Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular...
Security
DHS Confirms Breach of Homeland Security Information Network
The platform built to help US government agencies share information securely has become the latest victim of a cyberattack. The...
Azure CLI Password Spray Attack Exposes Microsoft 365 MFA Gap
Attackers found a Microsoft 365 sign-in path that many MFA policies were not watching. A password spray campaign targeting Azure...
1 Year of This Popular Antivirus is on Sale for $20
TL;DR: Bitdefender is a comprehensive antivirus that comes with a VPN, and a 1-year subscription is only $20 right now (reg. $49.99)....
Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices
Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write the FAT and...
AI Agents Are Creating a New Enterprise Security Gap
In the week ending June 29, 2026, five independent security research teams published findings that collectively describe the same structural...
New Chrome Update Fixes 382 Security Bugs Across Desktop, Mobile
Chrome users have another big security update waiting, and this one is not just routine browser housekeeping. Google has released...
Why a Windows Hello PIN Beats a Password for Enterprise Security
A short PIN looks like a step backward from a complex password. In Windows Hello for Business, it can be...
ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories
Ravie LakshmananJul 02, 2026Hacking News / Cybersecurity News This week’s security news is mostly about weak spots. Browsers, bots, sandboxes,...
ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API
Ravie LakshmananJul 02, 2026API Security / Cyberespionage The threat actor known as ToddyCat has been attributed to a new malware...
AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack
Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an...
FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations
Ravie LakshmananJul 02, 2026Network Security / Ransomware The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx...
SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation
Ravie LakshmananJul 02, 2026Vulnerability / Threat Intelligence The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity...
New BioShocking Attack Tricks AI Browsers Into Leaking Credentials
AI browsers promise to help users get things done faster. BioShocking shows how the same convenience can lead to a...
