News Archive
2287 stories · page 85 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Cisco Live Event SOC Educates Attendees on Security Operations
Cisco's Security Operations Center (SOC) at its Cisco Live AMER 2026 event in Las Vegas served as a multifaceted educational platform, offering attendees and staff insights into real-world cybersecurity operations. The event SOC not only protected the conference infrastructure but also facilitated learning through various interactive formats, including tours, dedicated sessions, internal…
What Working the Cisco Live SOC Taught Me About AI, Detection, and Response
Working within the live Security Operations Center (SOC) at Cisco Live AMER provided valuable insights into the practical application of AI, detection, and response technologies, according to a product manager's recent account. The SOC at the event functions as a real-time security operation, integrating analysts, telemetry, detection mechanisms, and response workflows across the conference…
How the Reddit and Discord false report scam steals accounts
A social engineering scam is targeting users on Reddit and Discord, aiming to steal account credentials and lock users out of their accounts. The scam typically begins with a direct message from a stranger claiming that their account has been reported, and that the reporting account appears to be yours. Alternatively, the scammer might claim they accidentally reported your account and need…
County Government Reportedly Paid $1 Million to Cyber Extortion Group
A county government in Ohio has reportedly paid a $1 million ransom to a cyber extortion group. The payment was made to prevent the public disclosure of sensitive data that was stolen during a recent cyberattack.
Hidden backdoor in Tenda router firmware grants admin access
A security vulnerability has been discovered in the firmware of several Tenda router models, creating a hidden backdoor that could allow unauthorized administrative access. The issue, tracked as CVE-2026-11405, stems from an undocumented authentication mechanism within the device's web server.
Critical Gitea Flaw Under Active Exploitation, Researchers Warn
A critical security vulnerability in the popular open-source Git service Gitea is currently being actively exploited by attackers, according to security researchers. The flaw, identified as CVE-2026-20896, allows unauthorized individuals to bypass authentication mechanisms and gain access to sensitive data, including private repositories and secrets.
RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service
A new Malware-as-a-Service (MaaS) operation dubbed RedWing is offering sophisticated Android banking fraud tools through rental agreements facilitated via the Telegram messaging platform. This service provides cybercriminals with pre-packaged malware designed to compromise mobile devices, with the explicit aim of stealing sensitive banking information and one-time passcodes used for…
Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots
A security vulnerability in Google's Dialogflow CX platform, which has since been addressed, presented a risk of chatbot hijacking. The flaw could have enabled an attacker with edit permissions for a specific "Code Block" agent to gain control over other agents within the same Google Cloud project.
Supreme Court allows Texas app law requiring age verification to take effect
The Supreme Court has allowed a Texas law mandating age verification for app downloads to take effect while a lower court case proceeds. The order, issued Monday, lifts a previous hold on the Texas App Store Accountability Act (TASAA).
Suspected Chinese Threat Group Targets Universities via Vulnerable Roundcube Servers
A suspected China-aligned threat group, tracked by researchers as UNK_MassTraction, has been actively exploiting vulnerabilities in Roundcube webmail servers to gain access to academic institutions in the United States and Canada. The primary targets appear to be physics and engineering departments, with potential connections to national security interests.
Britain plans to build autonomous AI 'Cyber Shield' to defend nation
Britain's National Cyber Security Centre (NCSC) has announced plans to develop an autonomous AI-powered defense system, dubbed "Cyber Shield," aimed at protecting the nation's critical infrastructure and government networks. The initiative seeks to counter the growing threat posed by adversaries leveraging artificial intelligence to conduct cyberattacks at unprecedented speed and scale.
'GitLost' Flaw Leaks Private Data From GitHub's Agentic Workflows
A newly identified vulnerability, named GitLost, has been discovered that allows for the exfiltration of private data from GitHub's Agentic Workflows. The flaw enables an unauthenticated attacker to exploit a public GitHub Issue to silently steal information from private repositories.
Spain arrests suspected member of pro-Russian hacktivist groups
Spain's National Police have arrested an individual suspected of involvement with pro-Russian hacktivist organizations, including CyberArmy of Russia Reborn (CARR) and Z-Pentest. The suspect, who resided in Palencia, is alleged to have provided logistical and operational support to a Ukrainian hacker operating for CARR.
DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts
A sophisticated phishing campaign has been observed exploiting Microsoft 365's device code flow to gain unauthorized access to user accounts. The campaign, which ran from the last week of June into early July, utilized collaboration-themed lures to trick victims into compromising their credentials.
Qualys Joins Cisco Cloud Control Studio as a Launch Partner to Bring Risk Intelligence to Agentic Operations
Qualys has announced its participation as a launch partner in Cisco Cloud Control Studio, a new platform designed for agentic IT and security operations. This collaboration aims to integrate Qualys' risk intelligence directly into Cisco's operational workflows, allowing joint customers to manage and remediate vulnerabilities more efficiently. The integration was unveiled at Cisco Live Las…
Major Japanese telco says cyberattack exposed 12 million emails
One of Japan's largest telecommunications providers has confirmed that a cyberattack on an email platform it manages resulted in the exposure of over 12.2 million customer email addresses and 7.6 million passwords. The company, KDDI, stated that the breach affected an email system used to handle customer accounts, webmail services, and email storage for five separate Japanese internet service…
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
Researchers at Noma Security have uncovered a vulnerability in GitHub's Agentic Workflows that could allow malicious actors to exfiltrate private repository data. The exploit leverages a public GitHub Issue to trick the workflow system into disclosing sensitive information from private repositories.
The GitHub Actions Attack Pattern Your CI Security Scanners Miss
Researchers have identified a new class of vulnerabilities in Continuous Integration/Continuous Deployment (CI/CD) pipelines, dubbed "Cordyceps," which can be exploited by attackers with a free GitHub account. These weaknesses, disclosed by Novee Security, bypass traditional security scanning tools because they exploit the composition of workflow interactions rather than flaws within…
Fake Netflix, Coca-Cola, and FIFA job scams target marketers
Cybercriminals are impersonating well-known corporations like Netflix, Coca-Cola, Adidas, and FIFA in a sophisticated job-scam campaign targeting marketing professionals. The attackers are leveraging legitimate services and browser manipulation techniques to create a veneer of authenticity for their phishing operations.
Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker
The Federal Bureau of Investigation has reportedly used a persistent Windows device ID to track an individual suspected of involvement with the Scattered Spider hacking group. This digital fingerprint is said to have been instrumental in connecting the suspect to a security breach at a high-end jewelry retailer.
Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants
A critical security vulnerability in the enterprise generative AI platform Writer has been patched, addressing a flaw that could have allowed agent previews to leak session tokens and potentially lead to cross-tenant compromise. The issue, identified as a session isolation flaw, posed a significant risk to organizations utilizing the platform for their AI-driven operations.
CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is reportedly employing artificial intelligence to enhance its security reviews of government software. Specifically, the agency is said to be utilizing Anthropic's Mythos AI tool for the purpose of scanning software for vulnerabilities.
UK cyber pledge draws only a handful of top firms despite ministerial appeal
Fewer than 15 of the UK's 350 largest listed companies have signed up to a new voluntary cybersecurity initiative, the Cyber Resilience Pledge, despite an appeal from government ministers. The pledge, launched on Tuesday, aims to encourage businesses to enhance their cyber defenses.
Cloudflare proudly joins the UK government's Cyber Resilience Pledge
Cloudflare has joined a new voluntary framework launched by the UK government aimed at enhancing cybersecurity across organizations. The Cyber Resilience Pledge, as it is called, invites companies to commit to foundational cybersecurity governance, board-level accountability, and comprehensive security measures throughout their supply chains. Cloudflare is part of the initial group of…