ENCN
DARK READING
Weak Security Continues to Fuel Russian Cyberattacks1h
'Yellow Teams' Are Defining the Future of AI Security5h
GigaWiper Lets Threat Actors Choose Their Own Destructive Attack6h
CYBERSCOOP
States are building their own election defense networks as federal support evaporates2h
Europe strikes out against Russia’s Turla over espionage, ‘destructive attacks’6h
Officials once again warn defenders that Russian hackers are targeting network devices8h
BLEEPINGCOMPUTER
Japan's largest taxi operator shuts systems after cyberattack3h
Hackers backdoor Jscrambler npm package with infostealer malware3h
New CrashStealer malware poses as Apple crash reporting tool4h
THE HACKER NEWS
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install2d
Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns2d
Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions2d
TLDR INFOSEC
ShareFile Emergency Shutdown ⚠️, Injective npm Key Theft 🪙, NSA Revives TAO Name 🏢23h
npm 12 Reduces Supply Chain Risk ⛓️, 130 Exploits Published 👿, Linux Distro Sabotage 💣3d
AI Breaches AWS Environment ☁️, Accenture Data Breach 🔓, AI For Blue Teams 🟦4d
THE RECORD
EU leaders eye social media ban for children under age 132h
VPN service favored by ransomware groups is sanctioned by US4h
Russian celebrity journalist Ksenia Sobchak says hackers accessed Telegram channels via email breach6h
INFOSECURITY
Open Directory Exposes Three Evilginx Phishing Operators7h
Pakistani Police Systems Hit by Chinese and Indian Espionage8h
Novel OAuth Client ID Spoofing Technique Targets Cloud Environments10h
SECURITYWEEK
Hacker Conversations: Jesse McGraw (GhostExodus), From Blackhat Hacker to Redemption8h
Cybersecurity M&A Roundup: 37 Deals Announced in June 202611h
RabbitMQ Vulnerability Threatens Enterprise Systems11h
HELP NET SECURITY
Tidal Cyber connects assets, vulnerabilities, and threats through Threat-Led Defense9h
Cloudflare Precursor uses continuous behavioral analysis to stop advanced bots9h
Lumen expands managed detection and response with Cortex XSIAM integration10h
GRAHAM CLULEY
Invited to a “job interview” with Netflix or OpenAI? Beware! Your Google password could be at risk4d
Smashing Security podcast #475: JadePuffer – the AI that ran a ransomware attack all by itself5d
Two arrested over credit card phishing – as the Netherlands is named Europe’s worst for payment fraud6d
SOPHOS
Sophos named a 2026 Gartner® Peer Insights™ Customers’ Choice for Email Security3d
When AI agents look like attackers: what behavioral telemetry tells us6d
"Exploit mitigation" stalled around 2008. The attacks didn't.7d
KREBS ON SECURITY
Lessons Learned from CISA’s Recent GitHub Leak8h
Felons, Fraudsters Flog Offensive Cybersecurity Startup5d
FBI Seizes NetNut Proxy Platform, Popa Botnet11d
INDICATOR
Oktoberfest upskirting videos are being monetized on Meta, TikTok, and YouTube12h
No code, no budget: 7 web scrapers put to the test6d
Briefing: X tries to undo its monetization mess10d
SOCIAL
R/HACKING
sandisk cruzer profile54min💬 0▲ 5
Thinning out my badge collection. Any interest?2h💬 7▲ 9
Talk: How Sascha P kept a BBS legend from the trash, hacked and revived it, and became a dial‑up sysop in 2023.9h💬 0▲ 7
R/PRIVACY
With Flock Safety cameras everywhere, is truly anonymous interstate travel still possible in the US?1h💬 22▲ 33
It's starting in Texas. Bluesky is now requiring 3rd party verifications.1h💬 18▲ 88
What will you do if/when online privacy becomes impossible?3h💬 120▲ 128
R/CYBERSECURITY
Why do some companies prefer small internal SOC etc over external managed services like Managed SOC, MDR or MSS etc?4h💬 37▲ 23
Now, defenders are embracing the prompt injection, too7h💬 9▲ 79
World Cup grudge attackers may have scored Argentine FA access via year-old infostealer infection7h💬 0▲ 8
R/REVERSEENGINEERING
A technical analysis of a LinkedIn scam spreading malware to developers8h💬 0▲ 7
TTF2PFR: A Python script that converts TrueType TTF fonts to Bitstream's failed "Portable Font Resource" format used in Netscape 4.10h💬 0▲ 6
LIEF v1.0.0: Brand-new Runtime API and DWARF/PDB -> C/C++ generation!17h💬 0▲ 17
R/NETSEC
Dell BIOS Passwords: Weak XOR Encryption Allows Recovery from SPI Flash (CVE-2026-40639)13h💬 8▲ 59
Vulnerability in Realtek driver allows DMA controller abuse from user mode with no additional hardware or driver1d💬 2▲ 26
Scanning malicious websites with arbitrary number of VPN tunnels (Part 2)2d💬 1▲ 9
R/ASKNETSEC
how are people approaching agentic iam and agent identity..not just the humans behind them16h💬 5▲ 8
Any recommendations for validating security controls against real TTPs?1d💬 8▲ 8
Did anyone actually add a second endpoint vendor after the CrowdStrike outage?3d💬 35▲ 35
R/INFOSECNEWS
Microsoft Warns of New GigaWiper Backdoor Built to Destroy Windows PCs4d💬 2▲ 7
AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining4d💬 0▲ 13
GhostApproval Vulnerabilities Let Top AI Coding Tools Write Outside Workspaces4d💬 0▲ 6
R/MALWARE
Google "Sponsored" ad for "Claude mac app" leads to a fake install guide hosted as a shared Claude chat and the terminal command installs malware1d💬 7▲ 84
SpectrePaste: TA leveraged AI for entire orchestration and development of their malware ecosystem6d💬 3▲ 6
ENTERPRISE
ZDNET SECURITY
I tested COSMIC's new Frosted Glass effect, and it's way better than MacOS' Liquid Glass2h
Is that QR code a trap? How to spot quishing scams before it's too late5h
Windows questions? How Copilot can analyze your PC settings now6h
FEDERAL NEWS CYBER
Pentagon suspends CMMC phase two requirements, launches review of program2h
Why Medicaid fraud enforcement alone cannot solve a $37B problem3h
The challenges, opportunities of open source intelligence for cyber defenders19h
TECHCRUNCH SECURITY
Apple says former employee exploited ‘rare’ bug to download confidential files after leaving for OpenAI3h
LAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy9h
US cybersecurity agency CISA had to build its incident playbook during the incident, agency reveals2d
THE REGISTER SECURITY
EU and UK officially blame Russian spies for cyberattack on Poland's power grid7h
Progress orders emergency ShareFile server shutdown over mystery security threat12h
Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package3d
CYBERSECURITY DIVE
US authorities warn that state-linked hackers are targeting vulnerable networking devices8h
Hackers find a new trick to collect Microsoft Entra user data without raising red flags8h
When cybercriminals outrun the feed14h
CSO ONLINE
RabbitMQ flaws expose OAuth secrets, risk complete takeover of the broker11h
Jurassic Park, cybersecurity and the dangerous myth of control13h
Your AI risk register is not an incident response plan14h
NEXTGOV CYBER
Russian hackers exploit weak router security to breach critical infrastructure, Western allies warn3h
DHS network intrusion was twice ruled a false positive before breach confirmed8h
Pentagon opens applications for cyber apprenticeship program5d
VENDORS
MANDIANT$4.7T
The ‘Ghost’ in the Database: Recovering Active ADFS Signing Keys via Machine DPAPI6d
Google’s Continued Disruption of Malicious Residential Proxy Networks11d
CISCO TALOS$475B
WolfSSL, GeoVision, VTK vulnerabilities4d
Winning 54% of the time4d
UAT-7810 continues building ORB networks using new malware6d
UNIT 42$228B
No Manners Here: The Ruthless Rise of The Gentlemen Ransomware3d
Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation6d
How We Added WebAuthn to a Browser-Based RDP Client11d
CROWDSTRIKE$186B
Why AI Governance Without Guardrails Is Theater4d
Falcon Secure Access Sets the Standard for Zero Trust Browser Security5d
CrowdStrike Uncovers New Prompt Injection Techniques6d
CLOUDFLARE$85B
Introducing Precursor: detecting agentic behavior with continuous client-side signals10h
Improving Smart Tiered Cache for Public Cloud Regions3d
Why we cannot wait for better post-quantum signature algorithms4d
DATADOG SECURITY LABS$85B
Not-so-anonymous telemetry: The @injectivelabs/sdk-ts backdoor4d
Coordinated GitHub API enumeration and access token abuse5d
Entra Agent ID: Protect, detect, respond7d
WIZ$32B
Why IaC Coverage Belongs on Your Security Dashboard10h
How ProdSec uses Wiz4d
Wiz in the Verizon DBIR: How AI Acceleration and Cloud Sprawl Impact Modern Defense4d
ZSCALER$23B
Formula One and Cybersecurity in the AI Era10h
Why Do F1 Teams Need Cybersecurity, and How Is AI Changing the Threat Landscape?4d
Kainos Shares Five Essential Tips for Your Zscaler Deployment at Scale4d
CHECK POINT RESEARCH$14B
13th July – Threat Intelligence Report10h
Cavern Manticore: Exposing Iran-Linked Modular C2 Framework7d
6th July – Threat Intelligence Report7d
SNYK$7.4B
Symlinks Are Still Scary (And Yes, You Can Commit Them to Git)4d
SENTINELONE$6.2B
One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement4d
HPC AI Workloads Need Runtime Security. The Architecture Already Exists.5d
Context Engineering | Compaction & Agent Memory for Automated Malware Analysis11d
ELASTIC SECURITY$5.7B
ClickFix to Cash-Out: Anatomy of a Mexican Banking-Fraud Toolkit5d
Inside Elastic InfoSec's agentic SOC: cutting alert triage from 30 minutes to under 311d
QUALYS$3.85B
How to Meet a 3-Day Remediation SLA & Comply with CISA BOD 26-044d
When AI-Accelerated Discovery Outruns Patching, Exploitability Proof Decides What Gets Fixed First5d
FortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate Devices5d
TENABLE$3.1B
Why cloud security is mission-critical for federal civilian and defense agencies9h
OMB M-26-14: Why federal agencies must fix asset visibility first6d
RECORDED FUTURE$2.65B
June 2026 CVE Landscape3d
RiskX interview video featuring Colin Mahony and Mastercard's Aditi Sawhney4d
The Threat Isn’t the Frontier Model5d
EXPEL$1B
The “first” fully agentic ransomware is here, but we aren’t panicking (yet): Meet JadePuffer7d
RAPID7$440M
Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit2d
Security Teams Are Ready To Become More Preemptive. What’s Holding Them Back?5d
A Day With Your Vector Command Red Team Pod7d
OX SECURITY
Malware-Slop: Crypto Stealer Impersonating Polymarket Exposes Its Own Credentials1d
AI Pentesting vs Traditional Pentesting: Where Each Wins3d
Continuous Pentesting: From Annual Audit to Always-On3d
REVERSINGLABS
AI-BOM push borrows from the SBOM playbook4d
Spectra Analyze in Action: Hunting Device Code Phishing Pages5d
‘Download pumping’ joins the trust-abuse bandwagon6d
KASPERSKY SECURELIST
Threat landscape for industrial automation systems. Q1 20266d
When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website7d
Armored Likho digging a snake pit: inside the covert BusySnake Stealer campaign10d
WELIVESECURITY
ESET Threat Report H1 20265d
Cyber readiness for SMBs: Getting the basics right10d