Wire | Pwnsy News

342 items

13minZDNet SecurityHow to install the MacOS 27 public beta on your Mac today - it's live now 41minDark ReadingCursor IDE Auto-Executes Malicious Code in Poisoned Repos 41minSecurityWeekUnpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar 41minRapid7CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)47minZDNet SecurityWindows Search just got a faster, cleaner overhaul - how to try it today 51minBleepingComputerMicrosoft Entra ID gets passkeys default authentication starting September 52minBleepingComputerNew phishing kits target Microsoft 365 accounts, evade MFA 1hThe Register SecurityMusk promises purge after Grok Build caught sending entire repos to the cloud 1hZDNet Security12 YouTube default settings to change right now for a more enjoyable experience 1hThe Register Security'The bots are alive!' Jailbroken Gemini spun up new C2 server for Russian fraudster in just 6 minutes 1hZDNet SecurityDon't let an AI chatbot pick your password, ever 1hInfosecurityNew MacOS Malware Exploits Legitimate Developer ID to Pose as Apple Crash Reporter 1hBleepingComputerSAP warns of critical flaws in NetWeaver and Commerce Cloud 2hSecurityWeekSAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud 2hSchneier on SecurityVulnerability in FIFA’s Network 2hThe Register SecurityBaddies caught exploiting extensions bugs with perfect 10 scores on vulnerable Joomla websites 2hZDNet SecuritySEO is not dead: 5 ways to win more citations from AI search 2hSecurityWeekUS, Allies Warn of Russian Cyberattacks Targeting Critical Infrastructure Routers 2hBleepingComputerMicrosoft starts testing cleaner Windows Search without ads 2hCisco Talos[Video] Where protection starts: Cisco Talos Intelligence Integrations 3hWizM-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions 3hOX SecurityAsyncAPI npm organization compromised, 2M weekly downloads affected 3hCisco TalosThe serpent’s tongue: Luring the Python out of its den 3hCSO OnlinePhishing for dummies: Forg365 lowers barrier to M365 account takeovers 3hInfosecurityLidl Notifies Customers of Third-Party Data Breach 4hBleepingComputerUS sanctions VPN, malware providers for enabling ransomware attacks 4hSecurityWeekValarian Raises $50 Million for Sovereign Infrastructure Control Layer 4hSecurityWeekMultiple Jscrambler Packages Impacted by Supply Chain Attack 4hCSO OnlineAI incidents need a new playbook. Here’s how to build one 5hInfosecurityFive Charged in “Russian Coms” Fraud Platform Case 5hRapid7Rapid7 and Mindshare Partner to Accelerate Cyber Resilience Across the Middle East 5hGraham CluleyThe ransomware negotiator who was working for the other side 6hCSO OnlineAI-powered breaches provide wake-up call for incident response 7hZDNet SecurityI tried Google Maps' new 3D Immersive View for Android Auto, and it fixed my biggest navigation problems 7hSecurityWeekPentagon Suspends CMMC Phase 2 as It Rethinks Contractor Cybersecurity Rules 9harXiv SecurityA Guess and Determine Attack on the Elliptic Curve Discrete Logarithm Problem 9harXiv SecurityEvaluating AI Models' Capability to Automate Voice Phishing Attacks 9harXiv SecuritySafeGuard: A Lightweight Client-Server Architecture for Real-Time Endpoint Threat Detection and Response 9harXiv SecurityA Survey on LLM Watermarking: Theory and Deployment 9harXiv SecurityMinionese: Comprehensive Benchmark and Mechanistic Study of Multilingual LLM Safety 9harXiv SecurityToward Stronger Code Watermarking: A Grammar-Driven Approach to Optimizing the Trade-off Between Quality and Detectability 9harXiv SecurityOne Token Is Enough: Fingerprinting and Verifying Large Language Models from Single-Token Output Distributions 9harXiv SecurityDevil in the Lens: Analyzing and Defending Physical Prompt Injection Against Vision-Language Models on Wearable Devices 9harXiv SecurityLarge Language Models in Misinformation Ecosystems: Misuse, Defense, and Vulnerability 9harXiv SecurityThreat Vectors and the State of the Art in Defense Methods for Security in Neurotechnology 9hTrustedSecPandora’s Container Part 1: Unpacking Azure Container Security 9hZscalerAccelerating Post-Quantum Readiness Timelines: A New Executive Order on Securing Against Advanced Cryptographic Attacks 11hSANS ISCISC Stormcast For Tuesday, July 14th, 2026 https://isc.sans.edu/podcastdetail/10006, (Tue, Jul 14th)11hCSO OnlineGovernments to enterprises: Improve your router security hygiene 12hNextgov CyberAI, once relegated to helping hackers with certain tasks, can now power every stage of a cyberattack 12hCheck Point ResearchAI Security Report 2026 12hCSO OnlineUS authorities warn of Russian attacks on critical infrastructure 13hTLDR InfoSecCrashStealer macOS 🍏,Ghostcommit Attack 🖼️, Six U-Boot Flaws 🥾13hDatadog Security LabsCompromised AsyncAPI packages on npm deliver malware 14hThe RecordHackers steal Lidl customer data from external service provider 15hSimon WillisonDOOMQL 15hMicrosoft SecurityDefending SaaS-based applications against ShinyHunters OAuth abuse 15hSimon Willisondatasette code-frequency chart on GitHub 16hDark ReadingWeak Security Continues to Fuel Russian Cyberattacks 16hCyberScoopStates are building their own election defense networks as federal support evaporates 16hZDNet SecurityI tested COSMIC's new Frosted Glass effect, and it's way better than MacOS' Liquid Glass 16hThe RecordEU leaders eye social media ban for children under age 13 17hFederal News CyberPentagon suspends CMMC phase two requirements, launches review of program 17hFederal News CyberWhy Medicaid fraud enforcement alone cannot solve a $37B problem 17hTechCrunch SecurityApple says former employee exploited ‘rare’ bug to download confidential files after leaving for OpenAI 17hBleepingComputerHackers backdoor Jscrambler npm package with infostealer malware 18hNextgov CyberRussian hackers exploit weak router security to breach critical infrastructure, Western allies warn 18hBleepingComputerNew CrashStealer malware poses as Apple crash reporting tool 18hThe RecordVPN service favored by ransomware groups is sanctioned by US 19hDark Reading'Yellow Teams' Are Defining the Future of AI Security 19hZDNet SecurityIs that QR code a trap? How to spot quishing scams before it's too late 20hEFF DeeplinksSony Nerfs Videogame Ownership 20hZDNet SecurityWindows questions? How Copilot can analyze your PC settings now 20hThe RecordRussian celebrity journalist Ksenia Sobchak says hackers accessed Telegram channels via email breach 20hMicrosoft SecurityMicrosoft Entra ID security updates: Passkeys are the default authentication method in Entra ID 20hDark ReadingGigaWiper Lets Threat Actors Choose Their Own Destructive Attack 21hCyberScoopEurope strikes out against Russia’s Turla over espionage, ‘destructive attacks’22hThe Register SecurityEU and UK officially blame Russian spies for cyberattack on Poland's power grid 22hZDNet SecurityHow I tag my files to avoid endless searching and disorganized folders 22hInfosecurityOpen Directory Exposes Three Evilginx Phishing Operators 22hNextgov CyberDHS network intrusion was twice ruled a false positive before breach confirmed 22hCyberScoopOfficials once again warn defenders that Russian hackers are targeting network devices 22hBleepingComputerCISA warns of actively exploited RCE flaws in Joomla extensions 22hCybersecurity DiveUS authorities warn that state-linked hackers are targeting vulnerable networking devices 22hKrebs on SecurityLessons Learned from CISA’s Recent GitHub Leak 22hInfosecurityPakistani Police Systems Hit by Chinese and Indian Espionage 23hXBOWResources 23hCybersecurity DiveHackers find a new trick to collect Microsoft Entra user data without raising red flags 23hSecurityWeekHacker Conversations: Jesse McGraw (GhostExodus), From Blackhat Hacker to Redemption 23hBleepingComputerLidl discloses online shop breach after service provider hack 23hTechCrunch SecurityLAPD lets contract with surveillance giant Flock expire, citing ‘serious concerns’ over civil liberties and privacy 23hBleepingComputerBreach at the Beach: Play the Ultimate Entra ID CTF 23hTenableWhy cloud security is mission-critical for federal civilian and defense agencies 1dHelp Net SecurityCloudflare Precursor uses continuous behavioral analysis to stop advanced bots 1dCheck Point Research13th July – Threat Intelligence Report 1dDark ReadingTurning the Tables on Email Scammers With 'ScamBuster'1dInfosecurityNovel OAuth Client ID Spoofing Technique Targets Cloud Environments 1dCloudflareIntroducing Precursor: detecting agentic behavior with continuous client-side signals 1dZscalerFormula One and Cybersecurity in the AI Era 1dHacking ArticlesWindows Privilege Escalation: SeTakeOwnershipPrivilege 1dWizWhy IaC Coverage Belongs on Your Security Dashboard 1dHelp Net SecurityRansomware negotiator who betrayed clients sentenced to 70 months in prison 1dSecurityWeekCybersecurity M&A Roundup: 37 Deals Announced in June 2026 1dHelp Net SecurityFake OAuth client IDs are helping attackers slip past sign-in logs 1dInfosecurityProgress Software Warns of "External Security Threat" to ShareFile 1dThe Register SecurityWorld Cup grudge attackers may have scored Argentine FA access via year-old infostealer infection 1dCSO OnlineRabbitMQ flaws expose OAuth secrets, risk complete takeover of the broker 1dSecurityWeekRabbitMQ Vulnerability Threatens Enterprise Systems 1dNCSC UKUK and Allies urge critical sectors to improve defences against Russian intelligence targeting 1dSchneier on SecurityAI Data Centers and the Concentration of Wealth 1dIndicatorOktoberfest upskirting videos are being monetized on Meta, TikTok, and YouTube 1dInfosecurityRussian State Hackers Target Vulnerable Routers Worldwide, Joint Advisory Warns 1dThe Register SecurityProgress orders emergency ShareFile server shutdown over mystery security threat 1dSecurityWeekZimbra Patches Critical Code Execution Vulnerability 1dCSO OnlineJurassic Park, cybersecurity and the dangerous myth of control 1dInfosecurityHacker Extradited from Ukraine Pleads Guilty to Ryuk Ransomware Charges 1dCyberScoopAI-generated code has made security debt a governance problem 1dCSO OnlineYour AI risk register is not an incident response plan 1dCybersecurity DiveWhen cybercriminals outrun the feed 1dCybersecurity DiveCopy-paste might be the riskiest thing your enterprise employees do all day 1dInfosecurityAustralian Cyber Agency Warns of Global CMS Exploitation Campaign 1dCSO OnlineCan AI narrow cybersecurity’s class divide?1dProjectDiscoveryCommunity Spotlight: Rishi (@rxerium)1dHelp Net SecurityCynative: Open-source deep research agent 1dHelp Net SecurityMicrosoft demystifies how Windows updates work 1dHelp Net Security99.9% of fixable AI vulnerabilities remain unpatched 1dSANS ISCSomeone Is Scanning for Your MCP Servers and AI Assistant Credentials, (Mon, Jul 13th)1dFederal News CyberThe challenges, opportunities of open source intelligence for cyber defenders 1dFederal News CyberFighting AI with AI requires enduring, new approaches 1dSANS ISCISC Stormcast For Monday, July 13th, 2026 https://isc.sans.edu/podcastdetail/10004, (Mon, Jul 13th)1dFlock SafetyEvidence Management Best Practices for Law Enforcement 1dTLDR InfoSecShareFile Emergency Shutdown ⚠️, Injective npm Key Theft 🪙, NSA Revives TAO Name 🏢1dRecorded FutureKlueセキュリティインシデントとRecorded Futureへの影響 1dSimon WillisonDirectly Responsible Individuals (DRI)1dThe RecordRussia's FSB blamed for Poland grid attack as UK and EU impose first joint cyber sanctions 1dSimon WillisonFable gets another bump 2dOX SecurityMalware-Slop: Crypto Stealer Impersonating Polymarket Exposes Its Own Credentials 2dThe Hacker NewsCompromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install 2dThe Hacker NewsHackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns 2d0xdfHTB: CCTV 3dSANS ISCWireshark 4.6.7 Released, (Sat, Jul 11th)3dTechCrunch SecurityUS cybersecurity agency CISA had to build its incident playbook during the incident, agency reveals 3dRapid7Weekly Metasploit Update: Exploits for FlowiseAI CSV Agent and MacOS Package Kit 3dUnit 42No Manners Here: The Ruthless Rise of The Gentlemen Ransomware 3dSchneier on SecurityFriday Squid Blogging: “Squidbleed” Vulnerability 3dFederal News CyberAI in battlefield intelligence: Expanding the speed of decision-making 3dPraetorianBluetooth Low Energy Security Testing, Consolidated: Introducing Caeruleus 3dCyberScoopArmenian national pleads guilty to Ryuk ransomware attacks 3dDark ReadingJen Ellis: Connecting Cyber Community With Political Machinery 3dCyberScoopCISA looks to remedy ailments from big May credential leak 3dXBOWGrok 4.5 for Offensive Security: Performance vs. Cost 3dOX SecurityAI Pentesting vs Traditional Pentesting: Where Each Wins 3dXBOWXBOW Demo | See Autonomous Hackers in Action 3dOX SecurityContinuous Pentesting: From Annual Audit to Always-On 3dThe Register SecurityDestructive Windows backdoor stuffs multiple wipers and ransomware code into a single package 3dDark ReadingCybercriminals Flock to Healthcare Businesses as Attacks Surge 3dThe Hacker NewsURGENT - Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat 3dMicrosoft SecuritySecuring our future: July 2026 progress report on Microsoft’s Secure Future Initiative 3dSANS ISCMy Stack Simulator, (Wed, Jul 8th)3dCybersecurity DiveInitial access broker linked to weaponization of CitrixBleed2 flaw 3dEFF DeeplinksBuilding Our Future Together 3dCybersecurity DiveCISA details security lapses that led to GitHub leak of passwords, cloud access keys 3dCSO OnlineEU extends mass scanning of messages without a warrant 3dThe Hacker NewsResearcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws 3dTechCrunch SecurityFlorida ransomware negotiator convicted for helping ransomware gang extort US companies 3dDark ReadingFresh ATM Crypto Software Bugs: Jackpot or Bust?3dZero Day InitiativeCVE-2026-47291: Remote Code Execution in the Windows HTTP.sys 3dDark ReadingMore Countries Jump on the Social Media 'Ban Wagon'4dEFF DeeplinksAutomated Moderation Is Here to Stay—Accountability Must Keep Pace 4dDark ReadingAI Coding: Do Security Risks Outweigh Productivity Gains?4dCloudflareImproving Smart Tiered Cache for Public Cloud Regions 4dThe Register SecurityFashion mart Miinto unzips breach details, warns shoppers to watch for phisherfolk 4dXBOWHuman-in-the-Loop AI Pentesting: What It HIL in Pentesting & Why It Works 4dThe Hacker NewsFrom 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale 4dThe Hacker NewsExposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites 4dSchneier on SecurityAI Surveillance and Social Progress 4dThe Hacker NewsStudy of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking 4dThe Register SecurityScot NHS Trust probes email stuffup involving maternity patients' data 4dSANS ISC"Comment stuffing" in an HTML phishing attachment as a mechanism for evading AI-based detection?, (Fri, Jul 10th)4dHelp Net SecurityMicrosoft is rewriting Windows patch guidance because of AI 4dSANS ISCISC Stormcast For Friday, July 10th, 2026 https://isc.sans.edu/podcastdetail/10002, (Fri, Jul 10th)4dThe Register SecurityMicrosoft warns customers AI will mean busier Patch Tuesdays 4dCyberScoopFormer DigitalMint ransomware negotiator who duped clients sentenced to 70 months in jail 4dFlock SafetyHow Flock's Audio Detection Works, and the Concerns We Hear Most 4dSophosSophos named a 2026 Gartner® Peer Insights™ Customers’ Choice for Email Security 4dTLDR InfoSecnpm 12 Reduces Supply Chain Risk ⛓️, 130 Exploits Published 👿, Linux Distro Sabotage 💣4dRecorded FutureJune 2026 CVE Landscape 4dEFF Deeplinks"We Want Texans to Know Their Rights": Q&A with Mayday Health on the Impact of Surveillance on Abortion Care 4dEFF DeeplinksThe House Passed The KIDS Act—The Senate Should Reject It 4dFederal News CyberCyber training will enable government to successfully harness AI while staying secure 4dXBOWMuse Spark vs. GLM: AI Models for Offensive Security 4dSimon WillisonThe new GPT-5.6 family: Luna, Terra, Sol 4dQualysHow to Meet a 3-Day Remediation SLA & Comply with CISA BOD 26-04 4dZscalerWhy Do F1 Teams Need Cybersecurity, and How Is AI Changing the Threat Landscape?4dCisco TalosWolfSSL, GeoVision, VTK vulnerabilities 4dFederal News CyberDLA accelerates ERP modernization to strengthen audit readiness 4dEFF DeeplinksEuropean Commission Chooses to Keep EU Users Locked Up Behind Big Tech’s Gates 4dCisco TalosWinning 54% of the time 4dCyberScoopInterpol cybercrime crackdown nets 5,800 arrests across 97 countries 4dThe Hacker Newsnpm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk 4dSimon WillisonIntroducing Muse Spark 1.1 4dWizHow ProdSec uses Wiz 4dWizWiz in the Verizon DBIR: How AI Acceleration and Cloud Sprawl Impact Modern Defense 4dReversingLabsAI-BOM push borrows from the SBOM playbook 4dSpecterOpsFinding SOCKS with Proxywatch 4dOX SecurityInjectivelabs npm Package Hijacked, Impacting 87 Dependent Packages 4dCybersecurity DiveData breach hits car insurance provider 4dMicrosoft SecurityGigaWiper: Anatomy of a destructive backdoor assembled from multiple malware 4dCybersecurity DiveRansomware ecosystem grows, but ‘four-headed monster’ dominates 4dCyberScoop764 splinter group leader sentenced to 40 years in jail 4dCloudflareWhy we cannot wait for better post-quantum signature algorithms 5dGraham CluleyInvited to a “job interview” with Netflix or OpenAI? Beware! Your Google password could be at risk 5dSentinelOneOne Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement 5dHelp Net SecurityMicrosoft releases fix for RoguePlanet Defender flaw (CVE-2026-50656)5dNIST NewsNew Fabric Test Material Could Help Strengthen Domestic Supply Chain for Textiles and Clothing 5dThe MarkupKaiser Permanente nurses say technology is making their jobs — and patient care — worse 5dAdversa AITop AI Coding Agent security resources — July 2026 5dSchneier on SecurityThe Language of AI Could Change How Humans Speak 5dThe Hacker NewsGodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses 5dEFF DeeplinksGoogle's New Remote Attestation Scheme is As Bad As Its Old One 5dFull Disclosure[REVIVE-SA-2026-003] Revive Adserver Vulnerabilities 5dCrowdStrikeWhy AI Governance Without Guardrails Is Theater 5dTrustedSecVulnify: Giving Your Agents a CVE Brain 5dSANS ISCISC Stormcast For Thursday, July 9th, 2026 https://isc.sans.edu/podcastdetail/10000, (Thu, Jul 9th)5dZscalerKainos Shares Five Essential Tips for Your Zscaler Deployment at Scale 5dSANS ISC_HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_ [Guest Diary], (Tue, Jul 7th)5dFlock SafetyWhat the Supreme Court's Chatrie Decision Means for ALPR Technology 5dTLDR InfoSecAI Breaches AWS Environment ☁️, Accenture Data Breach 🔓, AI For Blue Teams 🟦5dDatadog Security LabsNot-so-anonymous telemetry: The @injectivelabs/sdk-ts backdoor 5dSnykSymlinks Are Still Scary (And Yes, You Can Commit Them to Git)5dRecorded FutureRiskX interview video featuring Colin Mahony and Mastercard's Aditi Sawhney 5dSimon WillisonRewriting Bun in Rust 5dSimon WillisonIntroducing GPT‑Live 5dGraham CluleySmashing Security podcast #475: JadePuffer – the AI that ran a ransomware attack all by itself 5dQualysWhen AI-Accelerated Discovery Outruns Patching, Exploitability Proof Decides What Gets Fixed First 5dNextgov CyberPentagon opens applications for cyber apprenticeship program 5dFederal News CyberNorth Carolina rationalizes cyber tools by asking a simple question 5dSimon WillisonQuoting Kenton Varda 5dCyberScoopFrench nonprofit starts global intelligence and research hub for AI cyber threats 5dQualysFortiBleed: Credential Reuse, Legacy Hashes, and the Risk of Internet-Exposed FortiGate Devices 5dHacking ArticlesWindows Privilege Escalation: SeDebugPrivilege 5dMicrosoft SecurityProtecting Microsoft at AI speed: How SFI proactively hardens our cloud 5dFederal News CyberNIST’s National Vulnerability Database needs some help to continue working 5dHacking ArticlesWireless Pentesting with Claude Using the Aircrack MCP Server 5dSentinelOneHPC AI Workloads Need Runtime Security. The Architecture Already Exists.5dTechCrunch SecurityAnother massive data breach exposed millions of driver’s license numbers 5dCitizen LabAI Surveillance Is Being Supercharged–And It Will Chill Social Progress 5dSpecterOpsBuilding a Mental Model for Kubernetes Security Research 5dCybersecurity DiveUS enterprises incorporate cyber risk into larger strategic focus 5dZscalerBeyond Alert Fatigue: Architecting Next 5dReversingLabsSpectra Analyze in Action: Hunting Device Code Phishing Pages 5dQualysOperationalizing Day Minus Seven: The Cloud-Native ROC 5dCybersecurity DiveAccenture faces massive data breach that could put clients at risk 5dHelp Net SecurityAttackers using Langflow flaw for credential harvesting (CVE-2026-55255)5dWizGhostApproval: A Trust Boundary Gap in AI Coding Assistants 5dBlack Hills InfoSecFinding the “Goldilocks” Zone: A Practical Approach to Alert Triage 5dTroy HuntWeekly Update 511: Live from my Riad in Marrakech 6dThe Hacker NewsNew Ghost Phishing Wave Is Breaking Traditional Email Security 6dRapid7Security Teams Are Ready To Become More Preemptive. What’s Holding Them Back?6dCloudflareIntroducing Meerkat: an experiment in global consensus 6dKrebs on SecurityFelons, Fraudsters Flog Offensive Cybersecurity Startup 6dWizWiz ASM for any environment, any risk, everywhere 6dHelp Net SecurityAccenture acknowledges security incident following 35GB data theft claim 6dSchneier on SecurityCybersecurity and the Gap Between Skill and Ability 6dWeLiveSecurityESET Threat Report H1 2026 6dCrowdStrikeFalcon Secure Access Sets the Standard for Zero Trust Browser Security 6dSANS ISCISC Stormcast For Wednesday, July 8th, 2026 https://isc.sans.edu/podcastdetail/9998, (Wed, Jul 8th)6dTLDR InfoSecGitHub AI Agent Leaks Private Repos 🤖, Windows Service Abuse 🪟, Coding Agent Jailbreak Harness 🔑6dElastic SecurityClickFix to Cash-Out: Anatomy of a Mexican Banking-Fraud Toolkit 6dDatadog Security LabsCoordinated GitHub API enumeration and access token abuse 6dRecorded FutureThe Threat Isn’t the Frontier Model 6dExploit-DB[webapps] Krayin CRM v2.2.x - Authenticated Remote Code Execution 6dExploit-DB[webapps] Atarim WordPress Plugin 4.2.2 - Sensitive Information Exposure 6dExploit-DB[webapps] Langflow 1.9.0 - RCE 6dExploit-DB[webapps] Joomla Page Builder CK 3.5.10 - Arbitrary File Upload 6dUnit 42Vidar Stealer Unmasked: Code Signing Abuse, Go Loaders and File Inflation 6dNextgov CyberHouse Homeland committee seeks briefing on DHS network hack 6dFederal News CyberDoD opens applications for long-awaited cyber apprenticeship program 6dSimon Willisonsqlite-utils 4.0, now with database schema migrations 6dTenableOMB M-26-14: Why federal agencies must fix asset visibility first 6dTechCrunch SecurityHacked, leaked, and held for ransom: The worst breaches of 2026 so far 6dEFF DeeplinksAutomated Moderation Is Here to Stay 6dEFF DeeplinksHelp EFF Cut the AI Hype 6dSpecterOpsHow to Set Red Team Objectives that Produce Value 6dReversingLabs‘Download pumping’ joins the trust-abuse bandwagon 6dQualysQualys Joins Cisco Cloud Control Studio as a Launch Partner to Bring Risk Intelligence to Agentic Operations 6dMandiantThe ‘Ghost’ in the Database: Recovering Active ADFS Signing Keys via Machine DPAPI 7dTechCrunch SecurityHacktivists call out Trump by hacking and defacing US Army websites 7dCloudflareCloudflare proudly joins the UK government's Cyber Resilience Pledge 7dGraham CluleyTwo arrested over credit card phishing – as the Netherlands is named Europe’s worst for payment fraud 7dTechCrunch SecuritySavi’s app aims to protect consumers from realistic AI scams like kidnappers demanding ransom 7dIndicatorNo code, no budget: 7 web scrapers put to the test 7dSchneier on SecurityGoogle Is Suing Chinese Scammers Who Are Using Gemini 7dKaspersky SecurelistThreat landscape for industrial automation systems. Q1 2026 7dCisco TalosUAT-7810 continues building ORB networks using new malware 7d0xdfHTB: Abducted 7dFull DisclosureOPNsense XPATH Injection (CVE-2026-53582)7dFull DisclosureSCHUTZWERK-SA-2025-001: Authentication Bypass for SafeLine SL6 and SL6+7dCrowdStrikeCrowdStrike Uncovers New Prompt Injection Techniques 7dTrustedSecWelcoming ObfusGit 7dZscalerThe Director’s Cut: Trusted Perimeters Become Board Liabilities 7dSophosWhen AI agents look like attackers: what behavioral telemetry tells us 7dTLDR InfoSecUK Government Login Theft 🇬🇧,Veil#Drop Loader 🛠️ , Scattered Spider Telemetry 🕷️7dExploit-DB[webapps] MCPJam Inspector - Remote Code Execution 7dExploit-DB[local] ProtonVPN v4.4.1 - Unquoted Service Path 7dExploit-DB[webapps] Flowise 3.1.3 - arbitrary code execution 7dExploit-DB[remote] Hydra - Stack Buffer Overflow 7dExploit-DB[webapps] Discuz! X5.0 - Authentication Bypass 7dExploit-DB[webapps] Tenable Nessus 10.12.1 - SQL Injection 7dTechCrunch SecurityThe ‘first’ AI-run ransomware attack still needed a human 7dZscalerSSE Architecture Explained: How SSE Enables Zero Trust 7dNextgov CyberCISA expects to finalize key cyber reporting rule by September 7dPraetorianFreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 2 of 2)7dMicrosoft Security5 insights from Frost & Sullivan’s 2025 Frost Radar™ for Cloud Security Posture Management 7dXBOWContinuous Vulnerability Testing for Small Security Teams 7dQualysIs Your AppSec Program Built to Close the OWASP Top 10 2025 Coverage Gap?7dAdversa AITop MCP security resources — July 2026 7dTechCrunch SecurityCanadian spy agency says it hacked drug traffickers, extremists, and a ransomware gang last year 7dRapid7A Day With Your Vector Command Red Team Pod 8dCloudflareYour Worker can now have its own cache in front of it 8dCheck Point ResearchCavern Manticore: Exposing Iran-Linked Modular C2 Framework 8dCheck Point Research6th July – Threat Intelligence Report 8dNIST NewsArvind Raman Confirmed as the 18th NIST Director 8dSchneier on SecurityFrance to Stop Certifying Non-Quantum-Safe Encryption 8dKaspersky SecurelistWhen checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website 8dCrowdStrikeHow AI-leading Security Teams Are Building the Agentic SOC 8dSophos"Exploit mitigation" stalled around 2008. The attacks didn't.8dTLDR InfoSecJadePuffer AI Attack 🤖,Anthropic v. Alibaba ⚖️ , PamStealer macOS Bug 🍏8dDatadog Security LabsEntra Agent ID: Protect, detect, respond 9dOX SecurityMalware Detected: Reverse Shell Without JavaScript Files in npm 9d0xdfHTB: DevArea 10dRapid7Weekly Metasploit Update: Modules for SMB-to-Meterpreter, Peyara Remote Mouse RCE exploit, and more 11dWeLiveSecurityCyber readiness for SMBs: Getting the basics right 11dSchneier on SecurityFlock Cameras Can Surveil Cars Without License Plates 11dIndicatorBriefing: X tries to undo its monetization mess 11dKaspersky SecurelistArmored Likho digging a snake pit: inside the covert BusySnake Stealer campaign 11dTroy HuntSwimming Pools, Pee, and Trying to Delete Your Data From the Internet 11dTLDR InfoSecSharePoint RCE Active Exploitation 🛠️, Cursor Zero-Click RCE 💥, NetNut Proxy Disrupted 🌐11dUnit 42How We Added WebAuthn to a Browser-Based RDP Client 11dZscalerSecOps for the AI Age: Detecting and Responding to AI‑Related Incidents 11dKrebs on SecurityFBI Seizes NetNut Proxy Platform, Popa Botnet 11dFull DisclosureWhistleblowersoftware.com: confidentiality and anonymity leakage to third parties