FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations
Ravie LakshmananJul 02, 2026Network Security / Ransomware The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx...
Security
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
Ravie LakshmananJul 02, 2026Vulnerability / Threat Intelligence The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity...
New BioShocking Attack Tricks AI Browsers Into Leaking Credentials
AI browsers promise to help users get things done faster. BioShocking shows how the same convenience can lead to a...
Microsoft Warns: Fake Perplexity Extension Abused Chrome Search Features
Your Chrome searches may not have been going where you thought. Microsoft has uncovered a malicious Chrome extension masquerading as...
Aflac Data Breach: Over 4M Customers in Japan May Be at Risk
Another cyberattack has put millions of insurance records at risk. Insurance giant Aflac has reported a data breach on its...
Microsoft Uncovers Widespread Hotel Phishing Campaign in Japan
Fake guest complaints are turning into a security trap for hotels in Japan. Microsoft found phishing emails using room complaints...
Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Ravie LakshmananJul 01, 2026Artificial Intelligence / Vulnerability Adobe has released patches for multiple maximum-severity security flaws impacting Adobe ColdFusion and...
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
Ravie LakshmananJul 01, 2026Vulnerability / Network Security A recently disclosed critical security flaw impacting Progress Kemp LoadMaster is seeing active exploitation...
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
Ravie LakshmananJul 01, 2026Password Security / Cloud Security Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack"...
Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service
Ravie LakshmananJul 01, 2026Vulnerability / Enterprise Security Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC...
Meta Adds WhatsApp Usernames: Here’s What You Need to Know
WhatsApp is finally cutting one of the biggest privacy trade-offs baked into its messaging app: having to hand over your...
GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks
Swati KhandelwalJun 30, 2026AI Security / Software Supply Chain The safety check that is supposed to stop an AI coding...
282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study
Swati KhandelwalJun 30, 2026API Security / Mobile Security Researchers tested 444 AI chatbot apps for iPhone and found that 282...
SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux
A critical flaw in SimpleHelp, remote-access software used by IT teams and managed service providers, has been exploited to deliver...
iPhone Security Fixes May Arrive Sooner as AI Speeds Up Threats
Some iPhone security fixes are getting released faster as AI gives hackers new ways to move quickly. Reuters reported that...
