Security experts find validation of their fears after AI hacking models from OpenAI and Anthropic escaped corporate test-beds.

Read more →

An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2021 firmware integration error routed seed generation to…

Read more →

Feeding your vehicle’s symptoms or a mechanic’s quote to a bot can give deeper insights, but the automotive pros urge caution.

Read more →

Balaji Srinivasan says he believes America is descending into anarchy. His solution: Build a new country from scratch.

Read more →

A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). […]

Read more →

Microsoft says Russian hackers hijacked hotel Wi-Fi portals to spread malware and steal Microsoft 365 tokens from travelers. Microsoft Threat Intelligence disclosed CaptiveCrunch, a campaign it attributes to Storm-2945, an operational sub-cluster of Midnight Blizzard, the Russian SVR-linked group also known as APT29 and Cozy Bear. Since early May 2026, Storm-2945 has been manipulating DNS…

Read more →

Adobe fixed a maximum severity vulnerability in Campaign Classic that could let attackers run code remotely without user interaction. Adobe has addressed a critical vulnerability, tracked as CVE-2026-48449 (CVSS score of 10.0), in Adobe Campaign Classic, the company’s enterprise marketing automation platform. The flaw is caused by incorrect authorization and could allow attackers to execute…

Read more →

A three-part podcast series about how the rise of AI-generated content is warping our sense of what is real, and the dangers that presents.

Read more →

KeySmart’s SmartCard (Gen 3) is perfect for Android and Apple users, and it’s 20% off with a ZDNET-exclusive code right now.

Read more →

Investors are coming around to the idea that Big Tech spending on AI can make sense—as long as there is a cloud-computing business involved.

Read more →

Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported it to authorities. Anyone who visited a site carrying the affected script on July 27 and…

Read more →

Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system. It has been described as a case of incorrect authorization that could…

Read more →

A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report. Researchers track the operation as CaptiveCrunch and attribute it to Storm-2945. It assesses Storm-2945 to be an operational sub-cluster of…

Read more →

iTWire TV interviews Neil Westhof, HP’s head of personal assistant category for Australia and New Zealand, about the launch of the HP Elite Board G1.

Read more →

Finding it difficult to choose a suitable VPN service provider? Here’s a checklist for choosing VPN service. Virtual Private Networks, otherwise known as VPNs, are designated services used to spoof locations on the internet. They are mainly deployed to bypass geo-restrictions and access censored content on the web. There are numerous VPN service providers out…

Read more →

Bets on consumer chatbots and flashy side projects overshadowed AI coding opportunity, which rival Anthropic used to capture the lead.

Read more →

Jacob Tsimerman won the biggest prize in math. Now he’s working on the most important problem of his career.

Read more →

OpenAI’s Hugging Face incident disclosure prompted Anthropic to review its own evaluations.

Read more →

The attack chain begins with a spear-phishing email containing a link to an encrypted archive.

Read more →

Bitsight researchers uncovered the operation by monitoring an expired domain used for factory backdoors and telemetry.

Read more →

The Italian Senate’s EU Policies Committee approved a decree allowing the storage of facial biometric data from cameras in sensitive public areas for seven days.

Read more →

The I-GRIP initiative connects law enforcement agencies across 196 countries with financial institutions to expedite the process of stopping fraudulent money transfers.

Read more →

Researchers from four universities conducted a study pitting AI chatbots against human scammers in a simulation of “pig butchering” scams, a form of romance scam that escalates to fake cryptocurrency investments.

Read more →

Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers. […]

Read more →

The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. […]

Read more →

South Korea warned that nation-state actors are using phishing and compromised websites to silently infect citizens and businesses. South Korea agencies (The National Intelligence Service, the National Police Agency, the Korea Internet & Security Agency, and the Financial Security Institute) jointly published an advisory warning that a state-backed hacking group is actively targeting South Korean…

Read more →

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors’ clipboards with ones controlled by an attacker. […]

Read more →

Anthropic said its Claude-based security models gained unauthorized access to the sensitive production environments of three outside organizations during internal testing designed to measure the models’ offensive cyber capabilities. The events, which Anthropic revealed Thursday, are the second revelation in 10 days that AI models from the world’s wealthiest providers have trespassed into protected networks,…

Read more →

AI is beginning to do more than find software vulnerabilities. Anthropic says its Claude Mythos Preview model has now contributed new techniques for analyzing the mathematics behind cryptographic systems. The model developed an improved attack against the post-quantum signature candidate HAWK and accelerated an existing line of attack against a seven-round version of AES-128, according…

Read more →

President Donald Trump blamed Minnesota Friday for the cyberattacks its water systems have suffered in recent days, saying the state was “behind it.” Trump said the state being “incompetent” was the issue, but it wasn’t clear whom he thought actually conducted cyberattacks that U.S. investigators have attributed to Iran — if, perhaps, somehow Minnesota incompetently…

Read more →

Apple’s iPhone and Mac businesses are generating record revenue, but worsening component constraints could limit shipments. Apple reported its strongest June quarter on record, with revenue rising 16% year over year to $109.4 billion and earnings per share reaching $2.02. The biggest drivers were the iPhone and Mac businesses, which both posted record June-quarter sales.…

Read more →

AI-powered managed crowdsourced testing company Testlio announced Wednesday it has become the first and only crowdsourced testing platform currently listed on both the AWS Marketplace and Microsoft Marketplace, following a strong first half of 2026. The company reported 55% year-over-year bookings growth during the first six months of the year, driven by expansion in payments…

Read more →

Artificial intelligence is changing ransomware at a pace many enterprises are struggling to match. While most cybersecurity conversations continue to center on preventing attacks, the growing sophistication and speed of AI-enabled ransomware is forcing organizations, and the channel partners that support them, to rethink cyber resilience from the standpoint of recovery. AI expands the ransomware…

Read more →

Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations.

Read more →

Cybersecurity vendor Coro is expanding its EMEA partner footprint, adding distribution relationships and recruiting MSPs and VARs as European customers seek simpler security platforms, greater automation, and more control over where their data is stored. Ingo Schaefer, vice president of sales for EMEA at Coro, said persistent cybersecurity talent shortages and tighter budgets are pushing…

Read more →

Identity systems sit at the center of enterprise security, but they are also one of the first places attackers look when launching ransomware and other disruptive cyberattacks. In this eSecurityPlanet video podcast, Marty Momdjian, General Manager, Ready1 & Strategic Initiatives at Semperis, joins the conversation to discuss how attackers compromise Active Directory and Entra ID,…

Read more →

Today, we’re releasing the HIPAA Security Rule on AWS: Technical Safeguards Implementation and Readiness Guidance. This helps covered entities and business associates configure, implement, and evidence compliance with the HIPAA Security Rule Technical Safeguard requirements (45 CFR §164.312) when building healthcare workloads on AWS. The HIPAA Security Rule’s Technical Safeguards (§164.312) define five standards and…

Read more →

Hims & Hers patients may have shared more than symptoms and treatment concerns when they sought care online. The Federal Trade Commission (FTC) has filed a lawsuit against Hims & Hers, alleging that the company allowed advertisers to collect and share sensitive patient information while telling customers their health information would remain confidential. The complaint,…

Read more →

OpenAI says it has reduced the price of two GPT-5.6 models, cutting Luna’s API price by 80% and Terra’s by 20% as it works to make its models more efficient. […]

Read more →

A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025. These targeted organizations operate across several sectors, such as healthcare, research, government offices,

Read more →

CISA reports surge in cyberattacks targeting water utility PLCs.

Read more →

Google has used AI tools to detect and patch 1,072 vulnerabilities in versions 149 and 150 of its Chrome browser, the company announced in a blog post. That’s more vulnerabilities patched than in the previous 23 updates combined, according to Bleeping Computer. One vulnerability detected by AI had been present in Chrome for 13 years…

Read more →

A couple-dozen changes to SBOM fields will make them more comprehensive, but some argue that the framework lacks real risk-management improvements.

Read more →

A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. […]

Read more →

South Korea’s Personal Information Protection Commission (PIPC) has fined KT Corp. 53.9 billion won ($37.4 million) after finding that weak network access controls allowed hackers to expose the personal information of 16,647 mobile customers. The regulator said hackers accessed KT’s wireless network through an unauthorized femtocell, a small base station used to extend mobile coverage,…

Read more →

Brinks Home is investigating a cybersecurity incident that attackers claim began with a Microsoft Entra voice phishing campaign targeting employee identities.  The company confirmed an attacker has threatened to publicly release information allegedly stolen from its systems.  “The party responsible for this situation has threatened to release information it claims to have taken. We are…

Read more →

Apple’s outgoing CEO, Tim Cook, bade an emotional farewell to analysts and shareholders on Thursday as the company announced a record June quarter. His successor, John Ternus, takes over at the beginning of September with the company seemingly in solid shape. The results were impressive, though some worrying challenges were confirmed. Apple managed to set a new…

Read more →

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector. […]

Read more →

LinkedIn’s ‘Seems like AI slop’ button is coming to users, and its existence signals a changing perspective on AI infiltrating digital communities.

Read more →

Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted archive, which holds a Windows Shortcut (LNK). Executing the file triggers a multi-stage chain that

Read more →

Over at Best Buy, the 2024 Moto G Play dropped down to $100, making this Android one of the budget buys around.

Read more →

Fortnite scam pages like the ones below appear by the dozen every day, recycled endlessly under different names and designs. One version promises $50 from a fake superhero collaboration. Another claims it can calculate what your locker is worth. Both lead to the same destination: a fake Epic Games login page designed to steal your…

Read more →

As newspapers move online, the buildings that once housed their printing presses need new occupants. The Minnesota Star Tribune has just sold its old printing plant on the edge of Minneapolis to the aptly named property developer Legacy Investing, which plans to create a new data center there. has found the ideal way to bring…

Read more →

It’s a sign of the times: Security conference DefCon has added smart glasses to its list of banned audio- or video-recording devices. The organizers have said that, with no consistent way to understand whether smart glasses are recording or not, they have taken the step to ban them in their entirety on the grounds that…

Read more →

It’s a sign of the times: Security conference DefCon has added smart glasses to its list of banned audio- or video-recording devices. The organizers have said that, with no consistent way to understand whether smart glasses are recording or not, they have taken the step to ban them in their entirety on the grounds that…

Read more →

Here’s why in a world where AI models can hack other companies, we have to outreason our adversaries.

Read more →

Software supply chain attacks are evolving beyond compromised software packages into attacks targeting the people, identities, and workflows used to build and distribute software.  Intel 471’s report, Poisoned Trust: How Supply Chain Attacks Weaponize Developer Ecosystems, found that threat actors are increasingly targeting developer accounts, CI/CD pipelines, repositories, IDEs, and publishing infrastructure.  By compromising these…

Read more →