Blahalla

Anthropic Launches Claude Tag AI Agent for Slack to Automate Enterprise Team Workflows

gbhackers.com · 29 days ago

Anthropic has launched “Claude Tag,” a new AI agent capability designed to integrate seamlessly into Slack and automate workflows for enterprise teams. This announcement, made on June 23, 2026, signifies a growing synergy between collaborative platforms and autonomous AI systems.

CISA Adds Ubiquiti UniFi OS Flaws to KEV Catalog

gbhackers.com · 29 days ago

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three critical vulnerabilities affecting Ubiquiti UniFi OS to its Known Exploited Vulnerabilities (KEV) catalog. This highlights the increasing risk to both enterprise and small-office network environments that rely on this popular network management platform.

Anthropic’s Mythos Model Found Vulnerabilities in Classified US Government Systems, Official Says

www.securityweek.com · 29 days ago

Come vulnerabilities were found within hours, but that does not mean the model was able to exploit them within that time, the official said.

Meta pauses employee monitoring program after data protections fail

www.csoonline.com · 30 days ago

An extensive program at Meta to gather a wide range of data from employees to train its AI model has been frozen after employees reportedly broke through its guardrails and accessed restricted data, and then did so again after Meta claimed to have fixed the vulnerability.

Hole in widely-used FFmpeg codec could crash media servers or enable RCE

www.csoonline.com · 30 days ago

A newly discovered critical vulnerability in the FFmpeg media processing framework bundled in a huge number of open source and commercial applications points, again, to the need for CSOs to have strategies to deal with software supply chain vulnerabilities, which should include demanding a software bill of materials for all products.

I compiled a unified LLM-CTF benchmark – 2,639 real data points from NeurIPS 2024 + original multi-agent runs

www.kaggle.com · 30 days ago

I built BORFOLI, a multi-agent AI system that routes queries across 6 LLMs simultaneously. I used it to benchmark LLM performance on real CTF cybersecurity challenges, then compiled those results with published data from the NYU CTF Bench (NeurIPS 2024) into a single unified dataset.

OpenClaw’s Skill Marketplace and the Emerging AI Supply Chain Threat

unit42.paloaltonetworks.com · 30 days ago

Unit 42's analysis of ClawHub revealed evasive malicious skills bypassing automated scanners to deploy infostealers and execute agentic financial fraud.

Cisco Unified CM flaw CVE-2026-20230 now exploited in attacks

www.bleepingcomputer.com · 30 days ago

A high-severity SSRF vulnerability, tracked as CVE-2026-20230, in Cisco Unified Communications Manager Server is now being exploited in attacks.

U.S. Presses Meta to Agree to A.I. Reviews

www.nytimes.com · 30 days ago

Federal officials are urging the lone major tech company holdout to allow government safety evaluations, weeks after ordering Anthropic to pull its latest model.

Tata Electronics Leak Exposes 200,000 Files, Including Apple and Tesla Documents

www.techrepublic.com · 30 days ago

Tata Electronics is investigating a cyber incident after leaked files reportedly included manufacturing documents for Apple and Tesla.

Coupang’s $409M Fine Shows the Real Cost of Weak AI Governance

www.techrepublic.com · 30 days ago

Recent AI and data security actions show why AI governance now belongs with boards, not just IT teams managing tools and access.

N.S.A. Lost Access to Powerful A.I. Model Amid Anthropic Dispute

www.nytimes.com · 30 days ago

A recent episode underscored the Trump administration’s increasing reliance on advanced A.I. systems for cybersecurity even as it battles a leading U.S. developer.

Tata Electronics confirms cyberattack as hackers leak data

www.bleepingcomputer.com · 30 days ago

Tata Electronics has confirmed in a statement to BleepingComputer that it was the target of a cyberattack that impacted parts of its IT infrastructure.

Scope of Salesforce Attacks Expands as Icarus Leaks Data

www.darkreading.com · 30 days ago

More victims have emerged after attackers breached application vendor Klue and used its OAuth tokens to steal customers' Salesforce data.

Windows 11 KB5095093 update rolls out new Point-in-Time restore feature

www.bleepingcomputer.com · 30 days ago

Microsoft has released the KB5095093 preview cumulative update for Windows 11 24H2 and 25H2, which fixes numerous bugs and begins rolling out new features, including the new Point-in-Time restore feature.

Internet Society Foundation Opens Global Call for Common Good Cyber Fund to Strengthen Cybersecurity

gbhackers.com · 30 days ago

DC, United States, June 23rd, 2026, CyberNewswire Applications open 23 June, 4 August 2026 to support nonprofits strengthening cybersecurity for civil society.

Healthtech firm Xolis suffers data breach impacting 1.4 million people

www.bleepingcomputer.com · 30 days ago

Healthcare technology company Xsolis says that sensitive data belonging to nearly 1.4 million individuals was compromised in a phishing attack that gave attackers access to its network.

'Cordyceps': Mushrooming Malicious Pull Requests Threaten Developer Workflows

www.darkreading.com · 30 days ago

The CI/CD workflow weakness affects Microsoft's Azure Sentinel, Google's AI Agent Development Kit, Apache's Doris analytics database, Cloudflare's Workers SDK, and Python Software Foundation's Black.

New macOS ClickFix attack silently mounts DMGs to push infostealer

www.bleepingcomputer.com · 30 days ago

A new macOS ClickFix campaign is using Terminal commands to silently download, mount, and launch info-stealing malware from malicious disk image (DMG) files.

Trump sets post-quantum crypto deadlines, launches broader federal quantum initiative

www.csoonline.com · 30 days ago

US President Donald Trump on Monday signed a pair of executive orders aimed at accelerating the federal government’s transition to post-quantum cryptography while expanding US investment in quantum technologies, establishing what the administration describes as a coordinated strategy to prepare for the opportunities and risks posed by quantum computing.

FortiBleed Targeted FortiGate Firewalls in 110 Million-Credential Harvesting Operation

thehackernews.com · 30 days ago

A Russian-speaking initial access broker (IAB) driven by financial gain is assessed to be behind a large-scale credential-harvesting operation known as FortiBleed that has targeted over 430,000 FortiGate firewalls globally.

Dragos Unveils AI for OT Security

www.securityweek.com · 30 days ago

Named EmberAI, the new capability is built on Dragos’ massive operational technology cybersecurity dataset.

Meta Has Created a Prediction Markets App

www.nytimes.com · 30 days ago

The experimental app, internally called “Arena,” would be independent of Facebook and Instagram. It could compete for attention with Polymarket and Kalshi, the biggest prediction markets.

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

krebsonsecurity.com · 30 days ago

Two men pleaded guilty in the United Kingdom this week to criminal charges stemming from an August 2024 cyberattack that crippled Transport for London, the entity responsible for the public transport network in the Greater London area.

Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps

www.securityweek.com · 30 days ago

Attackers could abuse Dify's multi-tenant cloud service to read private chats, preview other tenants' documents, and reach internal APIs.

Scattered Spider members plead guilty to hacking Transport for London

www.bleepingcomputer.com · 30 days ago

Two members of the 'Scattered Spider' cybercrime group pleaded guilty to hacking the Transport for London (TfL) systems in 2024.

Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 Agents

thehackernews.com · 30 days ago

Security firm AIR built a fake AI agent skill, pushed it through a popular skill marketplace and an Instagram ad, and says it reached roughly 26,000 agents, including some on corporate accounts. Every skill security scanner the firm tested it against marked it safe. The payload was harmless by design: it collected the user's email address and did nothing else.

Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration

thehackernews.com · 30 days ago

President Trump signed an executive order on June 22 setting hard deadlines for federal agencies to move high-value assets and high-impact systems to post-quantum cryptography. Key establishment must move by December 31, 2030; digital signatures by December 31, 2031. EO 14409 leaves national security systems on a separate track.

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

thehackernews.com · 30 days ago

GitHub is moving to strengthen software supply chain security by updating "actions/checkout" to block pwn request attacks that exploit the risky use of the "pullrequesttarget workflow" trigger to run malicious code with the workflow's full privileges.

The Exploit Doesn't Exist. You Can Still Prove It Works Against You

www.bleepingcomputer.com · 30 days ago

Attackers can now weaponize newly disclosed vulnerabilities far faster than most organizations can patch them. Picus Security explains how security teams can validate exploitability before a public exploit even exists.

LastPass confirms data breach in Klue supply chain attack

www.bleepingcomputer.com · 30 days ago

LastPass announced that hackers accessed customer data from its Salesforce environment after stealing the company's OAuth tokens in the Klue supply chain attack earlier this month.

SocGholish Takedown Highlights Malicious TDS Threats

www.darkreading.com · 30 days ago

SocGholish uses traffic distribution systems (TDSs) to provide initial access into victims' networks for cybercrime groups such as the notorious Evil Corp.

Cordyceps Supply chain Vulnerability Impacting Code Repositories at thousands of Organizations

gbhackers.com · 30 days ago

A pervasive CI/CD vulnerability pattern dubbed “Cordyceps” reveals a supply chain vulnerability that lets unauthenticated attackers seize control of Git-based workflows and, by extension, the software artifacts they produce. The issue is not a single bug in GitHub or any one tool; it is a systemic class of insecure workflow compositions.

LastPass Customer Data Exposed in Klue Supply Chain Attack Using Stolen OAuth Tokens

gbhackers.com · 30 days ago

A security incident involving the third-party platform Klue has resulted in unauthorized access to limited customer data in LastPass. The breach occurred after attackers compromised OAuth tokens associated with enterprise integrations. This incident, disclosed by LastPass, underscores the ongoing risks related to SaaS integrations and token-based authentication in today’s enterprise environments.

Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks

www.securityweek.com · 30 days ago

The high-severity use-after-free vulnerability in Samsung's KNOX security framework affected Android-powered Galaxy devices from the S9 through S25.

CISO Conversations: Carl Froggett – Combining CISO and CIO at Deep Instinct

www.securityweek.com · 30 days ago

Carl Froggett combines CISO and CIO. He currently occupies both positions at Deep Instinct. Before then, he was CISO at Citi for almost 17 years.

Five Eyes Agencies Warn AI Is Accelerating Cyber Threats and Zero-Day Exploitation

gbhackers.com · 30 days ago

The Five Eyes cyber security agencies have issued a joint warning that artificial intelligence is rapidly accelerating cyber threats, including the exploitation of zero day vulnerabilities, and urged organizations to act immediately.

Dropping Elephant Hackers Use China-Themed Loader Chain to Deploy In-Memory RAT

gbhackers.com · 30 days ago

A sophisticated campaign by the actor tracked as “Dropping Elephant” that uses a China-themed decoy document and a heavily reworked, in-memory remote access trojan (RAT).

FortiBleed Attackers Turn Firewalls Into Credentials Stealers as Heist Persists

www.darkreading.com · 30 days ago

The threat actors engineered a Golang-based sniffer to target 430,000 FortiGate firewalls and identify 110 million credentials in the ongoing global campaign.

DifyTap Flaws Expose AI Data Across Tenants on Platform Powering 1M+ Apps

gbhackers.com · 30 days ago

A series of critical vulnerabilities in the widely used open-source LLMOps platform Dify, which powers over one million AI applications. These vulnerabilities, collectively referred to as “DifyTap,” include four flaws, two rated as critical and two that require no authentication.

Hacker hijacks Brazil’s national alert system, sending “misanthropy” to millions of phones

www.bitdefender.com · 30 days ago

Emergency alert systems work because people believe them. Every time one of these systems issues a false alert - whether through negligence or a deliberate attack - trust erodes. Read more in my article on the Hot for Security blog.

Over 2,000 LG and Samsung Smart TV Apps Found Running Residential Proxy SDKs

gbhackers.com · 30 days ago

A large-scale analysis of smart TV applications has revealed that thousands of apps available on LG webOS and Samsung Tizen platforms are covertly transforming consumer devices into residential proxy nodes, raising significant security and privacy concerns.

Webinar: Why email security teams are drowning in alerts

www.bleepingcomputer.com · 30 days ago

Phishing, BEC, and account takeover attacks continue to overwhelm security teams with alerts and investigations. This webinar explores how behavioral AI can help automate detection and response workflows, reducing alert fatigue and improving operational efficiency.

Unpatched SharePoint servers opened the door to multiple attackers, Microsoft finds

www.csoonline.com · 30 days ago

What began as a routine ransomware investigation uncovered two unrelated attackers operating inside the same victim network at the same time, each obscuring the other’s activity and complicating the response. The discovery emerged during a Microsoft Detection and Response Team (DART) engagement involving Storm-2603, a threat actor associated with ransomware deployment.

Algerian Man Extradited to US for Running Cybercrime Marketplaces

www.securityweek.com · 30 days ago

26-year-old Abdellah Belmili faces up to 30 years in prison for allegedly operating the marketplaces Market0Day and Spoxy.

ANY.RUN Adds In-Browser Data Inspection to Reveal Phishing Redirects and DOM Changes

gbhackers.com · 30 days ago

ANY.RUN today launched in-browser data inspection for its Interactive Sandbox, a capability that brings real browser-level visibility directly into URL analysis workflows and addresses longstanding blind spots in phishing investigations.

FFmpeg PixelSmash Flaw Allows RCE on Video Players, Media Servers, NAS Appliances

www.securityweek.com · 30 days ago

Attackers can send crafted media files to execute code in any application that uses FFmpeg’s libavcodec library.

OTC Glucose Monitors Make Wellness Tracking More Personal — and More Complicated

www.techrepublic.com · 30 days ago

Over-the-counter CGMs are making glucose data easier to access, but not every user benefits equally. Here’s where the evidence is strongest, and what to know about app privacy.

Agentic AI: The Weapon That No Longer Needs a Warrior

thehackernews.com · 30 days ago

Every weapon begins as an extension of the hand that holds it. The spear lengthened the reach of the arm. The bow sent the point flying without the throw. The rifle placed a man's death a quarter mile beyond his sight, and the aircraft carried that death across oceans.

AWS Urges Organizations to Turn Outbound Blind Spots Into Monitored Checkpoints

gbhackers.com · 30 days ago

When securing an Amazon Web Services (AWS) estate, teams naturally concentrate on inbound protections firewalls, WAFs, and IAM policies because those defenses stop the most visible attacks. Yet outbound traffic often remains under-monitored, left permissive to avoid breaking dependencies or to simplify operations.