Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI...
have
Nine-Year Fraud Campaign Clones Russian Company Sites to Steal Advance Payments
Cybersecurity researchers have disclosed details of a large-scale fraud campaign that involves creating lookalike websites of major Russian companies with...
Public PoC Released for Exploited Check Point SmartConsole Authentication Bypass
Ravie LakshmananJul 29, 2026Vulnerability / Enterprise Security Cybersecurity researchers have shared additional technical details about a recently patched critical security...
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js
Beta release versions of two npm packages in the @joyfill namespace have been compromised to deliver a remote access trojan...
24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login
Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller (BMC) management interfaces exposing Intelligent Platform...
NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and...
Nvidia Forms AI Security Alliance as Major Frontier Labs Sit Out
“Attackers have frontier AI. Defenders need a frontier AI ecosystem.” Nvidia CEO Jensen Huang issued the warning on X as...
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver legitimate remote monitoring and...
TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
Ravie LakshmananJul 27, 2026Cyber Attack / Threat Intelligence Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor...
The Signs Were There: What the First Autonomous Ransomware Case Confirms
Key takeaways Security researchers have documented an AI agent running a full ransomware operation on its own against a live...
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
Russian state-aligned hackers have been compromising governmental and commercial organizations throughout the West through zero-click phishing emails, federal agencies in...
If you pay a hacker’s ransom, chances are that they’ll come back for more
Governments have long warned not to pay a hacker’s ransom demands, arguing that doing so only lets criminals profit from...
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link...
One Password Mistake Helped Hackers Access Chick-fil-A Account
Reused passwords have once again given cybercriminals an easy way into customer accounts. Chick-fil-A has disclosed that attackers used a...
Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic's Claude Cowork that makes it possible to break out of...
