Identity Lifecycle Management Wasn’t Built for AI Agents
Identity lifecycle management was architected around a person with an employment record, a manager, and a departure date. AI agents...
Hacking
Category Added in a WPeMatico Campaign
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an...
FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations
Ravie LakshmananJul 02, 2026Network Security / Ransomware The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx...
New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos
Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living....
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
Ravie LakshmananJul 02, 2026Vulnerability / Threat Intelligence The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity...
Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters
Swati KhandelwalJul 01, 2026Kubernetes / Server Security Argo CD, a widely used tool for deploying software to Kubernetes, has an...
19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges
Swati KhandelwalJul 01, 2026Cybercrime / Ransomware A teenager accused of belonging to the hacking group Scattered Spider has been extradited...
SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT
Ravie LakshmananJul 01, 2026Malware / SEO Poisoning Unknown threat actors are leveraging the ScreenConnect remote access tool as a way...
VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer
Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social engineering and Blogger pages to deliver...
Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures
A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal. Fortinet's FortiGuard Labs identified the...
Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Ravie LakshmananJul 01, 2026Artificial Intelligence / Vulnerability Adobe has released patches for multiple maximum-severity security flaws impacting Adobe ColdFusion and...
Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
Swati KhandelwalJul 01, 2026AI Coding / Vulnerability Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking...
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
Ravie LakshmananJul 01, 2026Vulnerability / Network Security A recently disclosed critical security flaw impacting Progress Kemp LoadMaster is seeing active exploitation...
AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android
Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining "unrealistic browser-malware...
Microsoft Accelerates Post-Quantum Cryptography Shift to 2029
Ravie LakshmananJul 01, 2026Quantum Computing / Encryption Microsoft on Tuesday said it's accelerating its quantum safe security roadmap, stating technology...
