Why a Windows Hello PIN Beats a Password for Enterprise Security
A short PIN looks like a step backward from a complex password. In Windows Hello for Business, it can be...
Security
ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories
Ravie LakshmananJul 02, 2026Hacking News / Cybersecurity News This week’s security news is mostly about weak spots. Browsers, bots, sandboxes,...
ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API
Ravie LakshmananJul 02, 2026API Security / Cyberespionage The threat actor known as ToddyCat has been attributed to a new malware...
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an...
FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations
Ravie LakshmananJul 02, 2026Network Security / Ransomware The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx...
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
Ravie LakshmananJul 02, 2026Vulnerability / Threat Intelligence The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity...
New BioShocking Attack Tricks AI Browsers Into Leaking Credentials
AI browsers promise to help users get things done faster. BioShocking shows how the same convenience can lead to a...
Microsoft Warns: Fake Perplexity Extension Abused Chrome Search Features
Your Chrome searches may not have been going where you thought. Microsoft has uncovered a malicious Chrome extension masquerading as...
Aflac Data Breach: Over 4M Customers in Japan May Be at Risk
Another cyberattack has put millions of insurance records at risk. Insurance giant Aflac has reported a data breach on its...
Microsoft Uncovers Widespread Hotel Phishing Campaign in Japan
Fake guest complaints are turning into a security trap for hotels in Japan. Microsoft found phishing emails using room complaints...
Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic
Ravie LakshmananJul 01, 2026Artificial Intelligence / Vulnerability Adobe has released patches for multiple maximum-severity security flaws impacting Adobe ColdFusion and...
Progress Kemp LoadMaster Pre-Auth RCE Flaw Faces Active Exploitation Attempts
Ravie LakshmananJul 01, 2026Vulnerability / Network Security A recently disclosed critical security flaw impacting Progress Kemp LoadMaster is seeing active exploitation...
Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts
Ravie LakshmananJul 01, 2026Password Security / Cloud Security Cybersecurity researchers have warned of a "massive, ongoing, automated password spray attack"...
Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service
Ravie LakshmananJul 01, 2026Vulnerability / Enterprise Security Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC...
Meta Adds WhatsApp Usernames: Here’s What You Need to Know
WhatsApp is finally cutting one of the biggest privacy trade-offs baked into its messaging app: having to hand over your...
