Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents
Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says...
Security
GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns
Ravie LakshmananJun 23, 2026Workflow Security / Software Supply Chain GitHub is moving to strengthen software supply chain security by updating...
OTC Glucose Monitors Make Wellness Tracking More Personal — and More Complicated
A continuous glucose monitor (CGM) on your arm can now act more like a wearable: app-connected, data-rich, and marketed as...
New Apple Exploit Exposes Millions of iPhones Worldwide, No Software Fix Available
Researchers at cybersecurity firm Paradigm Shift have revealed a newly discovered exploit called usbliter8 that bypasses core boot protections on...
Microsoft Confirms Windows Recycle Bin Bug Affects All Supported Versions
Microsoft’s latest security update fixed over 200 flaws in Windows and somehow broke the simple act of deleting a file....
Mukesh Ambani’s Reliance AI Roadmap Puts Jio CallAgent Inside the Network
Reliance Industries wants AI to start where hundreds of millions of Jio users already spend time: on the phone call....
Prinz Eugen Ransomware Hits Recent Files First and Skips Ransom Notes
Prinz Eugen ransomware does not wait for backups to fall behind. It goes straight for the files organizations changed most...
Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
Ravie LakshmananJun 22, 2026AI Security / Vulnerability Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic...
Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries
Swati KhandelwalJun 22, 2026Mobile Security / Open Source Google has set September 30, 2026, as the day it begins enforcing Android...
Stop Your Legacy Infrastructure from Hijacking Your AI Agents
Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs...
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
Swati KhandelwalJun 22, 2026IoT Security / Vulnerability A new malware family is turning forgotten home routers into a distributed reconnaissance...
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
Ravie LakshmananJun 20, 2026Vulnerability / Web Security Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a...
Apple Patches Beats Studio Buds Flaw That Could Enable Wiretapping
Your earbuds should not become someone else’s microphone. Apple released Beats Firmware Update 1B211 on June 16 to fix a...
Android 17 Is Live on Pixel, but Samsung and Other Android Users Still Have to Wait
Android 17 is now rolling out to supported Pixel devices, but Samsung, Xiaomi, OPPO, OnePlus, Motorola, and other Android users...
Unpatchable ‘usbliter8’ Exploit Breaks Apple A12 and A13 SecureROM Boot Chain
Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution inside the SecureROM of Apple's A12...
