Category: Global Security News

CodeMender actively builds and runs exploits in customer-managed sandboxes to verify if vulnerabilities are truly exploitable

Read more →

Box has announced new security capabilities designed to give organizations greater control over AI agents working with enterprise content. With new agent guardrails, third-party agent activity oversight, prompt injection detection, agent classification-based access policies, and more, customers will be able to extend Box’s security controls to both Box Agents and third-party agents, such as Claude,…

Read more →

Arista Networks has announced the launch of its new AI-driven Edge Threat Management (ETM) for VeloCloud SD-WAN, delivering integrated zero trust security for enterprise branch offices. Customers can leverage this integration to simplify the branch, collapsing multiple disparate boxes into a single unified secure SD-WAN edge platform. Integrated ETM provides perimeter protection at the WAN…

Read more →

Cyware, an agentic AI-powered operational threat intelligence and collective defense platform, has appointed Alvaro Warden as the global head of channel sales and marketplace Ecosystems. Warden will lead the organization’s global partner, alliance, and marketplace strategy to expand the company’s ecosystem footprint across North America, APAC, and EMEA. He also currently serves on the customer…

Read more →

Frontier AI models will take just about any route to finish a task, cheating included, according to new cybersecurity evaluations from the UK government’s AI Security Institute (AISI). AISI defines cheating as a model doing something outside the bounds of what a task allows, or breaking a stated rule outright, in order to reach the…

Read more →

Here in this high-tech era of 2026, keeping important info backed up and synced should be effortless and something that just happens on its own, automatically, without any actual thought or ongoing human effort. In many areas of our digital life, that mercifully does Just Work™ in exactly that way. Fire up an email in…

Read more →

Liquibase is expanding its global partner ecosystem and has appointed Phil Robinson as vice president of global channels and alliances to lead recruitment, enablement, joint marketing, and partner-led services. Liquibase targets database governance services growth The moves reflect Liquibase’s investment in partners to help enterprises close the database delivery gap and build new services around…

Read more →

AI is changing both what customers expect from managed service providers and the security risks those providers must help them address. Executives from Insight, NinjaOne, and Xage Security told Channel Insider that MSPs are being pushed beyond traditional IT management as customers seek guidance on AI adoption, cybersecurity, governance, and measurable business outcomes. That shift…

Read more →

The move ramps up a conflict between warring factions in Silicon Valley over how to regulate the transformative technology.

Read more →

When Anthropic unveiled Project Glasswing and the Mythos model, much of the discussion focused on the capabilities themselves. Security leaders debated what these systems could mean for vulnerability discovery, exploit development and the pace of offensive innovation. Researchers examined technical benchmarks. Industry observers questioned how quickly these capabilities might fall into attackers’ hands. Those conversations…

Read more →

Siemens has acquired Precision Innovations and Defacto Technologies to add AI-driven design exploration and workflow automation capabilities across the system-on-a-chip development lifecycle. The deals expand Siemens’ electronic design automation portfolio with tools intended to help semiconductor teams evaluate chip architectures earlier, automate complex design processes, and reduce time to silicon. Precision Innovations targets earlier SoC…

Read more →

OpenAI confirmed its AI models exploited zero-days during internal testing, reaching Hugging Face servers in an unintended real-world cyberattack. OpenAI admitted on July 21 that its own AI models, including GPT-5.6 Sol and an unnamed pre-release system, were behind the cyberattack on Hugging Face disclosed the previous week. The models weren’t acting under attacker control.…

Read more →

With dozens of chats on the go, you’ve probably had an occasion where you’ve sent the wrong response to the wrong person. I’ve found a way to avoid this problem.

Read more →

Google’s Gemini 3.5 Flash Cyber model finds, validates, and patches vulnerabilities before they can be exploited while helping mitigate broader misuse. It is part of a limited-access pilot program that will soon be available to governments and trusted partners through CodeMender, Google DeepMind’s AI coding agent, with broader access planned over time. “CodeMender is our…

Read more →

Delivering enterprise-grade customer experience CX is no longer just for big brands. iCXeed’s Ryan Rayner explores where to start and how AI can help a small team serve…

Read more →

German and US law enforcement have dismantled the infrastructure behind Kratos, a notorious phishing-as-a-service (PhaaS) platform. Its alleged developer and administrator was arrested in Indonesia by local police. Seizure banner (Source: BKA) The takedown was led by the Frankfurt public prosecutor’s cybercrime unit (ZIT) and Germany’s Federal Criminal Police Office (BKA), working alongside US law…

Read more →

As the CSO grows in prominence, security leaders are increasingly earning a seat at the executive table, reporting directly to the CEO with the expectation to help drive business strategy and ensure organizational success. Reporting to the CEO unlocks greater access and influence for security leaders, and while CSOs who report to their organization’s CIO…

Read more →

American fast food restaurant chain Chick-fil-A is notifying customers of a data breach after their accounts were hacked in a wave of recent credential stuffing attacks. […]

Read more →

German and US law enforcement have taken down the core infrastructure of Kratos, described by German investigators as one of the world’s most widely used criminal phishing kits, and Indonesian authorities arrested the man they say developed and ran it. In a joint announcement on Monday, the Frankfurt public prosecutor’s cybercrime unit (ZIT) and Germany’s…

Read more →

The pull request arrives with the tests already run and the description already written, the work of an agent that handled the whole thing on its own. Somebody still has to read it. On GitHub that somebody is usually one developer sitting alone with the diff, and the rest of the project never sees the…

Read more →

Cybersecurity researchers have discovered a NuGet typosquat that’s unlike the typical information-stealing malware distributed via package registries: usual info-stealers: it’s designed to rig live game results on Digitain. The package, named “Newtonsoftt.Json.Net,” masquerades as the Newtonsoft.Json library and is a trojanized fork. Seven versions of the package have been published to the

Read more →

Bangalore, India, 22nd July 2026, CyberNewswire

Read more →

OpenAI says its AI models, including GPT‑5.6 Sol and a pre-release model, hacked into the Hugging Face artificial intelligence repository while being tested in a sandboxed testing environment. […]

Read more →

Enterprise environments change between scheduled security assessments, leaving organizations with periods where new vulnerabilities can go undetected. Synack’s State of Continuous Security Validation report found that 95% of surveyed organizations identified high- or critical-severity vulnerabilities outside planned testing windows during the past year, with 42% encountering them at least once a month. How often high/critical…

Read more →

A single invisible comment in an Azure DevOps pull request can turn a reviewer’s own AI coding agent against them, driving it into projects the attacker has no rights to reach and quietly leaking what it finds. The flaw is in Microsoft’s official Azure DevOps MCP server, and it works because one of its tools…

Read more →

Organizations are redefining cybersecurity roles through workforce frameworks and placing greater emphasis on verified skills as AI and new regulatory requirements change hiring. The SANS 2026 Cybersecurity Workforce Survey found demand for specialists in new roles more than doubled over the past year, alongside increased hiring for existing cybersecurity skills. AI changes security work AI…

Read more →

Canva and Fusion Signage connect content creation with instant screen-ready publishing

Read more →

OpenAI on Tuesday said a combination of its artificial intelligence (AI) models, including GPT-5.6 Sol and an “even more capable pre-release model,” was behind the security incident that targeted Hugging Face’s production infrastructure last week. The AI company said the models were operating with “reduced cyber refusals for evaluation purposes” that might otherwise limit their…

Read more →

Companies are using agentic AI to manage growing application environments, automate routine tasks, and support decisions. Business and IT leaders increasingly see the technology as part of cloud application management, according to Unisys’ AI & Cloud Insights Report. To what extent do the following factors limit your organization’s ability to scale agentic AI safely? (Chart…

Read more →

Leading research firm Everest Group has placed Celonis in the highest position in its 2026 PEAK Matrix Assessment for Process Mining.

Read more →

New Managed Secure Browser service, powered by Island, gives Australian businesses control over the primary workspace for every employee and contractor, closing a critical gap…

Read more →

Reddit, Politico and others are weighing how—or even if—they can work with the tech company as AI tools supplant traditional searches.

Read more →

Main Sequence Ventures, Australia’s deep tech venture capital firm, has promoted Alejandra Romero Alex to Principal — doubling down on its bet that the next wave of computing…

Read more →

Hall acquisition expands Tracksuit’s brand tracking capabilities while completed executive leadership team positions the company for its next phase of growth

Read more →

In this post, I will show you how I’d use the GLM-5.2 API for a long-running coding agent. If I were setting up a coding agent today — the kind that’s supposed to run for hours, work through a real codebase, and come back with something actually finished rather than a half-baked first attempt —…

Read more →

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and other apps available for download on…

Read more →

Before they could penetrate Hugging Face’s defenses, the models needed a way onto the internet. They found one.

Read more →

Cloudflare found that Argentina generated the largest worldwide impact on Internet behavior of any team in the tournament, with traffic in the typical country shifting roughly…

Read more →

Macquarie Government brings managed cloud, cybersecurity and AI-ready capabilities to government customers as Microsoft’s investment in Australia accelerates.

Read more →

Dreame Wet & Dry Vacuum Reaches 2,000-Patent Milestone, Advancing Intelligent Floor Cleaning

Read more →

Defence operations now span more distributed, data-intensive environments that depend on real-time coordination across land, sea, air, cyber, and space domains. As unmanned…

Read more →

Authorities in Germany and the U.S. dismantled the central infrastructure of Kratos, a phishing-as-a-service (PhaaS) platform with global reach, and its developer was arrested in Indonesia. […]

Read more →

A cyberattack that poisoned the data pipeline of a major AI code platform was carried out using OpenAI’s ChatGPT, the company said Tuesday. Last week, Hugging Face, a platform for sharing and working on AI code, disclosed that an external attacker had compromised its data processing pipeline. According to a July 21 blog post, the…

Read more →

A large-scale operation dubbed ‘FakeGit’ is pushing SmartLoader and StealC malware through 7,600 malicious GitHub repositories that accumulated more than 14 million downloads. […]

Read more →

A study by Specops researcher David Ketler examined Argon2id’s performance against current password-cracking hardware, specifically testing an eight-GPU system with Nvidia RTX 5090 cards and a single AMD EPYC 9B14 server processor.

Read more →

Security firm DTEX’s research reveals that the illicit IT worker scheme is a significant revenue stream for North Korea, with funds being channeled through organizations like Sobaeksu, Saenal, and Songkwang.

Read more →

TechCrunch reports that the United Kingdom’s incoming prime minister, Andy Burnham, has confirmed the government is abandoning a contentious digital ID card initiative that was announced by the previous administration.

Read more →

Researchers pointed to fragmentation of the ransomware ecosystem, the emergence of new attackers, and expansion of attacks on less defended organizations.

Read more →

Critical SharePoint RCE vulnerability CVE-2026-50522 is under active exploitation after the release of a PoC exploit code. A critical Microsoft SharePoint vulnerability, tracked as CVE-2026-50522 (CVSS score of 9.8), is being actively exploited following the release of a public proof-of-concept (PoC) code, according to watchTowr researchers. Patched in Microsoft’s July 2026 Patch Tuesday, the deserialization…

Read more →

The latest large language models have high false-positive rates and fail to take into account the context of scans, leading to more work for AppSec professionals.

Read more →

Oracle addresses 1235 CVEs in its third quarterly update of 2026 with 1449 patches, including 261 critical updates. Key Takeaways The third Critical Patch Update (CPU) for 2026 contains fixes for 1235 unique CVEs in 1449 security updates, the largest CPU release. 261 issues (18% of all patches) were assigned a critical severity rating Oracle…

Read more →

Qilin exploited a patched Palo Alto VPN flaw, highlighting the cost of delayed patching.

Read more →

Hackers are actively exploiting the critical CVE-2026-50522 vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched. […]

Read more →

The AI company named David Vélez of Nubank and Robin Vince of BNY as directors.

Read more →

After years of gaming on PC, these are the five accessories I keep coming back to for their comfort, performance, and reliability.

Read more →

Frontier AI companies often refer to their models as “helpful assistants” or try to compare them to entry-level employees.   But new research from the UK’s AI Security Institute reinforces how large language models suffer from a common flaw that would land many human employees in hot water with their employers: they cheat. In other words,…

Read more →

The Anubis ransomware gang has claimed responsibility for the cyberattack on Coca-Cola’s Fairlife dairy subsidiary, threatening to publish allegedly stolen corporate data unless the company pays a ransom. […]

Read more →

Apple has moved to address a security flaw in its Hide My Email service that enabled users’ real email addresses to be unmasked, effectively undermining the feature’s privacy guarantees. 404 Media reported Tuesday that a fix for the issue was deployed by Apple on July 3, 2026, after more than a year, when it was…

Read more →

Security researchers at Finite State have disclosed multiple vulnerabilities affecting the Wansview WVC Q5 internet-connected camera, including a directory traversal flaw first documented more than 20 years ago.  The findings show how outdated third-party software can expose modern IoT devices to credential theft, denial-of-service (DoS), and potential remote compromise.  Larry Pesce, VP of Services at…

Read more →

A Russian-speaking actor, “Trim,” dismantled publicly available frontier models and integrated them with offensive security tools.

Read more →

After a year and a half spent downplaying calls for AI safety regulations, the Trump administration has sharply reversed course, embracing a level of government scrutiny of frontier AI systems before public release–a far stricter stance than the Biden administration took. An executive order designed to be friendly to the AI industry was meant to…

Read more →

Zimbra patched nine flaws in version 10.1.20, including a critical SNMP monitoring command injection issue enabling arbitrary command execution. Zimbra released version 10.1.20 to fix nine security vulnerabilities, including a critical command injection flaw in the SNMP monitoring component. The vulnerability affects systems with SNMP notifications enabled and could allow attackers to execute arbitrary commands.…

Read more →

A US federal court has approved Anthropic’s $1.5 billion settlement in a class-action lawsuit in which authors accused the AI company of using their books without permission to train the AI model Claude. This is the largest such settlement to date in a US copyright case, according to Reuters. The dispute is one of several…

Read more →

AWS WAF classifies web traffic by attaching metadata to each request it evaluates. Managed rule groups such as AWS WAF Bot Control and AWS WAF Fraud Control account takeover prevention (ATP) attach labels that describe what they found. A label can record that a request came from a known bot category or that it matched…

Read more →

Artificial intelligence (AI) is no longer simply improving attacker productivity.  According to a new ThreatDown report, AI is fundamentally reshaping the cybercrime ecosystem by lowering the barriers to sophisticated attacks and enabling autonomous exploitation.  Key takeaways of the ThreatDown AI cybercrime report AI is lowering the barrier to sophisticated cyberattacks by enabling autonomous reconnaissance, exploitation,…

Read more →

Hackers are exploiting the “wp2shell” critical vulnerability suite (CVE-2026-63030 and CVE-2026-60137) affecting WordPress Core to deploy persistent webshells and install malicious plugins on affected servers. […]

Read more →

An annual spy policy bill would authorize a cyberthreat intelligence sharing pilot program for state and local governments, and order an outside assessment of how intelligence agencies are currently sharing that information with those jurisdictions. The House Intelligence Committee approved fiscal 2027 intelligence authorization legislation Monday that also includes provisions on election security and that…

Read more →

As Apple gears up to anoint John Ternus the new company CEO in September (while current leader Tim Cook takes a seat on the board) the company appears to be firing on all cylinders ahead of the leadership transition.  What’s going well Just look at the evidence:  Apple is building market share across its entire product range;…

Read more →

Qilin ransomware exploits the PAN-OS GlobalProtect flaw CVE-2026-0257 to gain unauthorized VPN access to unpatched networks. Arctic Wolf researchers warn that the Qilin ransomware gang is exploiting the critical PAN-OS GlobalProtect vulnerability CVE-2026-0257 to compromise corporate networks. CVE-2026-0257 is a PAN-OS authentication bypass vulnerability affecting GlobalProtect portals and gateways. Palo Alto Networks addressed the vulnerability on May…

Read more →

Hidden text on a web page was enough to make Kiro, AWS’s agentic coding IDE, rewrite its own configuration file and run an attacker’s code on a developer’s machine, with no approval step able to stop it. Intezer, in research with Kodem Security, found that a request as ordinary as asking Kiro to summarize a…

Read more →

Plus, China’s latest AI advances, always-on transcription and the perils of big AI contracts.

Read more →