In the fusion you didn’t know you needed until it appeared, Bose brains meet Skullcandy’s bass-loving soul in the most terrific headphones to be released this year.
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
The startup’s valuation jumps 40% as the AI boom has driven demand for its data-analytics software.
The RLC Motion Pictures producer on his Depression-era outback film, the funding that’s hiding in plain sight, and why he won’t let AI finish the picture.
Nutanix NASDAQ: NTNX, a leader in hybrid multicloud computing, today released findings from the public sector vertical edition of its eighth annual Enterprise Cloud Index ECI…
Dependency Scanning Auto-Remediation, now in public beta, shrinks the security backlog without diverting developers to upgrade vulnerable dependencies and fixing breaking…
New capabilities deliver closed-loop execution that prioritizes work in real time at each store, learns from outcomes at every level of the organization, and continuously…
Across Australian boardrooms and IT departments, “tech debt” has become part of everyday business vocabulary. Yet many long-standing core systems still run the business…
A critical vulnerability in Zoom’s Windows software could allow an unauthenticated attacker to hijack user accounts over the network. The latest security release also addresses several high-severity vulnerabilities affecting privilege management and privilege escalation. “Vulnerability notices create a race between an organization’s endpoint strategy and hackers for control of these attractive high-value targets,” said Romanus…
A new macOS information-stealing malware dubbed ClickLock terminates all visible processes to force users into entering their system login password. […]
The Sandworm group, linked to Russia’s GRU, is employing the social engineering technique called ClickFix.
Mandiant has observed an increase in public-facing serverless applications lacking authentication, often due to business needs.
Mozilla’s investigation revealed that Stardust shared user data, linked to a unique identifier instead of a name, with RudderStack.
Hunt.io researchers discovered the intrusion campaign in June 2026, identifying 13 Hong Kong-based servers containing victim source code, exploit scripts, and operator logs.
The kernel-mode rootkit, Daxin, first documented in March 2022, was found operating on a compromised host in Taiwan in 2026.
Partnered Health confirmed that a cyberattack on June 23 compromised data from 21 clinics located in New South Wales, Victoria, Queensland, Western Australia, and the ACT.
Plus, Trump’s speech tonight is expected to include election-interference claims, and young drivers go crazy on the road—and film it.
A researcher, known as tokay0, detailed how a flawed policy attached to a certificate on Shark RV2320EDUS robot vacuums enables attackers to execute root commands on other Shark vacuums.
TELEPUZ is a lightweight and modular malware, likely developed by a small team and potentially offered as a malware-as-a-service.
The breach, which occurred between April and September 2023, was the result of credential-stuffing attacks that compromised the data of 6.9 million customers, including sensitive genetic ancestry information.
The controversy began when researchers reported that Grok Build’s command-line interface uploaded complete source code repositories, including Git commit history, to Google Cloud Storage.
The Coca-Cola Company disclosed today that a ransomware attack impacting its Fairlife dairy subsidiary has disrupted operations, temporarily suspending production of Fairlife products across the United States. […]
The Anubis ransomware-as-a-service (RaaS) operation has hit some healthcare organisations hard – but they are not the only ones at risk. Read more in my article on the Fortra blog.
Forget about attackers. Agentic artificial intelligence is creating enough risks for organizations and demands a security reframe.
GPT-Red functions as an automated red team, employing self-play reinforcement learning to continuously attack target models.
The OkoBot framework, particularly its SeedHunter module, targets popular hardware wallets like Ledger and Trezor.
The ACCC’s decision to brick these routers raised concerns about increased e-waste, as many Australians are expected to dispose of the devices.
The data exposure occurred through a sophisticated vishing attack where a threat actor, posing as IT support, tricked a contact center agent into visiting a malicious website.
The funding round, co-led by Accel, Greylock Partners, and CRV, will support Oak’s mission to provide a platform that automatically maps and analyzes access permissions across corporate networks.
The scheme, active since at least 2021, allegedly generated over 100 million euros per month by defrauding victims through fake investment platforms.
We’re expecting some curveballs at Samsung’s 2026 Galaxy Unpacked event. Here’s everything we know.
Artificial intelligence and LLMs can be surprisingly ineffective against text salting, allowing phishing emails to slide right into your inbox.
Nigeria is experiencing a complex cybersecurity landscape where reported fraud incidents have decreased by nearly 46% over the past four years, yet financial losses from cybercrime are on the rise, according to Check Point Software.
Reken’s Private Core platform, powering its Northstar application, utilizes three key components: Model Zero for threat analysis, Trust Sensor for verifying human activity and outgoing communications, and a Reken API for integration.
Palo Alto Networks Unit 42 reported that while the LLM generated botnet code, it included an unremoved safety disclaimer.
Sophos Fusion is presented as an evolution of the Sophos Central platform, rebuilt on an open architecture and incorporating the Taegis analytics engine.
A flaw in Anthropic’s Claude for Chrome browser extension could allow a malicious extension to trigger predefined AI actions by simulating user clicks, potentially allowing it to abuse Claude’s access to connected services such as Gmail, Google Docs, Google Calendar, and Salesforce. […]
A total of eight cyber personnel have served in a program that began in 2022 to rotate workers between federal agencies to bolster the workforce, a watchdog report said Thursday. Over the life of the Federal Rotational Cyber Workforce program that effectively went away last year, 13 agencies offered 106 positions and received 634 applications,…
Microsoft Entra ID sign-in logs have provided defenders with critical visibility into authentication activity, helping security teams investigate user enumeration, password spraying, and other identity-based attacks. However, research from Proofpoint shows threat actors are increasingly using a technique called OAuth client ID spoofing to evade common detection methods while identifying valid user accounts and credentials.…
A new malicious framework called OkoBot is delivering more than 20 payloads in attacks focused on stealing cryptocurrency wallet seed phrases, credentials, and other sensitive data. […]
Optro, an AI-powered governance, risk, and compliance (GRC) intelligence platform, has officially launched its new global partner program: Optro Partner Connect. The program offers partners flexible go-to-market (GTM) opportunities and a comprehensive suite of enablement, certification, technical, and co-marketing support. It also offers a path to expand into new markets, deepen service offerings, and drive…
Spirals ransomware encrypted a victim in under 24 hours, underscoring the need for rapid containment.
This Blink Video Doorbell and Outdoor 4 security camera bundle deal will help you set up a home security system for less.
Optimize365, an AI-powered multi-tenant M365 security management platform built for managed service providers (MSPs), is now available on the Microsoft Marketplace. Optimize365 will be discoverable and purchasable directly through Microsoft’s partner ecosystem, with co-sell eligibility that lets MSPs and their Microsoft representatives align on joint opportunities. Microsoft Marketplace: Simplifying the purchasing process Channel Insider sat…
Federal officers at the scene of a killing by U.S. Immigration and Customs Enforcement in Maine were wearing body cameras, according to four ICE officials who reviewed images from the scene — but the cameras are on multi-function devices that ICE officers use as radio mics. Related How ICE Arrests Went Quiet — and Got…
The $9 million Shield-6G project, backed by the European Commission, aims to develop an AI-driven cybersecurity threat intelligence platform for 6G networks.
Watch how Microsoft’s bet on the future of gaming led to the biggest restructuring in Xbox history.
Welcome to this week’s edition of the Threat Source newsletter. We all knew, to some degree or another, that this summer was going to a hot mess. I don’t mean FIFA drama or record setting heat waves. I mean the slow but steady momentum that AI frontier models were accruing for vulnerability research. If you…
A survey sponsored by Commvault and conducted by IDC reveals that 90% of IT and resilience decision-makers believe their identity management capabilities need improvement to address risks from agentic AI.
Apple’s recently announced $30 billion multi-year agreement with Broadcom is significant because it means billions of chips for Apple devices will be made in the US, supporting hundreds of jobs. This is Apple’s biggest US procurement deal so far, but it won’t be the last; when it announced the arrangement, Apple confirmed it is, “working with the administration…
Between May 19 and April 21, the threat actor engaged in over 200 sessions with the AI tool to deploy and manage an infrastructure controlling eight systems within a dental clinic, gaining access to the OpenDental database.
Two members of the Scattered Spider cybercrime group received jail sentences in the UK for the 2024 cyberattack on Transport for London. A UK court sentenced two Scattered Spider members, Thalha Jubair (20) and Owen Flowers (18), for their role in the 2024 cyberattack on Transport for London (TfL). Transport for London (TfL) is a local…
Zoom has identified, and patched, a critical security hole that “may allow an unauthenticated user to conduct an account takeover via network access.” The issue is especially significant given Zoom’s extensive reach; it reportedly has more than 300 million daily active users, including 470,000 paying business customers. Given that reach, Zoom has been impacted by many…
Three Russian nationals and a pair of bulletproof hosting providers directly supported a series of attacks on critical infrastructure in 21 states and several countries, according to a 2024 indictment unsealed in federal court Tuesday. Officials, who have been investigating the trio and their companies since 2019, said the attacks resulted in losses surpassing $62…
Zoom has identified, and patched, a critical security hole that “may allow an unauthenticated user to conduct an account takeover via network access.” The issue is especially significant given Zoom’s extensive reach; it reportedly has more than 300 million daily active users, including 470,000 paying business customers. Given that reach, Zoom has been impacted by many…
Security researchers at Group-IB have identified multiple scam campaigns targeting fans eager to purchase tickets for Celine Dion’s return to the stage.
Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich Crown Court on Thursday, 16 July 2026, for the 2024 hack of Transport for London. The attack left 148 TfL systems inoperable and forced all 27,000 of the transport authority’s employees into an office to get their…
The PACTS framework replaces the previous 2020 arrangement and is structured around five pillars: supply chain resilience, critical technologies, cybersecurity, digital resilience, and defense research.
The campaign, active since at least January 2026, employs rotating lures tied to the calendar, such as tax themes in winter and Valentine’s or Easter invitations later on, according to Forescout.
A hacker reportedly gained access to Suno’s systems through a supply chain attack, compromising employee credentials.
Four Microsoft SharePoint Server vulnerabilities are under active exploitation, prompting CISA to issue a hardening alert. An additional high-severity flaw recently patched adds pressure for organizations running on-premises deployments. Key Takeaways CISA confirmed active exploitation of three on-premises SharePoint Server vulnerabilities (CVE-2026-32201, CVE-2026-45659, CVE-2026-56164), used to gain unauthorized access, establish remote code execution, steal IIS…
Google’s Pixel 10 Pro has one of the best camera systems for an Android today. Grab it for $699 right now, one of the best prices we’ve seen.
Nearly two years after a cyberattack disrupted Transport for London’s (TfL) online services and exposed customer data, two…
These kitchen gadgets won’t break the bank, but will seriously upgrade your cooking.
A lot of this week’s trouble starts with something that looks close enough. A familiar repo. A useful installer. A harmless sync setting. Then the handoff goes bad, the box starts talking to someone else, and the damage moves faster than the explanation. Old bugs are back, weak defaults are earning their keep, and some…
Global phishing campaign disguised a Lua loader as a font file to deploy RATs and infostealers
Last Updated on July 16, 2026 H1 Threat Intelligence Report Cyber Attacks Statistics — H1 2026 1,071 confirmed incidents across H1 2026 (1 Jan–30 Jun). Financially motivated Cyber Crime accounted for nearly 7 in 10 attacks, Malware remained the dominant weapon, and Information & Communication infrastructure bore the brunt of targeting. Total Incidents 0 1…
In H1 I recorded 1,071 confirmed cyber incidents. Financially motivated Cyber Crime drove nearly 7 in 10 attacks, malware remained the top weapon (40.5% of attack-vector entries), and exploitation of public-facing applications was the leading initial access technique (23.7%). Cyber Espionage accounted for roughly 1 in 5 incidents, with the Information & Communication sector bearing…
F5 has disclosed multiple NGINX Vulnerabilities in an out-of-band security update, with CVE-2026-42533 standing out as one of the most dangerous issues in the batch. The flaw is a heap buffer overflow in NGINX’s handling of the map directive when regular expression matching references regex variables in a specific order. In vulnerable deployments, a remote…
Starting July 17, certain states will let you buy items tax-free from different retailers, and Apple is one of them. Here are the states and products that qualify.
More than two-thirds of middle managers are optimistic about AI’s role in the future of work, and they feel personally accountable for their team’s adoption of AI tools.
Traditional security workflows were built for environments that changed at human speed. Token Security explains why AI agents require a new approach: building on a live identity foundation while giving security teams the flexibility to create workflows tailored to their own environments. […]
Flock-style ALPR systems carry serious privacy and civil-liberties risks, and the backlash is now starting to show up in agency decisions too. For those not yet familiar with Flock, Flock Safety operates an automated license plate recognition (ALPR) system that uses cameras and computer vision to identify and log vehicle license plates. According to ACLU.org, in…
Two members of the notorious “Scattered Spider” hacking collective have been sentenced to five years and six months in prison each for a cyberattack on Transport for London (TfL) that disrupted services for thousands of commuters and cost the transport authority an estimated £29 million. Thalha Jubair, 20, of East London, and Owen Flowers, 18,…
Leaseweb has announced that it is now a VMware Cloud Service Provider (VCSP) Pinnacle tier partner in the Broadcom Advantage Partner Program across the United States, the European Economic Area, and Singapore. Through the designation, Leaseweb will offer VMware Cloud Foundation (VCF) as a managed private cloud platform to help enterprise customers modernize their infrastructure.…
Genetic testing company 23andMe has agreed to pay $18 million to settle claims from a coalition of 43 attorneys general that it failed to protect customers’ genetic data. […]
The Claude Corps fellowship matches professionals with partner nonprofits and pays them with benefits. But the deadline ends soon.
Adaptiva has announced AirGap for OneSite Patch, a new capability that extends autonomous patch management to air-gapped environments. Developed in response to growing demand from government agencies, critical infrastructure operators, and large enterprises managing highly secure environments, AirGap for OneSite Patch enables organizations to securely patch isolated systems without compromising the physical separation those environments…
n8n, the workflow automation platform, handed out the wrong accounts at login. On Enterprise instances configured to trust more than one external token issuer, it matched an incoming JWT to a local user on the sub claim alone and ignored iss. A valid token from issuer A carrying a sub that belongs to someone under issuer B logged you in…
Cybersecurity researchers tested Open AI GPT 5.5’s offensive cyber capabilities – and the results showed how effective a frontier LLM can be for hackers
New ClickLock macOS stealer locked victims out of their own system until they surrendered a password
On Wednesday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and four allied cyber authorities published a guide telling software vendors how to build a coordinated vulnerability disclosure (CVD) program. Six days earlier, CISA published a blog post explaining how a security researcher had tried and failed, repeatedly, to report a serious problem to CISA…
I finally ditched Notes on my Mac for this beautiful, Liquid Glass-like alternative. Here’s why.
1Password wants to solve one of AI’s biggest practical problems: secure logins. Its Claude integration can enter passwords and MFA codes without exposing credentials to Anthropic or the model.
Agentic AI use is exploding, yet most security teams are building agents in isolation. Tenable is hosting Swarm, a build event at Black Hat 2026, for security practitioners to create and collaborate on agentic, open-source tooling to drive collective defense and stop adversaries together. Key takeaways According to Gartner®, by 2028, an average global Fortune…
Microsoft’s July 2026 Patch Tuesday drew immediate attention not just because of its record scale, but because two actively exploited zero-days hit some of the most sensitive parts of enterprise infrastructure. CVE-2026-56164 targets on-premises SharePoint Server and is remotely exploitable in low-complexity attacks, while CVE-2026-56155 targets Active Directory Federation Services and allows privilege escalation from…
Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that’s been spreading via websites infected with ClickFix lures since late April 2026. “The malware is full-featured, lightweight, and modular,” Elastic Security Labs researcher Cyril François said in a technical report. “While the number of C2 [command-and-control] domains is currently small, the daily
SonicWall has patched two actively exploited zero-days affecting SMA 1000 Series secure remote access appliances. The issues are CVE-2026-15409, a critical unauthenticated SSRF flaw in the Workplace interface, and CVE-2026-15410, a post-authentication code injection flaw in the Appliance Management Console that can lead to arbitrary OS command execution as administrator under certain conditions. Public reporting…
ClickLock Stealer, a new macOS infostealer, answers a victim’s refusal by killing their apps on a loop until they hand over the login password. It arrives as a command pasted into Terminal, asks for the password behind a fake system dialog, and when the victim cancels, installs two LaunchAgents and quietly exits. At the next…
It has completely replaced my Pomodoro timer and task tracker, and it’s free.
Two leading members of the Scattered Spider cybercrime collective were sentenced to five years and six months in prison each for hacking Transport for London (TfL) in 2024. […]
Google DeepMind CEO Demis Hassabis is pushing for the US AI industry to self-regulate, with the support of government, as a starting point for an international creating shared international standards. In a blog post, he called for a focus on artificial general intelligence (AGI) and national security. But it is precisely that focus on national…
