News Archive
2287 stories · page 86 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Two arrested over credit card phishing – as the Netherlands is named Europe’s worst for payment fraud
Two young men have been arrested in the Netherlands in connection with a credit card phishing operation. Dutch police detained a 23-year-old from Zaandam and a 21-year-old from Amsterdam on June 23, 2026. Their homes were searched, and devices believed to be used in fraudulent activities, along with luxury items and a car, were seized.
Critical Adobe ColdFusion Vulnerability Exploited in Attacks
Adobe ColdFusion is facing active exploitation due to a critical vulnerability, identified as CVE-2026-48282. This security flaw carries the highest possible CVSS score of 10, indicating a severe risk to systems running the affected software.
Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks
A cyberespionage group with suspected ties to Iran has been observed employing a flexible, modular command-and-control (C2) framework to conduct attacks. The group has focused its efforts on compromising information technology service providers as a means to gain access to more valuable targets, particularly those located in Israel.
Webinar tomorrow: Why modern email attacks require a new approach to defense
A webinar scheduled for July 8th will address the evolving landscape of email-based cyber threats and the limitations of current defense strategies. The event, titled "Stop chasing alerts: Automating email security with behavioral AI," will feature insights from Dan Nickolaisen, Solutions Architect Manager at Abnormal AI, and Eric Danneker, Director of Cyber Vigilance and Defense at Novant Health.
New Januscape Linux flaw allows VM escape on Intel, AMD devices
A newly disclosed vulnerability in the Linux kernel, named Januscape, allows an attacker to escape a virtual machine and execute code on the host system. The flaw, present for approximately 16 years before being patched in June 2026, stems from a use-after-free weakness within the shadow MMU emulation of KVM/x86, the virtualization technology for Intel and AMD processors.
Cyber Shield: The path to an agentic AI future for cyber defence
The UK's Government Communications Headquarters (GCHQ) has announced a significant initiative named 'Cyber Shield,' designed to revolutionize national cyber defence by integrating advanced agentic artificial intelligence. This new capability aims to counter the growing scale, speed, and sophistication of cyber threats, which are increasingly exacerbated by frontier AI.
CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker
Tarah Wheeler, Chief Information Security Officer at TPO Group, recently shared insights into her career trajectory and her views on the evolving landscape of cybersecurity leadership. In a profile interview, Wheeler discussed the multifaceted nature of her role and the strategic thinking required to navigate the complex security challenges facing organizations today.
What Changes When Your Software Supply Chain Includes AI Writing Your Code?
The integration of artificial intelligence into software development workflows presents novel security challenges for the software supply chain. Organizations are now compelled to assess the security risks associated with code produced by AI systems, a consideration that extends beyond the established practice of analyzing third-party components.
Claude Code’s hidden tracker was an “experiment,” says Anthropic
An independent developer discovered a hidden tracking mechanism within Anthropic's Claude Code client, which the company has since removed, stating it was an experimental feature. The developer, known online as "Thereallo," found the code while reverse-engineering the local installation of Claude Code version 2.1.196. This feature, buried within the minified JavaScript, appeared to encode the…
Google Is Suing Chinese Scammers Who Are Using Gemini
Google has initiated legal action against Outsider Enterprise, a China-based group accused of operating a "phishing-as-a-service" scheme that leverages Google's Gemini AI to generate fraudulent content. The lawsuit, filed by Google, alleges that Outsider Enterprise provides tools and instructions to individuals for creating sophisticated phishing websites and text message campaigns, even those…
Threat landscape for industrial automation systems. Q1 2026
The first quarter of 2026 saw a continued decline in the overall percentage of industrial control systems (ICS) computers affected by malicious objects, hitting a low of 19.6%. This marks the lowest figure in three years, a significant decrease from previous periods. Regionally, Northern Europe reported the lowest infection rate at 9.1%, while Africa experienced the highest at 27.4%. Despite…
UAT-7810 continues building ORB networks using new malware
Cisco Talos is tracking an advanced persistent threat (APT) actor known as UAT-7810, which is actively developing and deploying new malware to expand its "Operational Relay Box" (ORB) networks. These networks are believed to be used by secondary threat actors to conduct attacks against high-value targets. UAT-7810 was previously identified as the entity responsible for the LapDogs ORB network.
Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems
A critical vulnerability, present in the Linux kernel's KVM (Kernel-based Virtual Machine) hypervisor for 16 years, has been disclosed, potentially allowing attackers to escape virtual machine environments and execute code on the host system. The flaw, named Januscape, impacts systems utilizing processors from both Intel and AMD.
Microsoft to enable Windows settings backup by default for orgs
Microsoft will enable its Windows settings backup and restore tool by default for enterprise systems that are joined to Microsoft Entra or are Microsoft Entra hybrid-joined, beginning with the Windows 11 26H2 update. This change will apply to eligible devices where administrators have not explicitly configured the backup and restore policy.
Scammers are using AI to sell impossible flowers
Scammers are leveraging artificial intelligence to create and market seeds for entirely fictional plants, exploiting online marketplaces like eBay, Amazon, and Etsy. These fabricated flora are depicted with impossible features such as bird, butterfly, and cat-shaped blooms, along with vibrant, unnatural color gradients and technicolor leaves.
Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security
Keyfactor, a company specializing in machine identity and cryptographic security, has secured a significant funding round that values the company at over $1 billion. This substantial investment is earmarked for enhancing Keyfactor's platform, with a particular emphasis on developing solutions to counter emerging security threats posed by artificial intelligence and the advent of post-quantum…
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
A new cyberattack campaign has been detected, specifically targeting academic institutions in North America. The perpetrators of this campaign are suspected to be aligned with China and are leveraging security weaknesses in the Roundcube webmail system. The attacks appear to be concentrated on physics and engineering departments within these universities.
Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities
China-aligned attackers have targeted U.S. and Canadian universities, exploiting a chain of vulnerabilities in the Roundcube webmail client to gain unauthorized access to sensitive data and establish persistent footholds within academic networks. The campaign, observed by Proofpoint researchers since May, appears to be ongoing and has primarily focused on physics and engineering departments,…
BeyondTrust warns of critical flaws in remote access software
BeyondTrust has issued a warning to its customers regarding two critical security vulnerabilities discovered in its Remote Support (RS) and Privileged Remote Access (PRA) software. These flaws could potentially allow attackers to bypass authentication mechanisms and gain unauthorized access to affected systems.
Microsoft testing new Cloud Rebuild Windows 11 recovery feature
Microsoft is currently testing a new recovery feature for Windows 11 called Cloud Rebuild. This functionality is available in the latest Insider Preview builds for users in the Experimental channel. Cloud Rebuild is designed to remotely initiate a complete reinstallation of the operating system from the cloud, targeting devices that are experiencing persistent issues or have become inoperable.
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
A significant security vulnerability has been discovered in the firmware of several Tenda router models, potentially exposing users to unauthorized administrative access. The CERT Coordination Center (CERT/CC) has issued a warning about this hidden backdoor, which allows attackers to bypass normal authentication procedures and gain control over the router's web interface.
BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA
BeyondTrust has released security updates to address critical vulnerabilities in its Remote Support and Privileged Remote Access software. The flaws, if exploited, could allow attackers who have not authenticated to gain unauthorized access and control over vulnerable systems.
CrowdStrike Uncovers New Prompt Injection Techniques
CrowdStrike's AI security research team has announced the addition of 18 new prompt injection techniques to its industry-leading taxonomy, bringing the total to over 200 distinct methods. Prompt injection remains a significant challenge in the AI era, particularly as AI agents gain more capabilities to interact with external data and systems.
'BusySnake' Infostealer Slithers Into Critical Infrastructure Networks
A sophisticated information-stealing malware dubbed 'BusySnake' has been detected actively targeting critical infrastructure sectors. Threat actors operating under the moniker 'Armored Likho' have reportedly achieved successful infiltrations into government and electrical power organizations located in Russia, Brazil, and Kazakhstan.