Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
Ravie LakshmananJun 22, 2026AI Security / Vulnerability Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic...
Security
Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries
Swati KhandelwalJun 22, 2026Mobile Security / Open Source Google has set September 30, 2026, as the day it begins enforcing Android...
Stop Your Legacy Infrastructure from Hijacking Your AI Agents
Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs...
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
Swati KhandelwalJun 22, 2026IoT Security / Vulnerability A new malware family is turning forgotten home routers into a distributed reconnaissance...
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Ravie LakshmananJun 20, 2026Vulnerability / Web Security Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a...
Apple Patches Beats Studio Buds Flaw That Could Enable Wiretapping
Your earbuds should not become someone else’s microphone. Apple released Beats Firmware Update 1B211 on June 16 to fix a...
Android 17 Is Live on Pixel, but Samsung and Other Android Users Still Have to Wait
Android 17 is now rolling out to supported Pixel devices, but Samsung, Xiaomi, OPPO, OnePlus, Motorola, and other Android users...
Unpatchable ‘usbliter8’ Exploit Breaks Apple A12 and A13 SecureROM Boot Chain
Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution inside the SecureROM of Apple's A12...
CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices
Ravie LakshmananJun 19, 2026Threat Intelligence / Firewall Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday urged Fortinet...
From Assistive to Agentic: The AI Shift That’s Redefining Threat Management
Introduction The average enterprise security team has 40 or more security tools, giving a lot of visibility into internal telemetry...
Privacy own-goal: World Cup blunder leaks Lionel Messi’s passport details
According to media reports, a security blunder carelessly leaked the passport details of every player in Argentina's World Cup squad...
Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone
Ravie LakshmananJun 19, 2026Mobile Security / Vulnerability Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity...
24B Records Exposed in Massive Leak of Emails, Passwords, and Login Data
A massive collection of stolen login credentials containing roughly 24 billion records was briefly exposed online, according to cybersecurity researchers...
124M Passwords Exposed as Infostealer Malware Hits Millions of Devices
The era of hacking corporate databases may be giving way to something far more direct. Have I Been Pwned has...
AI Crackdowns, Mega Mergers, and Security Chaos Define This Week in Tech
AI kept its foot on the gas this week, and the rest of tech mostly tried not to get run...
