Blahalla

South Korea discloses data breach impacting diplomats worldwide

www.bleepingcomputer.com · 3 months ago

South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months and stole personal information belonging to current and former employees of the Ministry of Foreign Affairs (MFA), including overseas diplomats.

Fake Bahrain Alert App Deploys Android Surveillance Malware

www.darkreading.com · 3 months ago

A malicious application delivers four-stage Android spyware via phony Google Play sites, exploiting civilian fear during Iranian missile strikes.

CVE-2026-50458: Finding a UAF in the Windows Brokering File System

rotcee.github.io · 3 months ago

Deep dive into a UAF in the bfs.sys Windows kernel minifilter driver patched in this month's Patch Tuesday.

Third-Party SDKs Raise Privacy Questions for Apps Marketed to U.S. Military

www.techrepublic.com · 3 months ago

Researchers found Chinese and Russian SDKs in Android apps marketed to U.S. military users, highlighting software supply chain and enterprise privacy risks.

GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier

thehackernews.com · 3 months ago

Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings will drop from $20,000-$30,000+ to a fixed $10,000, while its permanent invite-only VIP tier will pay $30,000 or more. Reports filed before that date, including those already in GitHub's growing triage queue, will retain the previous payout terms.

Lawsuit Against Meta Over Social Media Addiction Is Dropped

www.nytimes.com · 3 months ago

For Meta, the move was a reprieve after it and YouTube were found guilty in another case in March of negligence and personal injury for their platforms’ addictive features.

Oracle’s July update fixes ten 10.0 vulnerabilities in Fusion Middleware

www.csoonline.com · 3 months ago

Oracle’s July 2026 Critical Patch Update, its largest ever, contains 1,449 new security patches spanning 32 product families, from Oracle Database and E-Business Suite to PeopleSoft, GoldenGate, Java SE, and Fusion Middleware.

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs

thehackernews.com · 3 months ago

Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8), impacts default installations of Ubuntu Desktop 24.04, 25.10, and 26.04.

Malicious NuGet Typosquat Targets Digitain Betting Platform and Rigs Game Results

gbhackers.com · 3 months ago

JFrog Security Research has disclosed a precision supply-chain attack in which a typosquatted NuGet package, Newtonsoftt.Json.Net, impersonated the ubiquitous Newtonsoft.Json library while secretly rigging game outcomes at online betting operator Digitain.

Swiss rail giant Stadler rejects $12.3M ransom demand after cyberattack

www.bleepingcomputer.com · 3 months ago

Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data exchange platform shared with one of its suppliers.

Cisco’s new AI model tells code reviewers where to look for vulnerabilities

www.csoonline.com · 3 months ago

Cisco has revealed a family of open-weight AI models called Antares that, it said, can help security teams isolate potentially vulnerable parts of a software repository before deeper investigation begins.

OpenAI’s new model went rogue and hacked another company

www.washingtonpost.com · 3 months ago

The company says its powerful new system broke out of containment. Here’s why it matters.

Real world incident response: Microsoft and AXA XL strengthen cyber resilience

www.microsoft.com · 3 months ago

Our collaboration with AXA XL brings Microsoft Incident Response services directly to cyber insurance policyholders, helping organizations coordinate technical, business, and insurance decisions.

Next chapter: Restructuring GitHub’s bug bounty program

github.blog · 3 months ago

GitHub is making some significant changes to its bug bounty program, shifting its focus to give researchers a better experience working with the GitHub team.

When AI Attacks: OpenAI Models Autonomously Hack Hugging Face

www.darkreading.com · 3 months ago

Advanced LLMs escaped their sandboxes while attempting to achieve a non-malicious benchmark test objective.

New Data Shows Suno Breach Affected 55M Accounts

www.techrepublic.com · 3 months ago

New data shows 55.3 million Suno accounts were affected in a breach exposing contact details, purchases, and partial payment card information.

How enterprise GenAI can amplify ransomware risk — and how to contain it

www.bleepingcomputer.com · 3 months ago

Enterprise AI can accelerate ransomware attacks when AI assistants and agents inherit excessive permissions or compromised identities. Acronis explains how identity controls, governance, and least-privilege access help reduce AI-enabled ransomware risk while supporting secure AI adoption.

Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts

www.securityweek.com · 3 months ago

Hackers leaked names, email addresses, phone numbers, passwords, and financial information stolen from the two platforms.

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

thehackernews.com · 3 months ago

Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user's WhatsApp data. The shortcoming has been codenamed HermeticReader by Guardio Labs. It's officially tracked as CVE-2026-48294 (CVSS score: 7.

Palo Alto Networks to Acquire Observability Platform Provider Embrace

www.securityweek.com · 3 months ago

Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.

I was reporter #11 for a WPForms PayPal webhook vulnerability (CVE-2026-4986)

blog.himanshuanand.com · 3 months ago

I found and reported an authentication failure in the WPForms PayPal Commerce webhook, the webhook route being public was not the vulnerability as webhooks have to be publicly reachable so that PayPal can deliver events. The problem was what happened after the request arrived. In affected versions, the handler could process a supported event before establishing that PayPal was actually the sender.

AppViewX Arms Enterprise CLM Teams for Post-Quantum Migration and AI Adoption in Latest Product Release

gbhackers.com · 3 months ago

New York, United States, July 22nd, 2026, CyberNewswire The platform’s new release speeds the adoption of hybrid PQC certificates and AI-driven certificate lifecycle management AppViewX, the leading machine and agent identity security company built for the AI and quantum enterprise, today announced support for hybrid composite post-quantum cryptography (PQC) certificates and the AppViewX Model Con

Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft

www.securityweek.com · 3 months ago

An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages and contacts.

New InfraTrust report reveals infrastructure flaws admins should patch first

www.bleepingcomputer.com · 3 months ago

Eclypsium has launched InfraTrust, a new infrastructure cybersecurity knowledge base and monthly InfraTrust Pulse report designed to help organizations prioritize vulnerabilities affecting infrastructure, firmware, networking, and edge devices.

When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover

www.securityweek.com · 3 months ago

Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.

France Bans Social Media for Under-15s, Requires Age Checks

www.techrepublic.com · 3 months ago

France will ban social media for children under 15, requiring nationwide age checks and raising privacy and platform compliance concerns.

OpenAI model escape puts enterprise AI defenses on notice

www.csoonline.com · 3 months ago

Some of OpenAI’s most powerful AI models teamed up to escape their sandbox and attack systems at Hugging Face in a cybersecurity evaluation gone wrong, the company has admitted. The models under test were modified to allow them to perform potentially harmful actions that production versions would refuse.

Adobe Chrome extension flaw let sites access private WhatsApp chats

www.bleepingcomputer.com · 3 months ago

The Adobe Acrobat extension for Chrome could be used to access conversations and data rendered in WhatsApp Web without any form of authentication.

Vibe-Coded Apps Riddled With Exploitable Security Flaws

www.securityweek.com · 3 months ago

Analysis found 434 exploitable flaws in AI-generated apps, with denial-of-service, authorization and secrets exposure risks among the most common issues.

StrongestLayer Raises $4.1 Million in Seed Funding Extension

www.securityweek.com · 3 months ago

The startup will use the fresh investment to accelerate its go-to-market strategy and to expand its platform.

Critical Meta IDOR Flaw Let Attackers Access Customer Support Cases

gbhackers.com · 3 months ago

Meta has addressed a critical vulnerability involving broken access control that exposed sensitive customer support data across multiple services. This issue highlighted systemic weaknesses in authorization within their shared backend infrastructure.

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

thehackernews.com · 3 months ago

A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill's "getlogfile" endpoint ("/api/w/{workspace}/jobsu/getlogfile/{filename}").

Apple Fixes Hide My Email Vulnerability That Exposed Users’ Real Email Addresses

gbhackers.com · 3 months ago

Apple has addressed a year-old vulnerability in its “Hide My Email” privacy feature, which could expose users’ real email addresses. This incident has already led to a class action lawsuit and increased scrutiny of Apple’s privacy claims.

The Fastest Path to AI Adoption Runs Through Security

thehackernews.com · 3 months ago

Security leaders who build fast, visible paths to AI adoption are becoming the most valued partners in their organizations. AI governance done right gives security teams the visibility they need, employees the tools they want, and CISOs the strategic influence they have earned.

CISA orders urgent action on actively exploited Langflow RCE flaw

www.bleepingcomputer.com · 3 months ago

The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents.

CISA Warns WordPress Core SQL Injection Vulnerability Is Actively Exploited in Attacks

gbhackers.com · 3 months ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has classified a critical SQL injection vulnerability in WordPress Core, tracked as CVE-2026-60137, as one of its Known Exploited Vulnerabilities (KEV) due to its active exploitation in real-world attacks.

EU Financial Institutions Leak Data Through Cookie Trackers

www.darkreading.com · 3 months ago

European banks inadvertently transmitted customer data to ad platforms via tracking pixels, raising serious compliance, security, and privacy concerns.

Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks

www.securityweek.com · 3 months ago

CVE-2026-50522 is being exploited by threat actors to steal machine keys and retain long-term access.

Why Modern SOCs Need Multi-Layered Detections

thehackernews.com · 3 months ago

The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today, AI-equipped attackers are simply outpacing defenses. Most intrusions now bypass endpoint and malware-based detection entirely.

Stop renting storage space — this lifetime 2TB plan is yours for $59

www.bleepingcomputer.com · 3 months ago

Cloud storage costs tend to creep up over time, since most services charge monthly or annually for as long as you use them. FileJump's Lifetime Plan skips that model entirely, offering 2TB of cloud storage for a single payment of $59 (MSRP $467).

First-Person Identity Theft Story

www.schneier.com · 3 months ago

Harrowing story of an identity theft victim. Yes, the person made a mistake, they gave the scammer a two-factor authentication code that allowed the scammer to take over their email address. But the real story here is how, for many of us, the security of most of our accounts hangs on the security of our email accounts.

Microsoft to stop Exchange 2016 / 2019 security updates in October

www.bleepingcomputer.com · 3 months ago

Microsoft has reminded customers that it will stop shipping security updates for Exchange 2016 and 2019 through the Extended Security Update (ESU) program in October.

Trump’s AI Safety Chief Is Out — After Just 90 Days on the Job

www.techrepublic.com · 3 months ago

Trump administration AI testing chief Chris Fall resigned after just 90 days, leaving CAISI under interim leadership during a critical period for AI safety standards.

Zimbra 10.1.20 Fixes Critical SNMP Command Injection and Multiple XSS Flaws

gbhackers.com · 3 months ago

Zimbra has released version 10.1.20 of its Collaboration Suite (ZCS) to address multiple high-severity security vulnerabilities. This release includes a critical command injection flaw in the SNMP monitoring component and several cross-site scripting (XSS) issues affecting the Classic Web Client.

FBI Warns Scammers Use AI Deepfakes and Fake IC3 Websites to Target Fraud Victims

gbhackers.com · 3 months ago

The Federal Bureau of Investigation (FBI) has issued a new Public Service Announcement (Alert Number I-072026-PSA) regarding an evolving fraud campaign. Cybercriminals are increasingly using AI-generated deepfakes and spoofed Internet Crime Complaint Center (IC3) websites to target and re-victimize individuals who have already fallen prey to scams.

Critical ASUS Router Flaw Lets Remote MITM Attackers Execute Arbitrary Commands

gbhackers.com · 3 months ago

ASUS has announced a significant security vulnerability in its router firmware that could enable remote attackers to execute arbitrary commands through a man-in-the-middle (MITM) attack. This raises substantial concerns for both enterprise and home network security. The flaw, identified as CVE-2026-13385, impacts multiple branches of ASUS router firmware, including the widely used versions 3.0.0.

Found a decade of financial sector procurement data sitting on a former employee's home NAS

cybelangel.com · 3 months ago

One of our analysts was going through public repos last week and stumbled on something a bit weird: two repositories, published by the same actor on the same day, that on their own looked unremarkable. Put together, they were a complete fraud kit targeting a telecoms loyalty program. The frontend was harvesting OTPs and managing multiple compromised sessions simultaneously through localStorage.

Endpoint Security Firm Glow Launches With $180M in Funding at $1.2B Valuation

www.securityweek.com · 3 months ago

Using AI, the startup provides adaptive prevention through environment mapping, risk analysis, and automated policy enforcement.

Hackers Clone Microsoft Login Portals to Capture Credentials and Session Tokens in Real Time

gbhackers.com · 3 months ago

An active adversary-in-the-middle (AiTM) phishing campaign that clones Microsoft authentication pages to intercept credentials, Multi-Factor Authentication (MFA) codes, and session tokens in real time. Rather than relying on simple password harvesting, this technique hijacks authenticated user sessions directly.

North Korean Hackers Use Fake Job Interviews to Deploy PylangGhost and GolangGhost RATs

gbhackers.com · 3 months ago

North Korea’s Famous Chollima threat group, also tracked as Wagemole, is actively running a sophisticated cyberespionage campaign dubbed ClickFake Interview. The operation targets cryptocurrency and Web3 professionals, tricking candidates into executing terminal commands that infect their devices with platform-specific Remote Access Trojans (RATs): PylangGhost on Windows and GolangGhost on macOS.