Lessons Learned from CISA’s Recent GitHub Leak
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor...
Security
iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days
Ravie LakshmananJul 13, 2026Vulnerability / Web Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security...
Exposed Server Reveals 25,000 Compromised WordPress Websites
A simple operational mistake by a cybercrime group has given researchers an inside look at how large-scale website compromises are...
Claude Code Espionage Campaign Exposes a New Enterprise AI Risk
In September 2025, Anthropic detected suspicious activity in its Claude Code tool, which turned out to be a state-sponsored espionage...
Massive Telstra Outage Hits Mobile Networks, Rail, and Payments in Australia
Massive Telstra Outage Hits Mobile Networks, Rail, and Payments in Australia One network failed. Much of daily life stumbled with...
Chrome 150 Adds Android Back Button, Major Security Fixes
Google begins rolling out Chrome 150 (version 150.0.7871.114) for Android, bringing a small but noticeable interface change alongside stability and...
New York Bans Smart Glasses Across 1,240 Courts
Smart glasses can go almost anywhere, but New York courts are drawing the line at the courthouse door. Starting July...
URGENT – Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
Swati KhandelwalJul 10, 2026Enterprise Security / Security Incident Progress Software has told ShareFile customers to shut down the Windows servers...
Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot
Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied...
Laser Attack Resets Tangem Wallet Passwords on Cards That Can’t Be Patched
Researchers at Ledger's Donjon security team have shown that a precisely timed laser pulse, aimed at the chip inside a Tangem crypto...
Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws
Ravie LakshmananJul 10, 2026AI Security / Vulnerability Details have emerged about three now-patched security flaws in the OpenClaw personal artificial...
Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access
Ravie LakshmananJul 10, 2026Enterprise Security / Authentication A threat actor has been targeting organizations spanning multiple sectors with voice-based fake...
Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs
Ravie LakshmananJul 09, 2026Developer Security / Supply Chain Security Datadog Security Labs is warning of "several overlapping campaigns" that are...
China Warns of Claude Code ‘Backdoor’ Security Risk
China is telling organizations to remove certain versions of Anthropic’s Claude Code. The warning claims the AI coding assistant has...
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
Ravie LakshmananJul 09, 2026Supply Chain Security / DevSecOps GitHub has officially announced the release of npm version 12 with install...
