Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs
RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite...
Hacking
Category Added in a WPeMatico Campaign
Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access
Ravie LakshmananJul 23, 2026Vulnerability / Network Security Check Point has released security updates to address multiple vulnerabilities impacting Security Management...
GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier
Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical...
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
Ravie LakshmananJul 22, 2026Linux / Vulnerability Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in...
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Ravie LakshmananJul 22, 2026Vulnerability / Browser Security Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe...
Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication
Ravie LakshmananJul 22, 2026Vulnerability / Web Security A high-severity security flaw impacting open-source developer platform Windmill has come under active...
The Fastest Path to AI Adoption Runs Through Security
The Hacker NewsJul 22, 2026AI Security / Shadow IT Security leaders who build fast, visible paths to AI adoption are...
Why Modern SOCs Need Multi-Layered Detections
The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today,...
Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA
Swati KhandelwalJul 22, 2026Law Enforcement / Cybercrime German and US law enforcement have taken down the core infrastructure of Kratos,...
Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
Ravie LakshmananJul 22, 2026Supply Chain Attack / Malware Cybersecurity researchers have discovered a NuGet typosquat that's unlike the typical information-stealing...
Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them,...
OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
Ravie LakshmananJul 22, 2026AI Security / Cloud Security OpenAI on Tuesday said a combination of its artificial intelligence (AI) models,...
Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs
Ravie LakshmananJul 21, 2026Vulnerability / Cloud Security Apple has moved to address a security flaw in its Hide My Email...
AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own configuration file...
Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities
Ravie LakshmananJul 21, 2026Software Security / Artificial Intelligence Google's DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber,...
