Blahalla

Dialogflow CX 'Rogue Agent' Flaw Enabled AI Chatbot Data Theft

www.darkreading.com · 14 days ago

Varonis reported the flaw to Google in late 2025 and it has been addressed, but it reminds defenders to take a fresh look at their AI Infrastructure security.

Meta Unveils an A.I. Image Generator

www.nytimes.com · 14 days ago

Muse Image, which can create realistic images for users on Instagram and WhatsApp, is the company’s latest attempt to catch up in the global artificial intelligence race.

Chinese hackers develop LONGLEASH malware to expand ORB network

www.bleepingcomputer.com · 14 days ago

Chinese hackers tracked as 'UAT-7810' are actively evolving their malware to expand their Operational Relay Box (ORB) network by compromising internet-facing networking devices, primarily unpatched Ruckus routers.

County Government Reportedly Paid $1 Million to Cyber Extortion Group

www.securityweek.com · 14 days ago

The alleged victim, believed to be a small Ohio county, reportedly paid the extortion group to prevent the public release of sensitive stolen data.

Hidden backdoor in Tenda router firmware grants admin access

www.bleepingcomputer.com · 14 days ago

A hidden authentication backdoor has been found in multiple Tenda router firmware versions, potentially allowing an attacker to gain administrative access to the device's web management panel.

Critical Gitea Flaw Under Active Exploitation, Researchers Warn

www.securityweek.com · 14 days ago

Attackers are exploiting the critical Gitea vulnerability CVE-2026-20896 to bypass authentication with a single HTTP header and access vulnerable repositories and secrets.

RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service

thehackernews.com · 14 days ago

A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even low-skill criminals take over a victim's phone, steal their banking logins, and capture the one-time codes that protect their accounts.

Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots

thehackernews.com · 14 days ago

A critical flaw in Google's Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise other Code Block-enabled agents in the same Google Cloud project. From there, they could read live conversations, steal the data users shared, and make the bots send attacker-written messages, including requests to re-enter a password.

'GitLost' Flaw Leaks Private Data from GitHub's Agentic Workflows

www.darkreading.com · 14 days ago

The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.

Spain arrests suspected member of pro-Russian hacktivist groups

www.bleepingcomputer.com · 14 days ago

The National Police in Spain have arrested a man who is suspected of being an active member of the CyberArmy of Russia Reborn (CARR) and Z-Pentest, both pro-Russian hacktivist groups.

GitLost: a public GitHub issue can steer an org's Agentic Workflow into leaking private repo contents, and a one-word prefix ("Additionally") bypassed the threat-detection guardrail

noma.security · 14 days ago

Noma Security published a technique they call GitLost against GitHub Agentic Workflows (the plain-English-Markdown agent feature GitHub put into public preview in February, runnable on Copilot, Claude, Gemini, or Codex). Worth reading because it is a clean demonstration of why "filter the injection" does not hold as a defense. The setup.

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

thehackernews.com · 14 days ago

A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June 2026 and into early July, per findings from ZeroBEC. "The campaign did not depend on a fake Microsoft password page.

A rule mapped to MITRE is not the same as real coverage

socauthority.com · 14 days ago

This gets attention alot so wanted to share something i have experinece working in SOCs, especially in larger/financial sectors. a lot of teams say they have coverage for a MITRE technique because there is a rule somewhere that maps to it. but to me, that is not really coverage.

Companies Brace for Fresh Political Uncertainty at U.S. Agencies

www.nytimes.com · 14 days ago

A Supreme Court ruling that presidents can fire independent regulators without cause has added volatility for industries that prefer stable enforcement.

Google Search Uploads Can Train AI Unless You Opt Out

www.techrepublic.com · 14 days ago

Google Search uploads may be used to train AI unless users opt out, raising privacy and data governance concerns for businesses.

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

thehackernews.com · 14 days ago

A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, researchers at Noma Security have shown. The attacker needs only to open a normal-looking issue on a public repository, with no stolen credentials and no access to the organization.

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

www.bleepingcomputer.com · 14 days ago

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't guarantee a secure pipeline, and how organizations can better govern their CI/CD workflows.

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

thehackernews.com · 14 days ago

U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows device ID, according to a newly unsealed federal complaint. Microsoft records tied that ID first to the account the attackers used to keep access during the May 2025 intrusion, then to online accounts prosecutors say belong to 19-year-old Peter Stokes.

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

thehackernews.com · 14 days ago

Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial intelligence (AI) platform, that could result in cross-tenant compromise. The one-click vulnerability has been codenamed WriteOut by the Sand Security Research team.

CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws

www.securityweek.com · 14 days ago

The audits are reportedly being spearheaded by CISA’s Attack Surface Evaluation team, a specialized unit tasked with conducting digital defense assessments and simulated hacking exercises.

SindriKit 1.3.0 Abuses Call Stack Spoofing to Bypass EDR Detection

gbhackers.com · 14 days ago

SindriKit 1.3.0 introduces a significant advancement in evading Endpoint Detection and Response (EDR) systems by exploiting dynamic call stack spoofing. This method defeats telemetry that inspects kernel-transition call chains, going beyond just user-mode hooks. Previously, SindriKit 1.2.

Two arrested over credit card phishing – as the Netherlands is named Europe’s worst for payment fraud

www.bitdefender.com · 14 days ago

Two young men have been arrested in the Netherlands on suspicion of running a phishing operation that harvested the credit card details of unsuspecting victims. Read more in my article on the Hot for Security blog.

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

www.securityweek.com · 15 days ago

Hackers are exploiting a recently patched critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.

Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks

www.securityweek.com · 15 days ago

Researchers say the Iran-linked threat actor used an adaptable modular malware framework and compromised IT service providers to reach high-value targets in Israel.

Webinar tomorrow: Why modern email attacks require a new approach to defense

www.bleepingcomputer.com · 15 days ago

Tomorrow's webinar explores how behavioral AI can help organizations detect sophisticated phishing, business email compromise, and account takeover attacks while reducing alert fatigue through automated investigation and response workflows.

New Januscape Linux flaw allows VM escape on Intel, AMD devices

www.bleepingcomputer.com · 15 days ago

A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute arbitrary code on the host.

CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker

www.securityweek.com · 15 days ago

Tarah Wheeler is CISO at TPO Group, a firm that provides cybersecurity consultancy for high-stakes organizations. But despite this elevated position, her journey was far from typical.

TeamPCP Supply Chain Attacks Feed VECT Ransomware With Stolen CI/CD Credentials

gbhackers.com · 15 days ago

TeamPCP’s wide-scale supply-chain compromises have materially fueled VECT ransomware operations by supplying a vast archive of stolen CI/CD credentials, reshaping how organizations should measure ransomware exposure.

What Changes When Your Software Supply Chain Includes AI Writing Your Code?

thehackernews.com · 15 days ago

Software supply chain security was hard enough. Then AI joined the build pipeline.

Attackers Exfiltrate AnyDesk Configuration Data via Blat SMTP in Aerospace Phishing Campaign

gbhackers.com · 15 days ago

A targeted spear-phishing campaign that configures AnyDesk for silent, persistent remote access and exfiltrates its configuration using the Blat SMTP utility. The campaign uses an aerospace-themed invoice lure that impersonates the Russian research institute VNIIR via a freshly registered spoof domain (vniir-avia.

Google Is Suing Chinese Scammers Who Are Using Gemini

www.schneier.com · 15 days ago

Not sure this will have any effect, but I support the effort: According to Google’s legal filing, Outsider Enterprise operates through Telegram. The group offers phishing-as-a-service to individuals who may not be technically savvy enough to set up fraudulent websites and text campaigns on their own.

Thousands of MCP Servers Found Vulnerable to File Access and Injection Attacks

gbhackers.com · 15 days ago

Thousands of Model Context Protocol (MCP) servers, widely used to connect large language models (LLMs) to external systems, have been found vulnerable to critical security flaws, including arbitrary file access, command injection, server-side request forgery (SSRF), and SQL injection, raising significant concerns about AI supply chain security.

Windows 11 26H2 Enables Backup Policy to Restore User Apps and Settings

gbhackers.com · 15 days ago

Microsoft has confirmed a significant policy change in the upcoming Windows 11 version 26H2. This update introduces a new default behavior for Windows settings backup, which could affect enterprise security baselines and device resilience strategies.

Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems

www.securityweek.com · 15 days ago

The 16-year-old Januscape flaw affects Linux's KVM hypervisor, allowing attackers to escape virtual machines and potentially execute code on the underlying host.

US Cyber Agency Uses Anthropic Mythos to Audit Government Code for Bugs

gbhackers.com · 15 days ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has started using Anthropic’s advanced AI model, Mythos, to audit government software for vulnerabilities. This marks a significant shift toward AI-assisted cyber defense operations.

Why The Gentlemen ransomware is a test of identity and recovery controls

www.csoonline.com · 15 days ago

The Gentlemen ransomware underscores a challenge many CISOs face: stopping attackers after they gain an initial foothold. Researchers say the malware can spread across enterprise networks using legitimate Windows management tools while simultaneously attempting to weaken security and recovery systems.

Microsoft to enable Windows settings backup by default for orgs

www.bleepingcomputer.com · 15 days ago

Microsoft says the Windows settings backup and restore tool will be enabled by default on Microsoft Entra-joined or Microsoft Entra hybrid-joined enterprise systems after upgrading to Windows 11 26H2.

Kazuar Backdoor Uses DLL Side-Loading and PowerShell Loaders for Stealthy Execution

gbhackers.com · 15 days ago

Turla’s Kazuar backdoor has re-emerged as a technically sophisticated persistence and reconnaissance tool that combines DLL side-loading with PowerShell-based loaders to achieve stealthy execution and resilient command-and-control. This side-loading technique minimizes disk activity tied to novel executables and leverages trusted host processes to bypass naive allowlists and detection heuristics.

Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security

www.securityweek.com · 15 days ago

The investment will accelerate Keyfactor's machine identity, PKI, and cryptographic security platform as enterprises prepare for AI-driven and post-quantum threats.

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

thehackernews.com · 15 days ago

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in the open-source email solution, such as CVE-2024-42009 (CVSS score: 9.

The modern CISO is becoming the next CFO

www.csoonline.com · 15 days ago

At some point, every security leader gets asked a version of the same question: Are we good? It tends to arrive when something is at stake and the person asking needs to know they can rely on the answer. I learned what that question really means at a firm I was with earlier in my career.

Microsoft Introduces Execution Containers to Secure AI Agents on Windows

gbhackers.com · 15 days ago

Microsoft has introduced a new security architecture to safeguard autonomous AI agents on Windows, unveiling the Microsoft Execution Containers (MXC) SDK at Build 2026.

16-Year-Old Januscape KVM Escape Vulnerability Lets Attackers Compromise Linux Hosts

gbhackers.com · 15 days ago

A newly disclosed vulnerability in the Linux kernel, tracked as CVE-2026-53359 and named “Januscape,” reveals a 16-year-old flaw in KVM/x86 virtualization. This vulnerability allows guest virtual machines (VMs) to escape to the host under specific conditions, raising significant concerns for multi-tenant cloud environments.

BeyondTrust warns of critical flaws in remote access software

www.bleepingcomputer.com · 15 days ago

BeyondTrust warned customers to patch two critical security flaws in its Remote Support (RS) and Privileged Remote Access (PRA) software that could allow attackers to bypass authentication.

PHP PDO Emulated Prepares Expose pdo_pgsql to NULL Pointer Dereference Crash

gbhackers.com · 15 days ago

A recent security audit of PHP’s PDO ecosystem uncovered a denial-of-service vector in the pdopgsql driver that can crash PHP processes when emulated prepared statements are enabled. PDO’s parser assumes a valid zendstring and dereferences it, triggering a NULL pointer dereference (SIGSEGV). The issue is tracked as CVE-2025-14180 and rated Moderate (6.3/10).

Microsoft testing new Cloud Rebuild Windows 11 recovery feature

www.bleepingcomputer.com · 15 days ago

Microsoft has begun testing the Cloud Rebuild recovery feature in the latest Windows 11 Insider Preview builds released for users in the Experimental channel.

Fake Interview Phishing Campaign Impersonates Top Brands to Steal Gmail Credentials

gbhackers.com · 15 days ago

A sophisticated interview-themed phishing campaign that impersonates major global brands to harvest Gmail credentials. Attackers pose as recruiters offering marketing roles at well-known companies, leveraging personalized targeting and a layered redirection chain that uses legitimate platforms to mask malicious intent.

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

thehackernews.com · 15 days ago

Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices' web management interfaces, the CERT Coordination Center (CERT/CC) warned Monday.

Windows Device ID Helped Authorities Track Scattered Spider Hacking Group Member

gbhackers.com · 15 days ago

Authorities used a persistent Windows Global Device ID, along with VPN telemetry and cloud service records, to connect the infrastructure used in a major extortion attack to a 19-year-old member of the Scattered Spider group, Peter Stokes.

Hackers Abuse Cross-Tenant Teams Chat to Deliver EtherRAT Through Malicious MSI Loader

gbhackers.com · 15 days ago

A coordinated social-engineering campaign observed in late June 2026 combined email phishing with an abused Microsoft Teams cross‑tenant chat to deliver a sophisticated EtherRAT implant via a malicious MSI loader. Initial access began with a targeted email masquerading as internal communication: an “Employee Survey” HTML message containing a PDF lure.