Criminals who pose as police officers, romantic partners, and business suppliers have built fraud operations that reach across continents. A four-month enforcement campaign against these schemes wrapped up, and police in 97 countries and territories took part. Thousands of arrests The campaign, called Operation First Light 2026, centered on social engineering scams and the money…

Read more →

In this post, I will discuss dealing with web security when using online dating websites. The main threat on a dating site is rarely the awkward date. It is the account takeover, the phishing link, and the stranger who asks for money before asking to meet. Online romance fraud cost Americans $823 million in 2024,…

Read more →

Historically, humans have solved their toughest tasks by creating tools capable of withstanding greater strain to undertake the job or augment their abilities. From levers to steam engines and beyond, the structural evolution of machines is almost as remarkable as their ability to improve operational cultures. In recent times, we have seen machines attain their…

Read more →

Microsoft has announced plans to disable Outlook Web Access (OWA) Light, the lightweight version of the Outlook Web App email client, in a future Exchange Server update. […]

Read more →

Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets it apart is that it was already real and running when we announced it — built quietly months earlier, heads down, taking findings and shipping fixes, because customers kept asking…

Read more →

The technique abuses symlinks to escape the intended workspace and weaken human-in-the-loop protections.

Read more →

Wiz discovered GhostApproval, a symlink flaw in six major AI coding assistants that bypasses approval

Read more →

June 2026 saw 176 confirmed cyber attacks. Cyber Crime drove three in four incidents, Malware remained attackers’ weapon of choice, and Information & Communication infrastructure took the heaviest hit. This visual breakdown charts the month’s motivations, attack vectors, initial access techniques, and hardest-hit sectors.

Read more →

Millions of developers share their keyboard with GitHub Copilot. Inside Visual Studio Code, it opens their files, writes and edits code, runs scripts, and reworks its own output across many turns. The safety testing that vets these agents still runs on chatbot rules: one harmful prompt, one response, graded alone. That rulebook misses where the…

Read more →

Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy. According to a new report published by the Threat Hunter Team from Symantec, the ransomware was first publicly spotted in the wild on May 21, 2026. It’s assessed…

Read more →

SpaceXAI has launched Grok 4.5, pitching the model to developers and enterprises trying to control the rising cost of AI-assisted software development. In a statement, the company said the model is priced at $2 per million input tokens and $6 per million output tokens. It said the model is built for coding and agentic work, runs…

Read more →

June 2026 saw 176 confirmed cyber attacks. Cyber Crime drove three in four incidents, Malware remained attackers’ weapon of choice, and Information & Communication infrastructure took the heaviest hit. This visual breakdown charts the month’s motivations, attack vectors, initial access techniques, and hardest-hit sectors.

Read more →

Microsoft co-signed a malicious kernel driver, and now it’s being used to kill security software in ransomware attacks.

Read more →

In this post, I will show you how to choose the best AI agent software for customer support at scale. Tickets pile up, wait-times climb, and budgets stay flat. A 2025 Gartner survey shows just over half of customers would let a generative AI assistant resolve their issue if it meant faster help, giving support…

Read more →

Law enforcement agencies have arrested 5,811 suspects and seized $293 million in illicit assets in a global anti-fraud operation spanning 97 countries. […]

Read more →

Chatting with readers and regular folks in the real world these days, I can’t help but notice a common theme anytime the topic of AI comes up. It’s an almost amusingly extreme contrast: While the myopic world of tech people (and the type of mostly AI-powered “thought leaders” you see posting in turbo-speed on LinkedIn)…

Read more →

Every consumer app has a settings menu that lets you make decisions about things like notifications or dark mode. Meta has just decided that anyone can generate AI images of you from your public Instagram account by typing your Instagram handle into a prompt. On July 7, Meta launched its AI image generation model, Muse…

Read more →

Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security

Read more →

Over 70 cybersecurity organizations have signed the CREST AI Charter detailing responsible use of AI for security

Read more →

As the race for artificial-intelligence supremacy heats up, Beijing is considering tightening its grip on homegrown technology.

Read more →

Security leaders have been on a spending sprint. The global AI in cybersecurity market is valued at $44 billion in 2026 and is projected to reach $213 billion by 2034, a trajectory that reflects genuine belief that machine learning will close the gap between the volume of threats and the capacity of human analysts. That…

Read more →

As the race for artificial-intelligence supremacy heats up, Beijing is considering tightening its grip on homegrown technology.

Read more →

Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the Microsoft Malware Protection Engine (“mpengine.dll”), which provides scanning, detection, and cleaning capabilities for its antivirus and

Read more →

Claude apps gateway for AWS is a self-hosted control plane that gives organizations a single point of control over access, costs, and policies for Claude Code and Claude Desktop. It replaces per-developer cloud credentials, manual distribution of managed settings to developer laptops, and centralizes usage attribution and spending controls. The gateway can be deployed with…

Read more →

Fake apps like WireVPN and a trojanized 7-Zip turn victims’ devices into residential proxies, letting criminals route traffic through their IPs. Infoblox’s threat research team started pulling on a single thread in early 2026: a fake version of the 7-Zip archive utility hosted at 7zip[.]com instead of the real site, 7-zip[.]org. The researchers uncovered a…

Read more →

Most businesses moved to the cloud over the last decade, but the shift was ad hoc rather than planned, so the setup is rarely right-sized, leaving many overpaying. Fitzroy IT’s…

Read more →

NetSPI has announced the expansion of its AI-powered continuous pentesting platform, broadening the suite of services that organizations can use to ensure critical assets are always protected. The new services comprise continuous web application penetration testing, continuous AI penetration testing, continuous internal penetration testing and continuous AI findings validation which applies expert human judgement to…

Read more →

Instagram is no longer just a photo-sharing app. For South African businesses it is a sales channel, a customer service desk, and a brand asset, which is exactly why criminals target it. At Da Vinci Cybersecurity, Instagram-related cases now land on our desks weekly: hijacked business profiles held to ransom, cloned accounts running advance-fee scams…

Read more →

A new survey shows security leaders have an inflated sense of safety regarding their collaboration tools and platforms.

Read more →

Myriad360’s relationship with Hewlett Packard Enterprise is entering a new phase as the solution provider looks to expand beyond its legacy strength in networking and into compute, storage, GreenLake, and enterprise AI opportunities. Myriad360 builds on HPE networking momentum Diane Pagani, VP of Strategic Alliances, Modern Data Center and Networking at Myriad360, told Channel Insider…

Read more →

American insurance company AssuranceAmerica has disclosed a data breach impacting nearly 7 million drivers after attackers gained access to its systems earlier this year.  […]

Read more →

Your Business Is Already Using AI. Is Anyone Securing It? Somewhere in your organisation right now, someone is pasting company information into a chatbot. A department has quietly signed up for an AI tool that nobody in IT has reviewed. A supplier has automated part of their process with AI, and your data is flowing…

Read more →

Cybersecurity researchers at ESET identify big rise in suspicious and malicious toolsets which put users at risk from cyber-attacks

Read more →

Meta has announced that its new artificial intelligence (AI) model Muse Image lets people use public Instagram posts and reels to generate AI content, and it’s enabled by default. “You can also @-mention Instagram accounts in the Meta AI app to bring specific Instagram profiles right into your images,” the social media giant said in…

Read more →

Poorly segmented networks and weak security controls continue to undercut security organizations’ ability to identify and contain attacks, giving attackers free rein after initial compromise, according to a recent study based on real-world enterprise security telemetry. Zero Networks’ 2026 Lateral Movement Exposure Report — based on analysis of 54 trillion activities across 312 live enterprise…

Read more →

Developers who build with AI coding agents grab capabilities off public marketplaces the same way they grab packages from npm or PyPI. The add-ons are called agent skills. Each one is a little bundle of plain-English instructions, scripts, and files that a tool such as Claude Code or OpenAI Codex loads when it needs a…

Read more →

Microsoft has released a security patch to address a Defender zero-day vulnerability known as “RoguePlanet,” disclosed after the June 2026 Patch Tuesday. […]

Read more →

A direct message arrives on Reddit from a stranger, and it invites a reply. That reply is the point. This scheme runs on social engineering, with no malware and no malicious links, and it has spread across Reddit, Discord, and similar platforms. The goal is a single piece of information: a login or verification code…

Read more →

Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker’s code on your own machine instead. That is the finding in a proof-of-concept published Wednesday by the AI Now Institute, an attack it calls “Friendly Fire.” It works against Anthropic’s Claude Code and OpenAI’s Codex when either is running…

Read more →

Developers are pushing code and opening pull requests across economy borders at a rate GitHub has rarely seen. Outbound collaboration, the sum of git pushes and pull requests sent from developers in one economy to public repositories in another, grew by 16% from Q4 2025 to Q1 2026, according to the latest GitHub Innovation Graph…

Read more →

Network analysts who open packet captures in Wireshark push untrusted data through a large set of protocol dissectors, and each parser is a spot where a malformed frame can trip up the software. The 4.6.7 maintenance release closes twelve of those weak points. The fixes reach from cellular signaling parsers to the code that reads…

Read more →

Fraudsters spent 2025 investing in scale. New routes, new tools, and higher message volumes moved through the SMS, voice, and chat channels that businesses rely on to reach customers. Money follows that activity. The Communications Fraud Control Association puts global telecom fraud losses at around 42 billion dollars for the year, several billion higher than…

Read more →

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer’s computer. The assistant asks permission to edit one harmless-looking file, but the write lands on a sensitive one instead. The affected tools are Amazon Q Developer, Anthropic’s Claude Code, Augment, Cursor, Google Antigravity,…

Read more →

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an infrastructure comprising more than 230 lookalike domains. The activity dates back to at least August 2022, according to DNS threat intelligence firm Infoblox. Once such campaign, observed earlier this year,…

Read more →

Antivirus vendors and security startups keep shipping AI features that promise to read malware the way a seasoned analyst would. The results inside security teams tell a quieter story. A new paper argues that static analysis of software, the job of deciding whether a program is malicious by examining its contents on disk, remains one…

Read more →

Sustainable business operations are increasingly shaped by how effectively organisations manage information across their technology environments. Rather than being driven…

Read more →

D-Link has released two new 5G Wi-Fi 6 personal hotspots letting you connect, stream, and do whatever you need online no matter if you’re at home, working at a cafe, fixing an…

Read more →

Fastly Brings Leading Cloud Edge Expertise to Help DIMPACT Members Understand and Optimise Digital Carbon Footprints

Read more →

Across Australia, millions of businesses, commuters, emergency services, and mobile users are still facing the fallout from Telstra’s nationwide outage. The ripple effect of…

Read more →

A 15-year-old boy asked a chatbot for help – and cancelled nearly 47,000 anime streaming subscriptions in under four hours. Meanwhile, researchers have documented the first fully autonomous, agentic AI-driven ransomware attack, “JadePuffer”. What does this tell us about the future of cybersecurity? Also, Apple’s “Hide My Email” feature turns out to hide rather less…

Read more →

GitHub continues to be a scintillating target for attackers because it sits in the middle of the software supply chain and gives threat actors three things they crave: source code, secrets, and automated pipelines to run amok in. Datadog Security Research has been tracking what it calls a “sustained pattern” of GitHub API abuse over…

Read more →

Proofpoint has identified a suspected China-aligned threat actor exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and gain persistent access.  Rather than targeting email content alone, the campaign appears designed to use compromised mail servers as an entry point into broader institutional networks. Proofpoint tracks the activity cluster as UNK_MassTraction, a…

Read more →

The Latin American nation’s cybersecurity plan — still in the expansion phase — has to survive its own knockout round during the FIFA World Cup.

Read more →

Mount Royal University in Calgary says hackers stole and then deleted data from its file storage systems after breaching the university’s network. […]

Read more →

The attacker exploited AI workflows, chained cloud weaknesses, and stolen credentials to extort a large Amazon customer.

Read more →

Ubiquiti patched seven UniFi OS flaws, including critical CVE-2026-50746, which allows command injection in UniFi Connect Application. Ubiquiti released security updates for seven critical UniFi OS vulnerabilities, including a maximum-severity flaw, tracked as CVE-2026-50746 (CVSS score of 10.0), enabling command injection attacks. The issue affects UniFi Connect Application versions 3.4.16 and earlier, a platform used…

Read more →

Three of the four flaws added to CISA’s KEV list were critical.

Read more →

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to developers and users of Paysafe, Skrill, and Neteller payment applications. […]

Read more →

The round would be the first raised from external investors and value the company at $130 billion.

Read more →

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware. […]

Read more →

DuckDuckGo’s browser now blocks most YouTube ads by default on supported devices. Here’s how it works, which platforms support it, and its limits.

Read more →

Microsoft plans to focus more on in-house AI models in an effort to reduce its costs for generative AI (genAI), Bloomberg reports. The company has begun using its own MAI models to handle some user AI requests in Word and Excel rather than relying solely on models from OpenAI and Anthropic. The company still uses…

Read more →

Nancy Henriquez returns to Channel Insider: Partner POV for a wide-ranging conversation on what MSP owners should know as the channel continues to evolve. Drawing on her experience as a former MSP owner, consultant, author, and Head of Community at MSP Unplugged, Henriquez discusses how MSPs can think about AI adoption, customer strategy, vendor relationships,…

Read more →

Their plan to protect open-source projects from AI-discovered security holes has led to the launch of two commercial offerings: Lightwell Network and Lightwell Clearinghouse Premier.

Read more →

Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are setting off detection rules written to catch human intruders. The agents are not malicious. They just do a lot of things that, to a behavioral engine, look exactly like an…

Read more →

Accenture has confirmed a security incident after a threat actor claimed to have stolen 35 GB of company data, including source code and sensitive technical files.  The IT services giant described the incident as isolated and said it had remediated the source, adding that there was no impact to operations or service delivery. Key Takeaways…

Read more →

A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra passkey. […]

Read more →

A financially motivated operation uses lures of cracked or pirated software to deliver a malware two-for-one combo for data theft and cryptomining.

Read more →

Even as Chrome is killing ad blockers, DuckDuckGo’s new video player now blocks ads by default on YouTube and elsewhere. Duck Player is available for MacOS, Windows, Android, and iOS.

Read more →