A security hole within AI dev tools has allowed attackers to escape sandboxes by misleading the humans in the loop who were supposed to knowingly approve the tool’s actions, according to cybersecurity research firm Wiz. “We discovered GhostApproval, a systematic vulnerability pattern affecting six of the top AI coding assistants: Amazon Q Developer, Anthropic Claude…

Read more →

The head of artificial general intelligence won’t return from extended medical leave, a major leadership change as the AI giant prepares to go public.

Read more →

The call comes six months in. A CIO I know had approved the budget based on the team that ran the pitch: a partner-level principal with thirty years of manufacturing systems…

Read more →

Read more →

AssuranceAmerica discovered unauthorized access to its systems on March 17, concluding its investigation on June 15.

Read more →

The NCSC’s Cyber Shield initiative is a response to the escalating scale, speed, and sophistication of cyber threats, particularly from state-sponsored actors and organized crime targeting public services.

Read more →

The vulnerability stems from an insecure default configuration in Gitea’s official Docker images (versions prior to 1.26.3) where the “REVERSE_PROXY_TRUSTED_PROXIES” setting is set to “*”.

Read more →

Keyfactor’s platform, AgileSec, helps organizations manage and secure their encryption keys and other cryptographic assets like digital certificates.

Read more →

Radware’s update provides improved monitoring and mapping of agent interactions and dependencies, allowing security teams to understand how autonomous systems connect to enterprise resources.

Read more →

A threat actor, identified as “888,” posted on a cybercrime forum offering the data for sale, alleging it was stolen in July.

Read more →

Infoblox researchers uncovered the operation after analyzing a malicious 7-Zip installer. They found over 230 related domains linked through various infrastructure indicators.

Read more →

The OpenMandriva Linux project announced that it was the target of an attempted act of internal sabotage after a dispute among contributors. […]

Read more →

Researchers at Zhejiang University have developed Bit2Watt, a proof-of-concept attack that abuses rented GPUs by running specialized workloads designed to rapidly fluctuate between high and low computational intensity.

Read more →

Digitalsystem Technology, headquartered in Los Angeles, was added to the FCC’s Covered List for its partnerships with Hong Kong operators China Mobile and China Unicom, and Beijing-based China Unicom.

Read more →

The trojanized installer, identified as Kuailian_win-setup.86.msi, embeds a loader and an encrypted payload alongside the authentic LetsVPN application.

Read more →

The plaintiffs, including journalist Thanasis Koukakis, lawyers, and intelligence officials, are each seeking €1 million in moral damages.

Read more →

INTERPOL’s Operation First Light 2026 led to 5,811 arrests, blocked $293M in criminal assets, and disrupted global fraud and money laundering networks. INTERPOL coordinated a four-month operation across 97 countries and territories that ended with 5,811 arrests and the interception of USD 293 million in illicit assets. Operation First Light 2026 ran from January 15…

Read more →

Read more →

The shutdown of Tudou Guarantee in early 2026 marked the end of one of the largest cybercrime escrow marketplaces in operation.  However, according to research from Flare, it did not disrupt the broader cybercrime ecosystem.  Instead, multiple successor platforms quickly emerged to compete for Tudou’s vendors, infrastructure, and customer base, highlighting how resilient these illicit…

Read more →

Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to compromised systems globally.

Read more →

Obscurity isn’t a defense. If your company has any Internet-facing vulnerability, you’re at risk from multiple threats.

Read more →

Data and AI organization, SAS, has recently announced SAS 360 Marketing AI, a solution designed to help marketers build, deploy, and scale machine learning models. SAS 360 Marketing AI utilizes guided workflows and customizable recipe templates for common marketing uses to move from data to decision at speed. SAS 360 Marketing AI targets marketing data…

Read more →

The researcher known as “Nightmare-Eclipse” published a proof-of-concept (PoC) exploit for the Windows Defender vulnerability in early June after dropping several other Microsoft zero-days.

Read more →

For years, organizations treated operational technology (OT), Internet of Things (IoT), and embedded devices differently from traditional IT assets.  Many of these systems were designed to operate for decades with minimal changes, often in environments where patching or replacing hardware is difficult.  That long operational lifespan has created a growing cybersecurity challenge as aging software…

Read more →

Hackers compromised the Injective Labs SDK project’s GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole cryptocurrency wallet private keys and mnemonic seed phrases. […]

Read more →

Online program aims to build a pipeline of qualified candidates to fill positions that require much-needed AI skills.

Read more →

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed three vulnerabilities in WolfSSF, fourteen in GeoVision, and one vulnerability in VTK-DICOM. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy.  For Snort coverage that can detect the exploitation of these vulnerabilities, download…

Read more →

The window for American dominance in AI hasn’t closed, but it’s narrowing fast.

Read more →

Datadog Security Labs is warning of “several overlapping campaigns” that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. “Operators rely on automated scraping tooling with custom or legitimate-sounding user agents, leveraging GitHub ‘ghost’ accounts that are often years old, or compromised OAuth tokens and personal

Read more →

GodDamn ransomware uses the signed PoisonX driver to disable security tools, marking a more advanced version of the Beast ransomware family. Symantec’s Threat Hunter Team found a new ransomware family called GodDamn that first appeared in the wild on May 21, 2026, and analyzed an attack that took place in early June. The group behind…

Read more →

Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older destructive programs bolted into one, offered as commands the operator can choose from. Each is a different way to break a machine: wipe the whole disk, overwrite the Windows drive,…

Read more →

Authorities arrested more than 5,800 alleged cybercriminals and seized $293 million in a global operation targeting social-engineering scams and money laundering across 97 countries, Interpol said Thursday. The anti-fraud crackdown, dubbed Operation First Light, identified more than 142,000 victims, including people, businesses and governments, officials said.  “Social engineering scams continue to pose a significant threat…

Read more →

Darktrace says a LiteLLM AI gateway linked to Amazon Bedrock was compromised for cryptomining after signs of exposed SSH activity.

Read more →

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal data from SharePoint environments. […]

Read more →

Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover vulnerabilities in its codebase. […]

Read more →

AssuranceAmerica has disclosed a data breach affecting nearly 7 million individuals after attackers gained unauthorized access to the company’s IT environment earlier this year.  According to a filing with the Maine Office of the Attorney General, the AssuranceAmerica data breach impacted 6,998,886 people.  The company, which provides auto, renters, and commercial auto insurance through more…

Read more →

GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor authentication (2FA). The Microsoft-owned subsidiary noted that the following npm install behaviors that used to run automatically before have been made opt-in – allowScripts defaults to off, meaning

Read more →

For those who wonder what the support window is for Apple products, the company now has an answer: it’s quietly ended support for some of its oldest iPhones and iPads, cutting off restore access for devices that first went on sale more than a decade ago.  While the move has prompted some complaints, the truth…

Read more →

Here’s why teams have to treat token management with the same urgency as network telemetry.

Read more →

AI and technology transformation solutions organization UST has announced it has signed on as Anthropic’s second Global Premier Partner in the Claude Partner Network.  The agreement will not only strengthen UST’s position within the Claude Partner Network Services Tier but also expand its ability to help organizations move from experimentation to trusted, large-scale deployment. UST…

Read more →

Durabook, a mobile solutions brand owned by Twinhead International Corporation, is debuting a new deal registration program to protect channel partners’ investments in developing new business opportunities. Growing channel partnerships with an enhanced program The Vanguard Partner Program was developed to serve channel partners, “that are the foundation of its sales strategy.” The program complements…

Read more →

Crypto prediction and betting sites are appearing around the World Cup, and researchers have already tracked scams aimed at fans, including fake ticketing, fixed-match betting, prediction scams, and fan-branded meme coins. We investigated one prediction site ourselves. While we aren’t claiming every site works the same way, it matched several well-known scam patterns. Whether it’s…

Read more →

Insurance provider AssuranceAmerica has confirmed a data breach affecting the personal information and driver’s license numbers of up to 6.9 million people. AssuranceAmerica provides car and rental insurance to customers across 14 US states through a network of over 9,500 independent agents. TechCrunch reports:“AssuranceAmerica said it discovered hackers in its computer systems on March 17.…

Read more →

A new phishing-as-a-service (PhaaS) operation called Forg365 focuses on stealing Microsoft 365 accounts by combining adversary-in-the-middle (AiTM) and device code methods with AI-assisted lure generation. […]

Read more →

A San Antonio man who sexually exploited children while leading 8884, an offshoot of the notorious violent extremist collective 764, was sentenced to 40 years in prison in federal court Wednesday, the Justice Department said.  Alexis Aldair Chavez began associating with 764 as a child in 2022 when a co-conspirator introduced him to 7997, one…

Read more →

The fate of a Ukrainian tax software company shows how modern cyberwarfare can claim casualties far beyond the battlefield, and how businesses across the ocean still need to protect themselves.

Read more →

The Pink cyber extortion crew is tricking employees into giving them access to their Microsoft 365 accounts by faking Entra passkey enrollment requests. The attack The attack starts with a vishing call to an employee. The caller poses as IT and says it’s time to set up a passkey. Everything after that is theater, built…

Read more →

Bitdefender, a cybersecurity-focused organization, has launched a new program to enable European Union (EU) sovereignty and regulatory compliance. European data hosting and security solution includes contract buyout The new program empowers European organizations to transition to a fully European cybersecurity and data hosting solution, ensuring that customer and configuration data, security events, telemetry, and information…

Read more →

Security operations don’t slow down when IT teams take vacation, but staffing levels often do. Kaseya explains how AI-driven automation can help organizations maintain consistent security operations and reduce reliance on manual processes year-round. […]

Read more →

Huntress found a threat actor using vibe-coded PowerShell to map an Active Directory network

Read more →

RSA and ECC, cryptographic algorithms that we’ve all relied on for decades, are vulnerable to the attack of sufficiently advanced quantum computers. Such quantum computers do not exist yet, but they seem to be coming sooner than expected. Luckily, the solution is already available: migrate to ML-KEM encryption and ML-DSA signatures, which are designed to…

Read more →

Citrix has announced updates to its high-performance application delivery and security platform NetScaler, introducing MCP Gateway functionality to allow enterprises to securely route, govern and observe agent traffic to backend Model Context Protocol (MCP) servers. In addition, the company unveiled other enhancements to NetScaler AI Gateway, that extend model routing and token-level usage tracking for…

Read more →

Vectogate has launched an AI governance platform designed to give organizations centralized control over AI agents as they increasingly take on autonomous tasks with access to sensitive data and internal business systems. The company aims to address one of the key governance challenges posed by enterprise AI. The platform is initially available in private beta,…

Read more →

A cryptomining incident highlights how AI gateways can provide access to AI models, cloud infrastructure, and identity and access management (IAM) data.

Read more →

A new report from cybersecurity vendor Cynet finds managed service providers are pulling ahead of in-house security teams in AI adoption and confidence, even as both groups identify AI-powered phishing and social engineering as their top cybersecurity threats. The findings suggest organizations are increasingly turning to MSPs for AI-driven security capabilities as cyberattacks become more…

Read more →

A cloud intrusion that ended with the deployment of cryptomining malware has exposed a bigger risk for enterprises: AI gateways that concentrate access to cloud identities, permissions, and foundation models in a single, highly privileged system. Researchers from cybersecurity firm Darktrace found attackers compromising an AWS EC2 instance acting as a LiteLLM proxy for Amazon…

Read more →

AssuranceAmerica confirmed a breach exposing nearly 7 million driver’s licenses after hackers compromised an employee account and stole customer data. U.S. auto insurer AssuranceAmerica has confirmed a data breach affecting nearly 7 million people, making it the largest known theft of Americans’ driver’s license information in 2026. “In a data breach notice sent to customers…

Read more →

The UK’s National Cyber Security Centre (NCSC) wants to deploy autonomous AI agents capable of finding and neutralizing cyberattacks on national networks in real time, marking Britain’s push toward a sovereign, machine-speed cyber defense system. The blueprint, called Cyber Shield, was developed jointly with the Department for Science, Innovation and Technology (DSIT). “The objective of…

Read more →

AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using models like Mythos, attackers write tailored bait, pick targets, test what lands, and jump to the next host before your team clears the first alert. That is the gap, and it is not your fault. The tools…

Read more →

Survey of cybersecurity leaders by MetaCompliance finds that many feel boards are uninterested in ever-evolving cyber risks

Read more →

Operation First Light 2026, coordinated by Interpol and funded by the Chinese government, has led to 5,811 arrests

Read more →

Microsoft issued a security update that fixes the zero-day vulnerability known as RoguePlanet in Microsoft Defender. RoguePlanet is tracked as CVE-2026-50656, a Microsoft Defender elevation of privilege (EoP) vulnerability. As we reported last month, if successfully exploited, RoguePlanet can allow an attacker to elevate privileges from a standard user account to NT AUTHORITYSYSTEM, the highest privilege level…

Read more →

Wiz found GhostApproval symlink flaws in major AI coding assistants that could hide sensitive file targets, bypass approval checks and enable system access too.

Read more →

Criminals who pose as police officers, romantic partners, and business suppliers have built fraud operations that reach across continents. A four-month enforcement campaign against these schemes wrapped up, and police in 97 countries and territories took part. Thousands of arrests The campaign, called Operation First Light 2026, centered on social engineering scams and the money…

Read more →

In this post, I will discuss dealing with web security when using online dating websites. The main threat on a dating site is rarely the awkward date. It is the account takeover, the phishing link, and the stranger who asks for money before asking to meet. Online romance fraud cost Americans $823 million in 2024,…

Read more →

Historically, humans have solved their toughest tasks by creating tools capable of withstanding greater strain to undertake the job or augment their abilities. From levers to steam engines and beyond, the structural evolution of machines is almost as remarkable as their ability to improve operational cultures. In recent times, we have seen machines attain their…

Read more →

Microsoft has announced plans to disable Outlook Web Access (OWA) Light, the lightweight version of the Outlook Web App email client, in a future Exchange Server update. […]

Read more →

Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets it apart is that it was already real and running when we announced it — built quietly months earlier, heads down, taking findings and shipping fixes, because customers kept asking…

Read more →

The technique abuses symlinks to escape the intended workspace and weaken human-in-the-loop protections.

Read more →