Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs
Ravie LakshmananJul 21, 2026Vulnerability / Cloud Security Apple has moved to address a security flaw in its Hide My Email...
Ravie
Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities
Ravie LakshmananJul 21, 2026Software Security / Artificial Intelligence Google's DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber,...
Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC
Ravie LakshmananJul 21, 2026Vulnerability / Web Security A third SharePoint Server flaw patched by Microsoft as part of its Patch...
Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access
Ravie LakshmananJul 21, 2026Vulnerability / Network Security Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS...
Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities
Ravie LakshmananJul 21, 2026Email Security / Vulnerability Zimbra has rolled out fixes to address multiple critical security issues, including a...
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More
Ravie LakshmananJul 20, 2026Cybersecurity / Hacking A single request should not be able to do this much. But this week,...
World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
Ravie LakshmananJul 20, 2026AI Security / Vulnerability In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that...
UAC-0145 Uses ClickFix CAPTCHAs to Infect Ukrainian Devices wih Malware
Ravie LakshmananJul 19, 2026Malware / Cyber Warfare Russian state-sponsored threat actors have been observed leveraging the infamous ClickFix strategy to...
SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
Ravie LakshmananJul 19, 2026Vulnerability / Network Security A previously undocumented threat actor has been attributed to the exploitation of recently...
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Ravie LakshmananJul 17, 2026Software Supply Chain / Malware Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting...
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
Ravie LakshmananJul 17, 2026Social Engineering / Malware North Korean threat actors linked to the Contagious Interview campaign have been observed...
Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images
Ravie LakshmananJul 17, 2026Social Engineering / Malware North Korean threat actors linked to the Contagious Interview campaign have been observed...
New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage
Ravie LakshmananJul 17, 2026Cyber Espionage / Threat Intelligence Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has...
ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories
Ravie LakshmananJul 16, 2026Hacking News / Cybersecurity News A lot of this week’s trouble starts with something that looks close...
Zoom Patches Critical Windows Flaw That Could Enable Account Takeover
Ravie LakshmananJul 16, 2026Vulnerability / Enterprise Security Zoom has released security updates for a critical security flaw impacting Zoom Workplace...
