Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library
Ravie LakshmananJul 22, 2026Supply Chain Attack / Malware Cybersecurity researchers have discovered a NuGet typosquat that's unlike the typical information-stealing...
Hacking
Category Added in a WPeMatico Campaign
Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents
A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them,...
OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark
Ravie LakshmananJul 22, 2026AI Security / Cloud Security OpenAI on Tuesday said a combination of its artificial intelligence (AI) models,...
Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs
Ravie LakshmananJul 21, 2026Vulnerability / Cloud Security Apple has moved to address a security flaw in its Hide My Email...
AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
Hidden text on a web page was enough to make Kiro, AWS's agentic coding IDE, rewrite its own configuration file...
Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities
Ravie LakshmananJul 21, 2026Software Security / Artificial Intelligence Google's DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber,...
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
Ravie LakshmananJul 21, 2026Vulnerability / Web Security A third SharePoint Server flaw patched by Microsoft as part of its Patch...
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
Ravie LakshmananJul 21, 2026Vulnerability / Network Security Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS...
Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities
Ravie LakshmananJul 21, 2026Email Security / Vulnerability Zimbra has rolled out fixes to address multiple critical security issues, including a...
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI)...
Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure...
HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions...
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
Ravie LakshmananJul 20, 2026Cybersecurity / Hacking A single request should not be able to do this much. But this week,...
Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine
At least one Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukraine, using the feeds to...
Mythos Didn’t Break Your Security Program. Your Exposure Window Could.
The industry spent the initial months after Anthropic's April 7 Mythos reveal focused on volume. How many new CVEs would...
