Category: Global Security News

There is a story about online school that much of the public still believes: it was an emergency measure.

Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks

July 30, 2026

Attackers are moving away from fake Microsoft login pages in favor of abusing Microsoft’s own authentication system, letting phishing campaigns slip past the warning signs employees are trained to spot, according to Check Point. Between June 25 and the second week of July, researchers found over 200 phishing emails targeting around 120 organizations in a…

How Identity Document Verification Services Can Help You Build Trust

July 30, 2026

Digital document verification in businesses with global coverage of clients and an immense network of AI models brings forth nothing but accuracy and speed. The divergence from conventional methods of authenticating a client’s ID by corporate and the financial sector so far has made commendable improvements in the business cycle of organizations. Successful enterprises in…

White Label Document Verification: Why Your Domain Matters

July 30, 2026

White label document verification puts your brand and domain on every verification page, so verifiers trust what they see and forgeries stand out. Key Takeaways White label document verification means every verification page and QR code carries your own brand and domain, with no third-party tool in sight. Verifiers judge a document by the domain…

What Is an OGG File Type? A Complete Guide

July 30, 2026

In this post, I will answer the question – what is an OGG file type and give you a complete guide. If you ever downloaded an audio file that is music, a podcast or a game, then most likely you encountered an OGG File extension. While MP3 is still the most well-known audio format on…

Why Google Voice is your secret business weapon

July 30, 2026

All right, quiz time: In a single sentence, can you tell me exactly what Google Voice does? It’s a question even the most giddy Google-appreciating geeks struggle to answer succinctly — and for normal, non-tech-obsessed Homo sapiens, the answer typically falls somewhere between “Huh?” and “Wait, is that the same thing as gChat?” Really, it’s…

OpenAI agent exploited JFrog Artifactory flaw, abused Modal customer sandbox

July 30, 2026

Hugging Face and OpenAI revealed further details on the agent’s 4.5-day attack campaign.

Russian hackers turn Exchange flaw into ‘half-click’ mailbox takeover

July 30, 2026

A Russia-aligned threat group used a “half-click” exploit against Microsoft Exchange’s Outlook Web Access to install a browser-based backdoor when recipients opened specially crafted emails. The campaign began on July 22 and was conducted by TA488, which is also tracked as Void Blizzard and Laundry Bear, according to a report from the cybersecurity firm Proofpoint.…

Cisco FMC static credentials exploited by attackers (CVE-2026-20316)

July 30, 2026

A static credentials vulnerability (CVE-2026-20316) in Cisco Secure Firewall Management Center (FMC), a platform for centrally managing multiple Cisco Secure Firewall devices across a network, is being leveraged by attackers, CISA warned. Two FMC flaws, one indicator of compromise CVE-2026-20316, reported by Jimi Sebree of Horizon3.ai, is found in the FMC software’s web interface. The…

Dropzone AI turns threat hunting into a routine SOC operation

July 30, 2026

Dropzone AI has announced the general availability of AI Threat Hunter, its proactive threat hunting agent. The tool enables security teams to run structured hunt packs across their environments to identify hidden threats, emerging risks, and security coverage gaps that traditional alerts may miss. Security alerts flag activity that matches predefined detection rules, helping teams…

PortSwigger introduces Burp AT for agentic AI security testing

July 30, 2026

PortSwigger has announced the public beta of Burp AT, a new addition to Burp Suite that brings agentic AI to professional penetration testing. Burp AT enables penetration testers to delegate defined investigative tasks to AI agents that use Burp Suite’s tools, project context, and purpose-built pentesting capabilities. Testers control how much work the agents perform,…

Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without Prompts

July 30, 2026

South Korean authorities and four security firms have disclosed a state-sponsored campaign that compromised trusted domestic websites. The attackers used those sites to exploit locally installed financial-security software and infect targeted visitors with SIGNBT or COPPERHEDGE backdoors. A compromised page could infect a system running a vulnerable AnySign4PC version without a prompt or

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

July 30, 2026

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (BYOVD) attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT (aka Winos 4.0) for persistent remote access. “In this campaign, the group combines new vulnerable-driver abuse, newly observed…

FCC Restricts New Foreign Robots and Inverters Over Security Risks

July 30, 2026

The FCC added foreign robots and power inverters to its Covered List, while allowing security updates for existing authorized devices until 2029. The FCC just widened its Covered List again, this time adding foreign-produced advanced robotic devices and power inverters. In plain terms, that means new models in those categories generally can’t get the equipment…

Amazon is selling this Samsung 2TB SATA SSD for over 60% off right now

July 30, 2026

While not as speedy as its NVMe cousins, the Samsung 870 Evo 2TB SSD is still a great choice for both work and play – especially at this price.

Black Hat special: Rewind and revisit

July 30, 2026

Cybersecurity is rarely a straight line. In this special Black Hat edition of Humans of Talos, Amy looks back at the incredible journeys that brought past guests to the world of threat intelligence. From forensic labs and newsrooms to the kitchen line, we’re revisiting the stories and lessons that define the people behind the threat…

IBM Claims New Era of ‘Quantum Advantage’

July 30, 2026

Big Blue is racing to show that its quantum computing business can be profitable following a historic stock tumble.

How AI Is Helping One-Person Companies Scale to $1 Million—and Beyond

July 30, 2026

Plus, we look at new fronts erupting in the Iran war, and a daring mission to recover American POWs from the ocean floor.

Meta’s Case for Its AI Spending Keeps Getting Weaker

July 30, 2026

The company’s all-out splurge is running into higher costs, borrowing constraints and investor pushback.

The Million-Dollar Talent Wars for 20-Something Math Geniuses

July 30, 2026

Flush with cash, Wall Street and Silicon Valley are vying to hire the same tiny pool of genius graduates.

North Korea’s elite hackers turned on their own government – and got caught

July 30, 2026

For years, North Korea’s state-trained hackers have been one of the world’s most prolific robbers of banks – stealing huge sums of money from foreign financial instituions, draining cryptocurrency exchanges of billions, and funnelling the proceeds into the country’s weapons programme. But now, in a remarkable twist, some of the same elite hackers appear to…

Google Releases Patches for 370 Vulnerabilities in Chrome 151

July 30, 2026

The new version of Chrome, 151, comes with 370 vulnerability patches, including for seven critical flaws

U.S. CISA adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog

July 30, 2026

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Cisco Secure Firewall Management Center (FMC) flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Secure Firewall Management Center (FMC) flaw, tracked as CVE-2026-20316 (CVSS score of 5.3), to its Known Exploited Vulnerabilities (KEV) catalog. CVE-2026-20316 is a…

How to qualify for Apple’s education discount – and get a $499 MacBook Neo for school

July 30, 2026

Apple’s budget MacBook Neo is already affordable, but if you’re an educator or student, you can get one for even less.

Coordinated cyberattack hits more than 30 Minnesota water utilities

July 30, 2026

A coordinated cyberattack on July 26 and 27 hit operational technology (OT) systems at more than 30 community water utilities across Minnesota, prompting an immediate response from Minnesota IT Services (MNIT) to contain the threat. MNIT confirmed the attack in a statement published July 28 and said it activated its cybersecurity incident response capabilities as…

Beyond the screenshot: Why you should verify what you see

July 30, 2026

The screenshot may look convincing, but it doesn’t necessarily prove that the payment, booking or conversation is genuine

This docking station’s ‘hidden compartment’ disrupted my desktop – for the better

July 30, 2026

Satechi’s CubeDock combines a high-speed docking station with a built-in SSD enclosure – and it works so well.

A Scattered Spider member was indicted. Microsoft’s GDID went to trial.

July 30, 2026

A recently released criminal complaint against Peter Stokes, an alleged member of the Scattered Spider cybercrime group, reveals previously unpublicized details about Windows telemetry. Microsoft has never exactly had a reputation for being privacy-focused, however the complaint reveals the important part played by Microsoft’s Global Device Identifier (GDID), a persistent identifier tied to a Windows…

NCSC Calls on Vendors to Embed ‘Forensic Observability’ in Network Devices

July 30, 2026

The UK’s National Cyber Security Centre wants network device makers to improve forensic observability

eSIM Plus and Nicegram Share Belarus-Linked Codebase, Analysis Finds

July 30, 2026

Analysis found eSIM Plus and Nicegram share a Belarus-linked codebase, while eSIM Plus routes data and calls through Russian services. Two popular apps available in EU app stores, Nicegram, with over 50 million downloads, and eSIM Plus, with over 1 million, are presented to users as Lithuanian products. The Mysterium VPN Research Team pulled apart…

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

July 30, 2026

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well as the telecommunications, financial, hospitality, and aerospace sectors. The activity, which began on July 22, 2026, involves…

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks

July 30, 2026

The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, marketing, or sale in the US. Previously authorized models can still be sold, and devices people already own are unaffected. Federal…

Your AI is blind: the visibility gap undermining IT operations

July 30, 2026

There is a question that comes up in almost every conversation about AI in IT operations, and it is almost always the wrong one. Organisations want to know how accurate their…

Data breach cost 2026 averaged $4.99 million, AI attacks ran higher

July 30, 2026

More than one in four organizations hit by a malicious attack over the past year say AI drove it. Those breaches averaged about $1 million above the malicious attacks that ran without AI. Defenders bought similar technology and aimed it somewhere else. Half of breached organizations put AI agents inside a security operations center, mostly…

Threat Coverage Digest: New TI Report, Threat Research and 750+ Detection Rules

July 30, 2026

July brought another set of threat coverage updates designed to help security teams work faster and with more confidence. ANY.RUN added 42 behavior signatures, 11 YARA rules, and 703 Suricata rules, giving SOCs broader visibility across files, malware behavior, and network activity. We also published new threat intelligence and technical research on active malware and phishing campaigns.…

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

July 30, 2026

Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain and a wallet-draining script pushed into at least 18 packages carrying more than 2 billion weekly downloads…

200 new CVEs a day and no realistic way to patch them all

July 30, 2026

Ryan Dewhurst, CEO at KEVIntel, explains how his team confirms exploitation that CISA’s catalog has not listed yet. He describes a global honeypot sensor network, AI triage, and human verification in a lab before a vulnerability reaches the public feed. He covers CISA’s three-day patching deadline under BOD 26-04, why virtual patching buys time, and…

Top companies to visit at Black Hat USA 2026

July 30, 2026

Black Hat USA 2026 returns to Mandalay Bay with a re-engineered six-day program designed to spark innovation, challenge assumptions, and unite the global security community. The event opens with four days of immersive, expert-led Trainings (August 1-4), continues with Summit Day on Tuesday, August 4, and closes with a two-day main conference featuring Briefings, open-source…

Cisco FMC Zero-Day Actively Exploited, Static Credentials Could Expose Sensitive Data

July 30, 2026

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a newly disclosed security flaw impacting Cisco Secure Firewall Management Center (FMC) Software to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation. The vulnerability, assigned CVE-2026-20316 (CVSS score: 5.3), could permit an unauthenticated, remote attacker to log

Impersonation protection: How to protect your executives when the truth isn’t clear

July 30, 2026

How do you protect your executives when truth doesn’t seem to be truth anymore? It’s a question BlackCloak Founder and CEO Dr. Chris Pierson recently discussed this dilemma with SVP of Product Matt Covington. Advances in AI, voice, and video impersonation make it difficult to establish trust when communicating digitally. BlackCloak offers a solution to…