🚨 CISA KEV 2[−]
17 Jul KEVCISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEVThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched security flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fi…THEHACKERNEWS.COM
17 Jul KEVU.S. CISA adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalogU.S. Cybersecurity and Infrastructure Security Agency (CISA) adds KNX Association KNX Protocol Connection Authorization Option 1 and Oracle flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added SonicWall and M…SECURITYAFFAIRS.COM
🐛 COMMON VULNERABILITIES AND EXPOSURES 24[−]
17 JulCVE-2026-48863 Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of serviceInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-53366 ipv4: account for fraggap on the paged allocation pathInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-15713 Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leakInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-15714 Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary stringInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-15712 Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumptionInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-60082 DBI versions before 1.651 for Perl do not enforce statement handle consistency with the rowInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-60081 DBI::ProfileData versions before 1.651 for Perl do not limit the path indexInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-59884 pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDsInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-59886 pyasn1: Uncontrolled resource consumption when converting decoded REAL valuesInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-15711 Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violationInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-15709 Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of serviceInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-57433 Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK recordInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-15043 DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on textInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-15392 DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted locationInformation published.MSRC.MICROSOFT.COM
17 JulCVE-2026-59885 pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of serviceInformation published.MSRC.MICROSOFT.COM
17 Jul KEVCVE-2026-58644: Microsoft SharePoint Server Unauthenticated Remote Code Execution Vulnerability Exploited in the WildOverview On July 14, 2026, Microsoft published a security advisory addressing CVE-2026-58644 , a critical remote code execution (RCE) vulnerability affecting on-premises Microsoft SharePoint Server deployments. The vulnerability, which carries a CVSS v3.1 score of 9.8 (Critical),…RAPID7.COM
17 JulChromium: CVE-2026-15904 Use after free in OzoneThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.MSRC.MICROSOFT.COM
17 JulChromium: CVE-2026-15903 Out of bounds read and write in V8This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.MSRC.MICROSOFT.COM
17 JulChromium: CVE-2026-15899 Use after free in CameraCaptureThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.MSRC.MICROSOFT.COM
17 JulChromium: CVE-2026-15900 Use after free in GPUThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.MSRC.MICROSOFT.COM
17 JulChromium: CVE-2026-15901 Use after free in NetworkThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.MSRC.MICROSOFT.COM
17 JulChromium: CVE-2026-15902 Use after free in CastThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.MSRC.MICROSOFT.COM
17 JulChromium: CVE-2026-15905 Use after free in AuraThis CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2025) for more information.MSRC.MICROSOFT.COM
17 JulCVE-2026-63030: wp2shell a Critical Remote Code Execution Vulnerability in WordPress CoreOverview On July 17, 2026, a GitHub Security Advisory was published for CVE-2026-63030 , a critical unauthenticated remote code execution vulnerability affecting WordPress Core . WordPress Core. While the official GitHub security advisory classifies the severity as Critical, the …RAPID7.COM
⚠️ VULNERABILITY DISCLOSURE 25[−]
17 JulScattered Spiders sentenced, OpenAI builds an AI that breaks AIs, and Iran leans on ChatGPTTwo leading Scattered Spider members, Thaila Jubar and Owen Flowers, were sentenced to five years and six months for the 2024 Transport for London hack that knocked 148 systems offline, forced 27,000 password resets, stole customer data, and cost TfL £29 million, with wider losse…CYBERSECURITYTODAY.LIBSYN.COM
17 Jul KEVCISA urges immediate action on actively exploited Fortinet flawsCISA on Thursday ordered government agencies to prioritize patching two actively exploited vulnerabilities in the Fortinet FortiSandbox threat detection platform. [...]BLEEPINGCOMPUTER.COM
17 JulFresh SharePoint Vulnerability Exploited Soon After DisclosureThe critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server. The post Fresh SharePoint Vulnerability Exploited Soon After Disclosure appeared first on SecurityWeek .SECURITYWEEK.COM
17 JulThe SaaS blind spot: Why security teams can’t get inside their own appsMost organizations I work with have invested heavily in cloud security. They have endpoint detection tools, SIEM platforms, cloud security posture management, and skilled security teams running on a 24/7 shift. And yet, when I ask them a simple question — who has admin access in …CSOONLINE.COM
17 JulFake TTF files deliver stealthy malware in global phishing campaignThreat actors are now abusing an ordinary font file to deliver low-detection malware capable of stealing credentials and establishing persistence on compromised Windows systems. According to a new research from Fortinet’s FortiGuard Labs, a global phishing campaign is actively us…CSOONLINE.COM
17 JulRansomware attack halts Coca-Cola’s Fairlife US milk productionA ransomware attack has stopped milk production at Fairlife, the Coca-Cola dairy brand known for its high-protein milk, protein shakes, and nutrition drinks. Coca-Cola disclosed the incident on July 16, 2026, in a Form 8-K filed with the U.S. Securities and Exchange Commission (S…HELPNETSECURITY.COM
17 Jul KEVCISA Mandates Urgent Patch for Actively Exploited Critical Fortinet VulnerabilitiesUS government agencies have until July 19 to patch two critical Fortinet vulnerabilitiesINFOSECURITY-MAGAZINE.COM
17 JulThree Steps to the Terminal: A Siemens ROX II Zero-Day TrilogyA technical analysis of three chained zero-day vulnerabilities in Siemens ROX II OT switches that allow privilege escalation and persistent root access. The post Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy appeared first on Unit 42 .UNIT42.PALOALTONETWORKS.COM
17 JulCoca-Cola discloses ransomware attack disrupting fairlife production in the USThe Coca-Cola Company has disclosed that a ransomware attack affecting its wholly owned dairy subsidiary, fairlife, has temporarily halted fairlife's US production operations after attackers gained unauthorized access to part of its network, including production-related systems. …CYBERINSIDER.COM
17 JulNew Windows LegacyHive zero-day gives hackers admin privilegesA security researcher using the "Nightmare Eclipse" handle has released a Windows zero-day exploit dubbed LegacyHive that allows attackers to escalate privileges on up-to-date Windows systems. [...]BLEEPINGCOMPUTER.COM
17 JulThe Race to Field Military Autonomy Is On, Can Trusted Information Infrastructure Keep Pace?Military forces are under increasing pressure to field autonomous capabilities faster than ever before. Across the U.S., UK, and NATO, new investment, evolving defense strategies, and accelerated acquisition pathways are transforming how capability is delivered, rewarding program…THEHACKERNEWS.COM
17 JulGold Eagle Clearinghouse Targets Security Gap, But How Is UnclearThe White House launched Gold Eagle to coordinate vulnerability response in a new AI world, but multiple questions linger over how it's being implemented.DARKREADING.COM
17 JulItaly fines Wind Tre $2 million for data breaches affecting 365k customersItaly's data protection authority (Garante per la Protezione dei Dati Personali) has fined telecommunications provider Wind Tre €1.715 million (approximately $2 million) after finding serious security shortcomings that led to two data breaches affecting more than 365,000 customer…CYBERINSIDER.COM
17 JulIn Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD BlueprintNoteworthy stories that might have slipped under the radar: OpenClaw AI agents exploited via WhatsApp, ransomware hits naval defense firm TKMS, Lidl discloses data breach. The post In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint appeared f…SECURITYWEEK.COM
17 JulNightmare Eclipse drops another Windows zero-day.The Gentlemen topped the ransomware leaderboard in Q2 2026. Ransomware attack disrupts Fairlife dairy production.THECYBERWIRE.COM
17 JulRansomware attack forces Coca-Cola to suspend US production at dairy unitThe beverage company is still working to determine the full scope of the breach at its Fairlife business.CYBERSECURITYDIVE.COM
17 JulOnlyFans performers become unlikely allies of CISOs in securing websitesCISOs at government organizations and universities have an unexpected ally coming to their aid: OnlyFans models. For some time, hackers have exploited weaknesses in the websites of universities or government departments to host scams or malware, using content stolen from the Only…CSOONLINE.COM
17 JulHollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payloadA vulnerability dubbed HollowByte allows unauthenticated attackers to trigger a denial-of-service (DoS) condition on OpenSSL servers with a malicious payload of just 11 bytes. [...]BLEEPINGCOMPUTER.COM
17 JulFBI arrests man accused of using Steam games to drain victims’ crypto walletsLorenzo Franceschi-Bicchierai reports: U.S. prosecutors have accused a Florida man of uploading fake video games that contained malware to Steam, the popular PC games platform. Once victims downloaded and installed the games, the malware was designed to infect their computers, st…DATABREACHES.NET
17 JulUS Military Smartphones Targeted Through Roaming and Ad TechSenior research fellow Gary Miller spoke to Financial Times about attempts to exploit mobile network vulnerabilities to track US personnel during the Iran war. The post US Military Smartphones Targeted Through Roaming and Ad Tech appeared first on The Citizen Lab .CITIZENLAB.CA
17 JulMetasploit Wrap Up: An HTTP to SMB relay plus Payload ImprovementsMetasploit Wrap Up Housekeeping While the Metasploit Framework will be continuing its weekly release cadence, bringing you dear reader our latest content, the Weekly Wrap Up is being shifted to a bi-weekly cadence. The team is planning to use the additional time between posts to …RAPID7.COM
17 JulA nightmare on Windows street.Nightmare Eclipse drops another Windows zero-day. The Gentlemen take the ransomware crown. CISA orders emergency Fortinet patching. Canada’s surveillance bill faces U.S. scrutiny. Meta’s Oversight Board flags AI censorship bias. Commerce tops the cyber target list. An active espi…THECYBERWIRE.COM
17 JulInc Ransomware Exploits SonicWall SMA Zero-DaysWhen chained together, the two vulnerabilities allow threat actors to gain root-level capabilities on SonicWall's mobile access appliances.DARKREADING.COM
17 JulProxying to Compromise: SonicWall Secure Mobile Access 0-day ExploitationIn early July 2026, Volexity was engaged to perform an incident response investigation where it discovered a threat actor had successfully compromised SonicWall Secure Mobile Access (SMA) VPN appliances through […] The post Proxying to Compromise: SonicWall Secure Mobile Ac…VOLEXITY.COM
17 JulErnst & Young (EY) Investigates Data Breach Involving Third-Party Support TicketsErnst & Young (EY) disclosed a data breach after attackers compromised a third-party IT support system containing client documents and tax information. Ernst & Young (EY) is disclosed a data breach linked to a compromised third-party support ticket system used by its IT t…SECURITYAFFAIRS.COM
📋 SECURITY BULLETINS 1[−]
17 JulWindows Server 2022 reach end of mainstream support in 90 daysMicrosoft announced that Windows Server 2022 will reach the mainstream end date in October 2026, but will switch to extended support and continue receiving security updates for five more years. [...]BLEEPINGCOMPUTER.COM
📢 SECURITY ADVISORIES 9[−]
17 JulThe five step plan that cuts security budget wasteIn this Help Net Security video, Viktor Bulanek, CTO of Penetrify, explains where security budget waste comes from. Budgets get built around vendor categories, compliance checkboxes, and last year’s headlines. Attackers work along attack paths, and that mismatch is where th…HELPNETSECURITY.COM
17 JulSenior executives are killing your shadow AI strategyShadow IT has long been a major problem for CISOs, but the biggest problem may be coming from the executive suite’s hunger for unsanctioned AI. Nearly two-thirds of senior decision-makers admit to using unapproved AI tools , compared to just 31% of lower-level employees, accordin…CSOONLINE.COM
17 JulZelensky appoints Ukraine's acting security service chief as acting defense ministerYevhenii Khmara, a major general with deep experience in intelligence, counterterrorism and long-range strikes against Russia, is Ukraine's new acting defense minister.THERECORD.MEDIA
17 JulPodcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive(Video) Artificial intelligence is transforming cybersecurity, but are governance, compliance, and security practices evolving fast enough to keep up? The post Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive appeared first on SecurityWeek .SECURITYWEEK.COM
17 JulState officials, election experts pan Trump speech: ‘This is what desperation looks like’The president’s speech re-hashed debunked conspiracies around U.S. elections. Critics say the administration’s 18-month investigation into voter fraud has been a total failure. The post State officials, election experts pan Trump speech: ‘This is what desperation looks like’ appe…CYBERSCOOP.COM
🔥 INCIDENT REPORTING 18[−]
17 JulCoca-Cola Suspends US Fairlife Production Due to Ransomware AttackThe company says the incident has not affected product quality and safety, nor Fairlife’s Canada production. The post Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack appeared first on SecurityWeek .SECURITYWEEK.COM
17 JulThe Gentlemen Overtakes Qilin as Most Prolific Ransomware ThreatAnalysis of ransomware incidents by ReliaQuest indicates a shift in the ransomware landscapeINFOSECURITY-MAGAZINE.COM
17 JulCyberattack Disrupts Operations of Japanese Frozen Food Giant NichireiThe company disconnected its systems on July 13 and is starting to gradually restore operations. The post Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei appeared first on SecurityWeek .SECURITYWEEK.COM
17 JulNew GoSerpent Malware Targets Southeast Asian Governments and Diplomats for EspionageCybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has been put to use in cyber attacks targeting entities in Southeast Asia since late 2025 with a focus on long-term access and intelligence gathering. Russian cybersecurity company K…THEHACKERNEWS.COM
17 JulEY says client tax data exposed in third-party IT software breachErnst & Young (EY) is notifying affected individuals that personal and financial information was exposed after attackers breached a third-party IT service management platform used by the firm's tax practice. The professional services giant says the incident resulted in unaut…CYBERINSIDER.COM
17 JulArmenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong ManArmenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on a U.S. extradition request for a REvil ransomware suspect named Aleksandr Ermakov. His wife, Maria Yurova, told REN TV that border officers pulled him out of the departure hall at Y…THEHACKERNEWS.COM
17 JulShark vacuum flaw exposes cameras, home maps and Wi-Fi passwordsOne compromised Shark robot vacuum could unlock remote access to many others.MALWAREBYTES.COM
17 JulSpirals ransomware locks down victim systems in under 24 hoursA previously unknown ransomware strain called Spirals was used last month in an attack against an IT services company in South Asia, where attackers went from initial access to data theft and encrypting the network in less than 24 hours, according to Symantec’s Threat Hunte…HELPNETSECURITY.COM
17 JulDairy company Fairlife suspends production in US after cyber incidentFairlife’s U.S. operation includes plants in Michigan, New York and Arizona, and the company's retail sales passed $1 billion in 2022.THERECORD.MEDIA
17 JulWhen Patching Is Already Too LateThe discussion makes a bold claim: many organizations no longer have enough time to patch before attackers compromise vulnerable systems. Instead of treating prevention as the primary strategy, the emphasis shifts toward detecting intrusions quickly and responding before attacker…YOUTUBE.COM
17 JulGovernment Agencies Falling Victim to Ransomware Daily, Warns StudyGovernment organizations are targeted by attackers who know agencies cannot afford disruption to public servicesINFOSECURITY-MAGAZINE.COM
17 Jul23andMe Faces New Security Mandates in $18m Data Breach Settlement23andMe has agreed to an $18m settlement with 42 US attorneys general over its 2023 data breach, including enhanced data protection requirementsINFOSECURITY-MAGAZINE.COM
17 JulErnst & Young discloses data breach after support system hackErnst & Young is notifying customers of a data breach caused by the compromise of a third-party support ticket system used by its IT personnel. [...]BLEEPINGCOMPUTER.COM
17 JulAbbott discloses cyberattack on cancer diagnostics businessThe cyberattack follows Abbott’s recent $21 billion purchase of Exact Sciences. Abbott did not disclose what kind of information was accessed.CYBERSECURITYDIVE.COM
17 JulGoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate TheftCybersecurity researchers have attributed the April 2026 DigiCert security incident to a threat activity cluster dubbed CylindricalCanine. Expel, which shared technical details of the event, described the threat actor as a sub-group of GoldenEyeDog (aka APT-Q-27, Dragon Breath, a…THEHACKERNEWS.COM
17 JulA cyberattack hit Nichirei, one of Japan’s largest food companiesA cyberattack hit one of Japan’s largest food companies, Nichirei, disrupting logistics and shipments. The company is gradually restoring operations. Nichirei is one of Japan’s largest food companies, best known for its frozen food business. Founded in 1942 and headqu…SECURITYAFFAIRS.COM
17 JulAbbott Laboratories probes two cyber incidents amid extortion claimsAbbott Laboratories is investigating two separate cybersecurity incidents after confirming unauthorized access to internal legacy Exact Sciences systems in its Cancer Diagnostics business, while also investigating a separate claim that attackers breached its LabCentral portal and…BLEEPINGCOMPUTER.COM
17 JulAI Becomes The Supply ChainAI tools are increasingly being used to recommend code, libraries, and scripts. The clip explores the possibility that a compromised AI system could influence those recommendations. Software supply chains already depend on trust between developers, tools, and dependencies. Adding…YOUTUBE.COM
🕵️ THREAT INTELLIGENCE 19[−]
17 JulISC Stormcast For Friday, July 17th, 2026 https://isc.sans.edu/podcastdetail/10012, (Fri, Jul 17th)(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.ISC.SANS.EDU
17 JulNew infosec products of the week: July 17, 2026Here’s a look at the most interesting products from the past week, featuring releases from Cloudflare, Lineation.ai, Nudge Security, and Polygraf AI. Polygraf AI Meeting Guard delivers real-time deepfake detection for enterprise meetings Polygraf AI has announced Meeting Guard, a…HELPNETSECURITY.COM
17 JulA hard drive reliability check on 341,263 drives, from 4TB to past 20TBLarge cloud storage operators track their hard drives every day, recording which units keep running and which ones drop off the racks. Backblaze does this at scale, and its Q1 2026 report covers a fleet built for continuous use. The analysis covered 341,263 hard drives, after boo…HELPNETSECURITY.COM
17 JulPrompt injection is becoming the XSS of the web agent eraAutonomous web agents read whatever a page displays, and much of that content comes from strangers. Product reviews, seller listings, and advertisements sit beside trusted site menus on a single page. An agent that reads all of that text as instructions can be steered by any of i…HELPNETSECURITY.COM
17 JulThe script, not the voice, is what makes AI voice phishing workThe call comes in at 4:40 on a Friday. The voice belongs to a senior manager, or sounds close enough, and she needs a password reset before a flight. She is polite, she is in a hurry, and she has the last four of the badge number. Researchers at Harvard Kennedy School, Meta and e…HELPNETSECURITY.COM
17 JulRisk Ledger Raises $32 Million in Series B FundingThe British firm has built a collaborative platform to help organizations address supply chain security risks. The post Risk Ledger Raises $32 Million in Series B Funding appeared first on SecurityWeek .SECURITYWEEK.COM
17 JulScammers weaponize FaceTime in attempt to drain bank accountsApple is warning iPhone and iPad users that scammers are using FaceTime calls to trick them into handing over money and account details. The company says scammers use social engineering, posing as representatives of a trusted company or entity, and contacting people by phone or o…HELPNETSECURITY.COM
17 JulClaude can now sign into websites with 1Password without exposing your credentials1Password has introduced 1Password for Claude, a beta integration that lets Anthropic’s AI assistant complete browser tasks requiring authentication without accessing users’ passwords or other secrets. The integration is available to paid Claude subscribers (Pro, Max,…HELPNETSECURITY.COM
17 JulNew Russian Campaign Uses Fake Webex and Zoom Installers to Deploy Starland RATRussian-speaking UAT-11795 spreads trojanized Zoom, Webex, and MobaXterm installers to deliver Starland RAT and the WLDR memory-only implant. Cisco Talos researchers published a detailed technical report on July 16 disclosing UAT-11795, a financially motivated, Russian-speaking t…SECURITYAFFAIRS.COM
17 JulDetails of Alan Turing’s Voice Encryption SystemReally interesting piece of cryptographic history : In November 2023, a large cache of his wartime papers—nicknamed the “Bayley papers”—was auctioned in London for almost half a million U.S. dollars. The previously unknown cache contains many sheets in Tur…SCHNEIER.COM
17 JulBeacon Security Raises $13 Million for Security Data PlatformThe startup helps organizations detect, hunt, and protect their assets across environments at machine speed. The post Beacon Security Raises $13 Million for Security Data Platform appeared first on SecurityWeek .SECURITYWEEK.COM
17 JulIndustry Reactions to Pentagon Suspending CMMC Phase 2: Feedback FridayIndustry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI. The post Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday appeared first on SecurityWeek .SECURITYWEEK.COM
17 JulFake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag ImagesNorth Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious payloads as part of a campaign using fake job postings and coding challenges. "Any user who ran the project ended up with a fo…THEHACKERNEWS.COM
17 JulGoogle must open Android to rival AI agents, EU ordersThe European Union is stepping up its actions against US tech giants under the Digital Markets Act, which is intended to ensure fair competition between digital platforms. On Thursday, the European Commission issued two rulings to limit Google’s dominance . The Commission ordered…CSOONLINE.COM
17 JulLeading members of Scattered Spider sentenced in UK to 66 months in jailThalha Jubair and Owen Flowers led and directed many attacks attributed to the hacker subset of The Com. U.S. authorities previously accused Jubair of participating in at least 120 attacks. The post Leading members of Scattered Spider sentenced in UK to 66 months in jail appeared…CYBERSCOOP.COM
17 JulMozilla study ranks Euki as the most private period trackerA Mozilla privacy investigation into six popular period-tracking apps found that some services expose device identifiers, usage details, or sensitive logs to analytics and advertising systems. Euki earned the study’s only perfect score because it stores health information locally…CYBERINSIDER.COM
17 JulMicrosoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacksJoin Microsoft Security at Black Hat USA 2026 for supply chain research, hands-on security experiences, expert conversations, and our reception. The post Microsoft at Black Hat USA 2026: Defending trust in the age of AI and supply chain attacks appeared first on Microsoft Securit…MICROSOFT.COM
17 JulFriday Squid Blogging: Squid Washing Up on Cape Cod BeachLots of articles about this . As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog moderation policy.SCHNEIER.COM
17 JulM. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More - SWN #599M. Thénardier, LastPass, GitHub, EBS, Spirals, Pegasus, Shaft, Josh Marpet, and More on this episode of the Security Weekly News. Visit https://www.securityweekly.com/swn for all the latest episodes! Show Notes: https://securityweekly.com/swn-599YOUTUBE.COM
🌐 CYBER THREAT LANDSCAPE 4[−]
17 JulACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 FilesACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session tokens, PDFs, Microsoft 365 documents, and files from synced OneDrive and SharePoint folders. It gets in because someone pasted a command into a…THEHACKERNEWS.COM
17 JulHow to use GitHub safelyKnowing how to spot a malicious GitHub repository can help you avoid downloading malware disguised as legitimate software.MALWAREBYTES.COM
17 JulFBI arrests man accused of using Steam games to drain victims’ crypto walletsProsecutors accused 21-year-old student Zyaire Wilkins of publishing on Steam several fake video games that contained malware, infecting thousands of victims, and stealing crypto from some of them.TECHCRUNCH.COM
17 JulNew NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes TokensA Go botnet called NadMesh turned up in early July hunting exposed AI services, and the operator's own dashboard claims 3,811 unique AWS keys. A Shodan harvester keeps the scan queue stocked with ComfyUI, Ollama, n8n, Open WebUI, Langflow, and Gradio: the image generators, local …THEHACKERNEWS.COM
📡 INFOSEC NEWS 9[−]
17 JulUS charges two over laundering $43 million from investment fraudU.S. prosecutors on Thursday charged a New York man and woman for their roles in a large-scale crime ring that laundered money stolen in cyber investment fraud scams. [...]BLEEPINGCOMPUTER.COM
17 JulSan Francisco Demands Apple and Google Delete AI ‘Nudify’ Apps From App StoresThe City Attorney’s Office sent the tech giants cease-and-desist letters this week telling them to stop profiting from 13 “face-swap” apps that are overwhelmingly used to target women and girls.WIRED.COM
17 JulE.U. Orders Google to Open Android Mic, Camera and Screen to Rival AI AssistantsThe European Commission on Thursday ordered Google to give rival AI assistants the same reach into Android that Gemini already has: the camera, the microphone, whatever is on screen, a wake word that fires with the display off, and the ability to drive other apps in the backgroun…THEHACKERNEWS.COM
17 JulGoogle Bets 'Agentic Defense' Strategy Can Outpace AttackersGoogle Cloud incorporates key Wiz capabilities into an agentic defense platform to automate threat detection and remediation against AI attacks.DARKREADING.COM
17 JulInside the Search for "Clean" Residential Proxies for CardingResidential proxies are no longer the silver bullet they once were for carding. Flare explains why cybercriminals increasingly seek "clean" residential proxies and combine them with browser fingerprints, device profiles, and other identity signals to evade modern fraud detection.…BLEEPINGCOMPUTER.COM
17 JulAmazon fixing bug that billed some AWS customers billions of dollarsSome Amazon customers logged on Friday to a surprise bill estimate claiming that they owed the tech and cloud giant billions in fees.TECHCRUNCH.COM
17 JulThe Real AI Threat Is Blind TrustAI models left to both interpret and execute commands eliminate critical cybersecurity oversight.DARKREADING.COM
17 JulThe Zoom hack that says, ‘Don’t record me’If every meeting, watercooler conversation, and date gets transcribed and summarized, who's actually reading any of it?TECHCRUNCH.COM
17 JulGoogle’s Gemini lets strangers send messages from your locked Android phoneGemini, Google's AI assistant, is supposed to make life easier for Android smartphone owners. But right now it may also be making life easier for anyone anyone who happens to pick up your phone. Read more in my article on the Hot for Security blog.BITDEFENDER.COM