Category: Global Security News

The cloud-computing company’s stock jumped 19% and lifted other shares tied to the artificial-intelligence build-out.

Read more →

Just weeks after Microsoft patched a critical hole in Microsoft Defender, a cybersecurity researcher has posted an apparent workaround that provides system-level control to attackers once they gain any level of access.  The researcher, who goes by the name Nightmare Eclipse, has been engaged in a long-running battle with Microsoft Security.  As of publication time,…

Read more →

The “City-Forum” campaign has been active since at least March 2025 and has targeted organizations across multiple sectors with custom tooling.

Read more →

Just weeks after Microsoft patched a critical hole in Microsoft Defender, a cybersecurity researcher has posted an apparent workaround that provides system-level control to attackers once they gain any level of access.  The researcher, who goes by the name Nightmare Eclipse, has been engaged in a long-running battle with Microsoft Security.  As of publication time,…

Read more →

Just weeks after Microsoft patched a critical hole in Microsoft Defender, a cybersecurity researcher has posted an apparent bypass that provides system-level control to attackers once they gain any level of access.  The researcher, who goes by the name Nightmare Eclipse, has been engaged in a long-running battle with Microsoft Security.  Nightmare Eclipse has not…

Read more →

Attempts to exploit a critical vulnerability (CVE-2026-71362) in Adobe’s Commerce and Magento e-commerce platforms have been detected, potentially allowing attackers to hijack customer accounts. […]

Read more →

Proprietary AI companies such as OpenAI have secured multibillion-dollar infrastructure agreements to meet growing demand. Together AI is now making a sizable infrastructure commitment of its own. IBM and Together AI have signed a multi-year, $240 million agreement under which IBM plans to deploy a large cluster of NVIDIA HGX B300 systems on IBM Cloud.…

Read more →

CEVA Logistics suffered a cyberattack disrupting European operations, with eight warehouses affected and shipments halted at impacted sites. CEVA Logistics suffered a cyberattack on July 29 that disrupted parts of its European operations. The incident impacted impacted eight warehouses, and the company is still working to restore impacted services. CEVA Logistics operates in more than…

Read more →

Horizon3 is investing $20 million in its global partner ecosystem, expanding channel leadership, partner enablement, incentives, strategic alliances, and go-to-market support.  The cybersecurity company, which says 90% of its business flows through partners, is positioning the investment to help MSPs and other channel partners build more profitable proactive security practices and accelerate customer growth. Investment…

Read more →

Europe’s favorite vibe-coding startup Lovable has confirmed previously reported whispers that it was raising another mega round at a $13.3 billion valuation. Lovable said on Wednesday that it has raised $400 million in a Series C round led by Menlo Ventures and the Scaleup Europe Fund, with more than a dozen other investors participating. This new funding comes after…

Read more →

A ransomware takedown can sever part of a criminal operation. DeadLock is designed to recover when some of that infrastructure disappears. Microsoft Threat Intelligence says the ransomware uses decentralized services to keep victim communications available after individual servers are disrupted. Researchers began tracking the Rust-based malware in July 2025. Company analysis identifies both the decentralized…

Read more →

More than 15 million people may now have a very personal problem: their dental, government ID and health information could be in the hands of hackers. DentaQuest, a major U.S. dental and vision benefits administrator, has begun notifying individuals affected by a May 2026 cyberattack that compromised sensitive personal and health information. The company reported…

Read more →

More than 737 browser extensions published on the Chrome Web Store impersonated well-known VPN and proxy services while routing users’ traffic through SOCKS5 proxies operated by a single provider. […]

Read more →

Unspecified APT group has made attacks across 361 unique IP addresses in 47 countries.

Read more →

We can’t control the pace of AI-driven vulnerability discovery, but we can control how fast we respond.

Read more →

China-linked hackers reportedly used eight AI agents to breach a government network, steal data and compromise accounts with minimal human oversight. Israeli cybersecurity firm Dream documented what looks like the first fully autonomous, end-to-end AI hacking operation against a government target. Over four days at the start of July, according to the Financial Times, suspected…

Read more →

The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation of a newly patched security flaw impacting Microsoft Windows to deliver a never-before-seen backdoor targeting defense and aerospace companies across France, Germany, Brazil, and India. The activity, per Check Point Research, is part of Operation Dream Job, a long-running…

Read more →

Multiple vulnerabilities have been discovered in SonicWall Global Management System (GMS), the most severe of which could allow for remote code execution. The SonicWall Global Management System (GMS) is a centralized management interface used to deploy and centrally manage SonicWall firewall, wireless, email security, secure remote access and Dell X-Series solutions from a single console.…

Read more →

Suspected Chinese hackers used open-source artificial intelligence models to run a cyberattack against the Taiwanese government in the first publicly known case of an autonomous AI hack hitting a government target, according to research published Wednesday. The hackers extracted more than 2,500 personnel records, among other data, in the “near-autonomous attack,” researchers at Israeli cyber…

Read more →

Walmart co-locates red and blue teams to build trust and improve security through collaborative purple teaming exercises

Read more →

According to Picus’s Blue Report 2026, enterprise cybersecurity defenses improved in 2026.  However, organizations continue to struggle with detecting stealthy attacker behavior and converting security telemetry into actionable alerts.  The report analyzed more than 338 million simulated attacks conducted in Picus customer environments between January and June 2026.  Picus measured how effectively existing security controls…

Read more →

Security researchers have disclosed new “Plug and Pwn” attacks that abuse the Windows Plug and Play feature to trigger Windows into installing vulnerable or insecure vendor software and gain SYSTEM privileges. […]

Read more →

Lead times of nine to 12 or even 18 months. Costs rising by 35%, 45%, even 50% to 200%. More than halfway through 2026, the market for IT infrastructure that’s crucial for enterprise projects, including those involving artificial intelligence, is strapped. Memory is at the root of the shortages. Memory prices “have risen by 50%…

Read more →

North Korean hackers have been exploiting a Windows zero-day vulnerability (CVE-2026-68820) to target defense-sector companies as part of the Operation Dream Job campaign. […]

Read more →

Our industry has to face that we can’t out-hire the number of alerts SOCs create – we have to automate.

Read more →

Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install…

Read more →

A vulnerability has been discovered in Zoom Clients that could allow for remote code execution. Zoom is a cloud-based communications platform that allows users to connect via video, audio, chat, and content sharing. Successful exploitation could allow an attacker to target meeting participants, execute code without user interaction, steal data, activate cameras or microphones, and…

Read more →

Plus, why LinkedIn wants users to cut the AI slop and slow growth doesn’t mean the labor market is doomed.

Read more →

Generative artificial intelligence (GenAI) has rapidly changed software development by allowing developers to generate functional code faster and at greater scale.  However, Veracode’s 2026 GenAI Code Security Report reveals a disconnect between improvements in AI coding capability and improvements in security.  Although modern large language models (LLMs) can produce syntactically correct code almost perfectly, their…

Read more →

Researchers have found three vulnerabilities in the popular Zoom meeting platform that could let one meeting participant attack another through malicious collaboration data. The vulnerabilities, tracked as CVE-2026-53413, CVE-2026-53414, and CVE-2026-53415, affect the code Zoom uses to process annotation data shared during meetings. The researchers named the set of flaws “Zoomsday.” Affected applications are: Zoom…

Read more →

New WindRelay NFC malware paired with SpyNote RAT let a fraudster clone a card mid-call

Read more →

Samsung Australia has until 11:59pm AEST tonight, Thursday 13 August, to bank what it says is on track to be its most successful foldable pre-order result ever. Retail stock…

Read more →

Consider the Decision Chain, Not the Dashboard

Read more →

A massive set of 737 free VPN and proxy extensions have been found to mainly target Russian-speaking users seeking access to blocked services with an aim to intercept browser traffic and route them through a proxy infrastructure. The extensions, published across at least 40 Chrome Web Store developer accounts, racked up 75,486 installs. Of those…

Read more →

Considering an upgrade to the new Pixel Watch 5? It comes down to these factors.

Read more →

Google just announced the new Pixel 11 line, and right now at AT&T, you can get one for free when you trade in any older phone.

Read more →

The new Google Pixel 11 Pro models feature a useful HiLight indicator that pays homage to classic notification LEDs.

Read more →

Attackers continue to target critical infrastructure and government-linked organizations in the country, mirroring the increased activity across Latin America.

Read more →

The flaws involving Zoom’s screenshare annotation feature were discovered with AI assistance.

Read more →

Most security stories start with something broken. This one starts with everything working as designed. Researchers at Reco have been tracking a campaign they call City-Forum, named after a domain registered in 2002, abandoned, and now resolving to a generic rented server from a German hosting provider. From that server, someone has been pulling records…

Read more →

An Eight-Stage Response Framework for AI Agent Incidents

Read more →

Signal has introduced a feature called automatic key verification, giving users a new way to confirm that nobody has secretly interfered with their encrypted chats. “Signal is always end-to-end encrypted, and automatic key verification provides an additional, streamlined way to confirm that there’s no unexpected party between you and the other ‘end’ of an end-to-end…

Read more →

ScienceLogic has announced Skylar AI 2.5, expanding secure deployment options for organizations with stringent security, sovereignty, and compliance requirements, while introducing enhancements that strengthen AI performance, operational intelligence, and enterprise integrations. The release further improves AI accuracy, platform performance, and natural language user experience across the ScienceLogic AI Platform. Serving as the intelligence layer of…

Read more →

Lazarus malware used post-quantum key exchange to protect delivery of a Windows zero-day exploit

Read more →

Operational Fraud Controls Depend on Verification Infrastructure

Read more →

Deloitte has expanded AI Controls and Assurance services and solutions designed to help organizations confidently adopt, scale and govern AI across the enterprise. From early exploration to enterprise deployment, Deloitte’s enhanced services provide end-to-end support across the AI lifecycle, combining advisory and assurance services across governance frameworks and AI-enabled transformation to help organizations manage risk…

Read more →

Gunra actors are using stealth to exfiltrate vast volumes of data from Microsoft services, US and Korean agencies have warned

Read more →

The big-box giant has scaled its defenses by encouraging trust and innovation. Good communications, transparency and team spirit are key factors.

Read more →

The US National Institute for Standards and Technology wants to modernize its National Vulnerability Database to embrace AI-powered vulnerability research

Read more →

Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7 on Tuesday. […]

Read more →

Apple is in the process of tweaking its business models to cope with the unyielding memory price and availability crisis. Its response is now emerging across multiple fronts. Finance or lease The company’s recently-introduced Apple Upgrade scheme in partnership with Klarna is a smart response to the reality that as devices inevitably become more expensive, consumers will…

Read more →

Security information and event management (SIEM) solutions help organizations collect and analyze data across IT and cybersecurity systems to detect threats, investigate suspicious activity, and manage security risks. The best SIEM solutions also support real-time monitoring, compliance requirements, and faster incident response by giving security teams greater visibility into their environments. To help you find…

Read more →

The North Korea-linked Lazarus group is using fake job offers, trojanized PDF software and a Windows zero-day in attacks aimed primarily at the defense sector, Check Point researchers have found. The activity is part of Operation Dream Job, a long-running campaign in which attackers pose as recruiters and lure targets with job opportunities at well-known…

Read more →

A newly disclosed flaw in the way OpenAI, Anthropic, and Google carried hidden AI reasoning between API calls let researchers recover internal reasoning and secrets from session logs, including API keys and passwords. The weakness affected encrypted reasoning objects used by the providers’ reasoning APIs, where a block created in one session could be replayed…

Read more →

Enterprise defenses are tuned to catch the attacks that make noise. This year’s data shows attackers winning by making none. According to Picus Labs’ new Blue Report 2026, which measured more than 338 million real attack simulations across actual client production environments in the first half of 2026, defenses are having one of their strongest…

Read more →

A convincing fake version of the widely used CCleaner utility is being used to deliver a multi-stage Windows malware that ultimately abuses Google Chrome for credential theft and surveillance. Researchers from Malwarebytes found the campaign distributing a malicious Chrome extension called GhostDesk, which can capture credentials, cookies, keystrokes, and screenshots while also allowing attackers to…

Read more →

​Signal has introduced Automatic Key Verification, a new security feature that gives users a new way to ensure their encrypted chats haven’t been intercepted. […]

Read more →

Adobe has shipped updates to address multiple critical security vulnerabilities impacting ColdFusion, Commerce, and Campaign Classic that, if successfully exploited, could result in arbitrary code execution and privilege escalation. The most severe of the flaws are listed below – CVE-2026-48362 (CVSS score: 10.0) – An operating system command injection vulnerability in ColdFusion that could

Read more →

It’s likely that many enterprises have created — or are at least considering — AI policies that clearly lay out approved AI tools and their uses, set up training programs for employees to help them use the tools in their jobs, and establish guardrails around those systems to avoid issues such as security vulnerabilities and…

Read more →

Zaelab, a digital consultancy for complex enterprises modernizing CX and revenue operations, has been selected by Anthropic as a delivery partner to help enterprises turn AI pilots into production-ready solutions. Zaelab targets the AI pilot-to-production gap This combination will bring together Zaelab’s enterprise delivery experience with Anthropic’s Claude models, helping organizations move AI from proof…

Read more →

OpenAI has released GPT-5.6-Cyber, a cybersecurity-specific model designed to handle advanced defensive work that general-purpose models often refuse, including exploit validation, vulnerability research, and exploit-chain development. The model is available through Daybreak Red, a restricted access tier for vetted defenders conducting authorized security testing. In OpenAI’s internal testing, GPT-5.6-Cyber completed 95% of advanced cyber requests,…

Read more →

Technology provider C Spire has earned the Cisco Secure Networking Specialization in the US – one of four organizations in the country to achieve the designation. Specialization builds on a 19-year Cisco partnership In receiving this designation, the 19-year Cisco partner underwent a comprehensive three-day assessment of its technical capabilities, service delivery processes, and customer…

Read more →

The MSP merger and acquisition market continues to attract private equity and strategic buyers, but service providers hoping to capitalize on that demand must prepare their businesses—and themselves—well before entering a transaction. MSP valuations remain at six to eight times EBITDA Speaking at GTIA ChannelCon 2026, Craig Fulton, M&A advisor at Evergreen, said buyer interest…

Read more →