Blahalla

Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector

unit42.paloaltonetworks.com · 21 days ago

Attackers can exploit LLM domain hallucinations through phantom squatting to target supply chains. Read the analysis to learn more.

China-Linked Group Targets Southeast Asia Critical Systems

www.darkreading.com · 21 days ago

The group compromised at least 10 regional organizations, including two state-owned entities, and deployed a new backdoor.

Anthropic to restore Claude Fable access on Wednesday

www.bleepingcomputer.com · 21 days ago

Anthropic has confirmed that the Department of Commerce has lifted export controls on Claude's two most powerful models, Fable 5 and Mythos 5.

SVD-2026-0701: Third-Party Package Updates in Python for Scientific Computing - July 2026

advisory.splunk.com · 21 days ago

Splunk remedied common vulnerabilities and exposures (CVEs) in Third Party Packages in Python for Scientific Computing version 4.3.2 and higher.

I open-sourced a personal project called Bomly and would appreciate feedback from netsec/AppSec folks

bomly.dev · 21 days ago

Bomly is a CLI + CI action for dependency intelligence workflows. It scans projects, SBOMs, containers, and Git refs; builds a dependency graph; generates SPDX/CycloneDX/SARIF; explains why packages are present; diffs dependency changes; and can enrich results with vulnerability/license metadata when requested.

Anthropic rolls out Sonnet 5 with near-Opus 4.8 performance at a lower price

www.bleepingcomputer.com · 21 days ago

Anthropic is now rolling out Sonnet 5, and it's almost as good as the Opus range, but it is designed to be cheaper than the company's flagship model.

New BioShocking attack manipulates AI browser into data theft

www.bleepingcomputer.com · 21 days ago

A new prompt injection attack dubbed "BioShocking" could trick AI-powered browsers into treating real-world risky actions as part of a fictional scenario, causing them to ignore any safety guardrails.

Fake Bug Report Hijacks AI Coding Agents at Scale

www.darkreading.com · 21 days ago

"Agentjacking" is the latest demonstration of how easily attackers can exploit an AI agent's inability to differentiate between content and instructions.

Microsoft accelerates quantum-safe roadmap as risks grow

www.bleepingcomputer.com · 22 days ago

Microsoft announced today that it is accelerating its quantum-safe security roadmap, saying advances in quantum computing are bringing the need to replace today's encryption standards sooner than previously expected.

Scammers race to cash in on Venezuelan earthquake disaster

www.bitdefender.com · 22 days ago

Scammers wasted no time exploiting Venezuela's devastating earthquake, with researchers uncovering 212 newly-registered relief-themed domains in just five days. Read more in my article on the Hot for Security blog.

Malicious PyPI packages give hackers control of Telegram bot servers

www.bleepingcomputer.com · 22 days ago

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks that allow attackers to read arbitrary files on compromised servers.

Attackers Hijack Exposed AI Endpoints to Power Offensive Ops

www.darkreading.com · 22 days ago

Attackers don't need any special authentication to reach a target endpoint, they just need to know where it is.

Neon Buys ‘Artificial,’ a Film About OpenAI, After Amazon Dropped It

www.nytimes.com · 22 days ago

Neon purchased “Artificial,” which focuses on OpenAI’s chief, Sam Altman, after Amazon walked away from it following an investment in the start-up.

Why Identity Security Is Your Cyber Career Entry Point

www.darkreading.com · 22 days ago

As AI reshapes cybersecurity workflows, John Paul Cunningham, CISO at SIlverfort, says the technology is creating opportunities rather than eliminating jobs, and there are more ways than ever to break into the essential field.

Accelerating the quantum-safe timeline

www.microsoft.com · 22 days ago

We’re accelerating quantum-safe readiness, and sharing what organizations can do now to transition earlier and with confidence.

Phishers Gain Persistence at EU, Asia Hospitality Orgs

www.darkreading.com · 22 days ago

Separate but similar campaigns described by Microsoft and Trend Micro use malicious zip files to spread malware via social engineering and obsfucation, including blockchain abuse.

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

thehackernews.com · 22 days ago

New Microsoft research shows how attackers can hijack AI agents that act on a user's behalf, using nothing more than a poisoned tool description to make the agent quietly hand over company data to an outsider. The trick is that the agent never breaks a rule. Every step looks routine, so in a default setup no alarm may fire.

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

thehackernews.com · 22 days ago

A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then stitching them into a network built to knock websites and online services offline. Researchers at QiAnXin's XLab have tracked it since February 2026, and say the real story is not how big it is today, but how fast it is changing.

NDSS Symposium Heads to Seoul in 2027 to Expand Global Cybersecurity Collaboration

gbhackers.com · 22 days ago

DC, United States, June 30th, 2026, CyberNewswire The Internet Society today announced that 2027 Network and Distributed System Security (NDSS) Symposium will take place in Seoul, Republic of Korea, from 22, 26 March 2027.

Reflectiz to Host Webinar, Joined by Taboola, on Securing Third-Party Marketing in the AI Era

gbhackers.com · 22 days ago

Boston, Massachusetts, June 30th, 2026, CyberNewswire Reflectiz, the web exposure management platform, today announced a live webinar with Taboola, “Securing Third-Party Marketing in the AI Era,” taking place July 8 at 9 AM EDT / 3 PM CEST.

Bending Spoons, Owner of AOL and Other Old Internet Brands, Is Going Public

www.nytimes.com · 22 days ago

Bending Spoons, an Italian company that bought aging internet companies like AOL, Evernote and Vimeo, is going public this week at a potential value of $19 billion.

What’s new in Microsoft Security: June 2026

www.microsoft.com · 22 days ago

This month’s updates help security and IT teams strengthen identity and multicloud foundations, protect data wherever it lives, and secure the developer workflows powering AI innovation.

Securing AI agents: When AI tools move from reading to acting

www.microsoft.com · 22 days ago

MCP tool poisoning turns trusted AI agents into a control plane for data loss. Learn how threat actors manipulate tool descriptions to trigger unauthorized actions, and how to detect, contain, and prevent it.

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

thehackernews.com · 22 days ago

Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has been found to weaponize CVE-2026-33017 (CVSS score: 9.

Fake Perplexity extension on Chrome Web Store tracked searches

www.bleepingcomputer.com · 22 days ago

A malicious extension in the Chrome Web Store is masquerading as the Perplexity AI answer engine, intercepting search traffic and collecting browsing information.

Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses

thehackernews.com · 22 days ago

Cybersecurity researchers have flagged an active browser extension campaign that is designed to steal cryptocurrency by stealthily replacing wallet addresses when unsuspecting users initiate a transaction. The cryptocurrency clipper activity has been codenamed Silent Swap by McAfee Labs. "The campaign is delivered through unsigned installers, observed in both.

Meta Adds WhatsApp Usernames: Here’s What You Need to Know

www.techrepublic.com · 22 days ago

WhatsApp is rolling out usernames so people can chat without sharing phone numbers. Here’s how reservations, username keys, and rules work.

BMW Will Build a New Electric S.U.V. in South Carolina

www.nytimes.com · 22 days ago

The German company is doubling down on electric vehicles even as other automakers pull back after acknowledging billions of dollars in losses.

GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks

thehackernews.com · 22 days ago

The safety check that is supposed to stop an AI coding agent from running a dangerous command can be walked straight past using a shell trick that has been public for decades. New research from Adversa AI, which is named the bypass GuardFall, found it works against ten of the eleven popular open-source coding and computer-use agents the firm tested.

SimpleHelp Flaw Exploited to Deploy Malware Targeting Windows, macOS, and Linux

www.techrepublic.com · 22 days ago

A SimpleHelp authentication flaw is being exploited to deploy Djinn Stealer, a cross-platform malware targeting cloud, developer, and AI credentials.

AppViewX Launches Global Partner Program Amid Rising Demand for Machine and Agent Identity Security

gbhackers.com · 22 days ago

New York, United States, June 30th, 2026, CyberNewswire Building on the momentum of its Agent Identity Security launch, AppViewX invests in partner success through enhanced enablement and co-selling support AppViewX, the only machine and agent identity security company built for the AI and quantum era, today announced the launch of its first global Partner Program.

iPhone Security Fixes May Arrive Sooner as AI Speeds Up Threats

www.techrepublic.com · 22 days ago

Apple is releasing some iPhone security fixes earlier as AI raises concerns about faster cyberattacks and shorter patch windows.

Lessons from the Underground: How to Combat Business Email Compromise

www.bleepingcomputer.com · 22 days ago

Business Email Compromise is more than an email scam. It's a coordinated operation involving compromised accounts, financial research, and cash-out networks. Flare explores how underground forums reveal how BEC attacks are planned and executed.

BlueHammer Vulnerability Exploited in Ransomware Attacks

www.securityweek.com · 22 days ago

The Microsoft Defender vulnerability CVE-2026-33825 was exploited in the wild as a zero-day before patches were released.

282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study

thehackernews.com · 22 days ago

Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic. In many cases, the path in was visible just by watching what the app sent: a plaintext API key, a reusable token, or a backend server that accepted requests with no key at all.

iPhone 18 Leak: Apple’s Next Pro Design May Have Appeared Online

www.techrepublic.com · 22 days ago

Leaked Tata files reportedly show possible iPhone 18 Pro design details, factory images, and supplier records ahead of Apple’s expected September launch.

Critical Progress Kemp LoadMaster Vulnerability Enables Pre-Auth Remote Code Execution

gbhackers.com · 22 days ago

Progress’s Kemp LoadMaster, a widely deployed edge load balancer and ADC, is at the center of a critical pre-authentication Remote Code Execution (RCE) vulnerability tracked as CVE-2026-8037. The flaw allows unauthenticated attackers with access to the device API to run arbitrary shell commands by exploiting an uninitialized-memory/string-termination bug in LoadMaster’s API handling.

AI-Generated Workflows Are a Silent Security Disaster

www.darkreading.com · 22 days ago

Teams are dealing with a truly dangerous problem, automation that works, but that no one understands.

Decades-Old Bash Tricks Expose AI Coding Agents to Supply Chain Attacks

www.securityweek.com · 22 days ago

Decades-old Bash shell tricks can bypass safeguards in most open source AI coding agents, potentially turning malicious repositories into supply chain attack vectors.

Aflac Japan Data Breach Impacts 4.38 Million

www.securityweek.com · 22 days ago

Hackers accessed the insurance giant’s policyholder portal multiple times between June 15 and June 25.

BumbleBee and AdaptixC2 Deliver Akira Ransomware Through Bing SEO Poisoning

gbhackers.com · 22 days ago

BumbleBee and AdaptixC2 are being used in a highly efficient intrusion chain that starts with Bing SEO poisoning and ends with Akira ransomware deployment, showing how trusted search traffic is now being turned into an enterprise compromise vector.

The Realities of AI Video Surveillance

www.schneier.com · 22 days ago

The Financial Times has a good article on how AI is changing the capabilities of video surveillance, with information from both Israel/Iran and Russia. I wrote about this sort of thing a few years ago, how AI enables mass spying in the way that computers and networks enabled mass surveillance.

Hacker Conversations: Chris Thompson, Former Head of IBM X-Force Red, Co-Founder of RemoteThreat

www.securityweek.com · 22 days ago

Chris Thompson's journey took him from hacking game controls as a teenager to founding IBM’s X-Force Red team.

Multiple AirDrop and Quick Share Vulnerabilities Allow Attackers to Crash Devices

gbhackers.com · 22 days ago

A new technical analysis has exposed six proximity-transfer flaws across Apple AirDrop, Samsung Quick Share on Android, and Google Quick Share for Windows, showing that device-sharing stacks still contain fragile pre-authentication attack surfaces that can be abused from wireless range.

Supreme Court Rules Constitutional Privacy Protections Apply to Cellphone Users’ Location History

www.securityweek.com · 22 days ago

The ruling was made in the case of a bank robber whose identity was discovered through a geofence warrant.

Malicious Chromium extension spoofs Perplexity AI to hijack browser searches

www.csoonline.com · 22 days ago

Google has removed a malicious browser extension masquerading as Perplexity AI after Microsoft researchers found it was intercepting users’ search traffic and routing queries through attacker-controlled servers before forwarding them to legitimate search engines. Microsoft Threat Intelligence said the extension masqueraded as the AI-powered answer engine to trick users into installing it.

PoC Released for NTLM reflection bypass Vulnerability that Emanbles SYSTEM Access on Windows Server

gbhackers.com · 22 days ago

A proof-of-concept has been published that bypasses Microsoft’s mitigation for the NTLM reflection vulnerability tracked as CVE-2025-33073 and allows escalation to NT AUTHORITY\SYSTEM on Windows Server.

What the Numbers Say About FIFA 2026 Cyber Risk

thehackernews.com · 22 days ago

The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it had already been built, staged, and partially deployed. Threat actor activity was pre-planned, months out, across three sectors and at least ten languages.

Exploitation of Recent Oracle E-Business Suite Vulnerability Begins

www.securityweek.com · 22 days ago

The critical-severity defect allows unauthenticated attackers to take over the E-Business Suite’s Payments product.

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

thehackernews.com · 22 days ago

An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously unreported malware families, TaskWeaver and Djinn Stealer. The intrusion involves the exploitation of CVE-2026-48558 (CVSS score: 10.