News Archive
2287 stories · page 93 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
From vulnerability report to CVE draft in minutes: how Elastic automated security advisories with AI
Elastic's InfoSec Product Security Team has developed a generative AI agent to automate the drafting of security advisories, significantly reducing the time required to process vulnerability reports. This new system leverages Retrieval-Augmented Generation (RAG) against MITRE's Common Weakness Enumeration (CWE) and Common Attack Pattern Enumeration and Classification (CAPEC) catalogs, which…
Apple’s Hide My Email tweak leaves privacy fans fuming
Apple is changing its Hide My Email feature, a move that privacy advocates argue will diminish its effectiveness. The company plans to shift newly generated aliases from the "@icloud.com" domain to "@private.icloud.com" later this summer.
Imposter scams cost Americans $3.5 billion in 2025 – and it’s getting worse
Americans lost an estimated $3.5 billion to imposter scams in 2025, a figure that represents a worsening trend in fraudulent activity. These scams involve perpetrators falsely representing themselves as trusted entities such as financial institutions, government agencies, or local administrative offices to deceive victims.
Azure AD Graph Activity Logs: Ingestion and threat detection to close the visibility gap
Azure AD Graph activity logs are now accessible within Elastic, enabling threat detection capabilities for security teams. Previously, this specific stream of telemetry was largely unavailable to customers for nearly a decade. Microsoft Graph Activity Logs, the newer interface, became generally available in April 2024, but the legacy graph.windows.net surface, frequently targeted by adversary…
Lost in relocation: analysis of a new loader distributing CASTLESTEALER
A newly identified malware loader, dubbed OXLOADER, is being distributed through malicious Google advertisements, aiming to deliver the CASTLESTEALER information-stealing malware. Security researchers have observed OXLOADER employing a range of sophisticated obfuscation techniques to evade detection by static analysis tools and sandbox environments.
Close Encounters of the Human Kind
A new approach to reverse engineering, developed by Cisco Talos, integrates local artificial intelligence agents with traditional analysis tools. This method utilizes the VB6 disassembler, vbdec, to expose parsed data through a live Component Object Model (COM) interface. This allows security analysts to use natural language prompts to automate complex tasks such as decompiling functions and…
‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
A sprawling Android-based botnet known as Popa, which has been active for four years, has been linked to NetNut, a residential proxy service operated by the publicly-traded Israeli firm Alarum Technologies Ltd. Researchers have concluded that Popa, which forces millions of consumer TV boxes to relay internet traffic, is used for advertising fraud, account takeovers, and extensive data-scraping…
Alert: NCSC issues advice following global targeting of Fortinet firewalls and VPN gateways
Organizations utilizing Fortinet firewalls and VPN gateways are being alerted to a global campaign that has targeted these devices. The National Cyber Security Centre (NCSC) in the UK has issued guidance for affected entities, urging them to investigate potential compromises and implement mitigation strategies.
Scripting the disassembler: Local agentic reverse engineering through vbdec’s live COM object model
Analysis tools can be extended for agentic workflows without requiring built-in artificial intelligence, provided they expose their data through external scripting interfaces. This approach allows even traditional graphical applications to become accessible to AI agents by publishing their internal object models. Agents can then query and automate analysis tasks without needing modifications…
Oracle Releases June Patch Update Addressing 243 Vulnerabilities
Oracle has issued its June Critical Security Patch Update, resolving 243 unique CVEs with 245 security patches. A significant portion, 122 patches, are rated as critical severity. The Oracle Fusion Middleware product family received the largest number of fixes, with 106 patches.
Smashing Security podcast #472: AI gets hacked, and BitLocker gets bypassed
AI coding assistants can be tricked into leaking sensitive company information through specially crafted bug reports, bypassing traditional security measures like phishing emails or malware. This vulnerability arises from the extensive trust and access granted to these AI tools, which can read code, browse file systems, and execute commands.
NCSC CEO: Hostile states linked to three-quarters of cyber attacks affecting UK's critical systems
The head of the UK's National Cyber Security Centre (NCSC) has stated that approximately three-quarters of cyber attacks targeting the nation's critical infrastructure over the past year have been linked to hostile state actors. Dr. Richard Horne, CEO of the NCSC, revealed this figure during a speech at the Royal United Services Institute's (RUSI) Annual Security Lecture.
Maine forced to take down data breach portal after fake notices filed with authorities
The state of Maine has temporarily taken down its public data breach notification portal after malicious actors submitted fraudulent breach disclosures, impersonating well-known technology companies. The false reports were publicly posted before their authenticity could be verified, leading the named companies to deny any breach had occurred.
Weekly Update 508
This week's security update highlights a peculiar vulnerability in a common household item: smart light switches. While the specifics of the exploit are not detailed, the report indicates that certain smart light switches possess a flaw that could potentially be leveraged by malicious actors.
Privacy own-goal: World Cup blunder leaks Lionel Messi’s passport details
Details from the passports of every player on Argentina's World Cup squad, including star player Lionel Messi, were inadvertently leaked to the public ahead of a recent match. The sensitive information was present on an official team sheet circulated before a friendly game against Iceland.
A tale of two eras
The cybersecurity landscape is rapidly evolving, with artificial intelligence now capable of discovering and exploiting vulnerabilities at a speed that outpaces human patching efforts. This accelerated threat environment necessitates a fundamental shift in security strategies, moving away from a sole reliance on patching towards a more resilient, multi-layered defense.
Silent Ransom Group: what you need to know
A ransomware group known as Silent Ransom Group is employing unusual and aggressive tactics to infiltrate organizations, moving beyond typical digital intrusion methods. Instead of solely relying on remote cyberattacks, this group has been observed initiating contact with employees through phone calls, impersonating IT support personnel.
AI Could Revolutionize Cybersecurity Analysis and Defense
Cybersecurity is entering a new era, moving beyond its experimental phase due to the increasing complexity of software systems and the limitations of human analysis. This shift is being driven by the capabilities of large language models (LLMs), which offer a scalable and cost-effective way for defenders to assess, prioritize, and act on threats.
Threat Actors Weaponize AI Hype to Deliver AsyncRAT
Cybercriminals are leveraging the widespread interest in artificial intelligence to distribute malware, according to a recent analysis by FortiGuard Labs. Threat actors are creating malicious files that appear to be guides or resources related to AI, aiming to trick individuals searching for information on the technology.
Smashing Security podcast #471: This AI worm just rewrote its own rules
Researchers at the University of Toronto have developed a novel type of computer worm that demonstrates adaptive capabilities, learning to bypass security measures and even modifying its own operational parameters. This AI-powered worm utilizes readily available artificial intelligence models to discover vulnerabilities in new computer systems it encounters.
Who Runs the Ransomware Group ‘The Gentlemen?’
A rapidly growing ransomware-as-a-service operation known as The Gentlemen has become the second most active ransomware group by victim count, according to security firm Check Point Software. The group has attracted skilled hackers by offering affiliates a generous 90 percent share of ransom payments, a higher split than the industry standard. Since its inception in mid-2025, The Gentlemen has…
Why schools remain one of cybercriminals’ favourite targets
Educational institutions continue to be a prime target for cybercriminals, with recent incidents in the United States and the United Kingdom highlighting the vulnerability of schools. These organizations often possess valuable data and operate with limited cybersecurity resources, making them attractive to malicious actors.
Weekly Update 507
A cybersecurity data breach tracking initiative has surpassed a significant milestone, having now documented over 1,000 separate data breaches. This achievement represents not only the collection and verification of breach data but also the extensive operational efforts required to maintain the service.
A Record-Breaking Patch Tuesday for June 2026
Microsoft has released a record-breaking set of software updates for June 2026, addressing nearly 200 security vulnerabilities across its Windows operating systems and related software. This significant number of patches, with close to three dozen classified as critical, reflects an increasing trend in vulnerability discovery, potentially driven by the growing use of artificial intelligence…