Blahalla

Cybersecurity was built for predictable systems. AI changes the rules

www.csoonline.com · a month ago

Every major technology shift changes cybersecurity. I’ve spent much of my career working through major technology transitions, from the rise of the commercial internet to mobile and cloud computing. Each shift created new opportunities for innovation, but it also created new security problems organizations weren’t fully prepared for.

SailPoint to Acquire Entro in Reported $200 Million Deal

www.securityweek.com · a month ago

Israel-based Entro specializes in non-human identity and credential security solutions, and it will enable SailPoint to enhance its products.

AI-Generated ClickFix Campaign Delivers SmartRAT Banking Trojan via Fake Brazilian Bank Website

gbhackers.com · a month ago

Multiple instances of typosquatting domains hosting malicious content generated with AI-powered website creation tools. One striking campaign combined an AI-created fake Brazilian bank site with a ClickFix social-engineering lure to deliver a PowerShell-based remote access trojan Zscaler named SmartRAT.

Kodak Admits Data Breach After ShinyHunters Hack Claims

www.securityweek.com · a month ago

Kodak told SecurityWeek it believes there is no threat to its systems or operations as a result of the cybersecurity incident.

EU Gets a Head Start in Developing 6G Network Security

www.darkreading.com · a month ago

"Shield-6G" will combine AI threat detection, digital twins, honeypots, and more, to help carriers protect 6G networks against the threats of tomorrow.

Hackers Use Reporter Impersonation to Target C-Suite Executives in Social Engineering Attacks

gbhackers.com · a month ago

A recent engagement demonstrates how persuasive pretexts and careful reconnaissance let attackers bypass technical controls by exploiting human trust at the executive level. Rather than inventing a sophisticated exploit, testers impersonated a journalist reporting an anonymous tip about hazardous-waste disposal at a client’s high-profile construction site.

Malicious LNK Files Disguised as Job Resumes Target Corporate Employees

gbhackers.com · a month ago

Malicious LNK files masquerading as job resumes are being used in targeted campaigns against corporate employees, combining social engineering with multi-stage malware delivery to achieve stealthy persistence and remote access. Attackers craft filenames that include company names and job titles for example, (RESUME)Domestic Company NameJob Title.

Hackers Use AI-Generated YouTube Narrators to Promote Crypto Clipper Malware

gbhackers.com · a month ago

A sophisticated social‑engineering campaign is leveraging AI‑generated YouTube narrators, ghost accounts across multiple platforms, and manipulated reputation signals to distribute a Rust‑based clipboard hijacker that steals cryptocurrency by replacing wallet addresses on victims’ clipboards.

From package to postinstall payload: Inside the Mastra npm supply chain compromise

www.microsoft.com · a month ago

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend against supply chain attacks using Microsoft Defender and actionable threat intelligence.

Leak confirms OpenAI is testing a ChatGPT for Science subscription

www.bleepingcomputer.com · a month ago

OpenAI appears to be testing a new subscription and experience for science use cases, but it's unclear if it'll be available to everyone regardless of their background.

Claude Fable 5: the agent harness matters more than the frontier model

www.endorlabs.com · a month ago

Before it got yanked, Endor Labs ran Claude Fable 5 through two agent harnesses, Claude Code and Cursor, on 200 real-world vulnerability-fixing tasks inside actual projects. Cursor with Fable 5: 72.6% FuncPass 29.0% SecPass Claude Code with Fable 5: 59.8% FuncPass 19.0% SecPass Both harnesses produced working code. The gap came down to patch completeness.

Crypto Clipper uses Tor and worm-like propagation for persistence and control

www.microsoft.com · a month ago

Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, Tor-based communications, and worm-like propagation. Beyond stealing cryptocurrency transactions, the malware establishes persistent access and enables follow-on activity through a lightweight backdoor capability.

Smashing Security podcast #472: AI gets hacked, and BitLocker gets bypassed

grahamcluley.com · a month ago

What if your AI coding assistant could be tricked into stealing your own company's secrets - by reading a single booby-trapped bug report? No phishing email. No malware. No password ever stolen. Just an AI doing exactly what it was told. Meanwhile, someone themselves Nightmare Eclipse has decided to teach Microsoft a lesson.

Google to use UK and EU user IP addresses for ad personalization

www.bleepingcomputer.com · a month ago

Google announced it will begin using IP addresses from users across the UK, EEA, and Switzerland for ad personalization starting August 3, 2026. This practice classifies IPs as personal data used to identify devices, triggering stringent consent requirements under GDPR/UK law. The shift marks a reversal of Google's earlier prohibition on device fingerprinting signals.

Worth a MalExt Report? A 2 Million-User Chrome Extension Added Give Freely/Wildlink in a 5-Day Update

chromewebstore.google.com · a month ago

I've been reversing the 2M+ user Volume Booster Chrome extension and found something interesting. Between v1.0.3 (2025-06-27) and v1.0.4 (2025-07-02), the extension added: "contentscripts": [{ "matches": ["

INC Ransomware Thrives by Mastering the Basics

www.darkreading.com · a month ago

And one of those basics is focusing on sectors where a ransomware disruption creates immediate pressure to pay up, like with healthcare.

Beyond the benchmark: Advancing security at AI speed

www.microsoft.com · a month ago

Read how Microsoft Security has advanced its agentic vulnerability detection system, codename MDASH, integrating into real-world workflows across Windows, Azure, and identity systems.

Forrester names Microsoft a Leader in the 2026 Extended Detection and Response Platforms Wave™ report

www.microsoft.com · a month ago

Microsoft has been named a Leader in The Forrester Wave™: Extended Detection and Response Platforms, Q2 2026.

Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments

thehackernews.com · a month ago

An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz for their warez, according to new findings from Check Point Research.

105K Chrome Installs Linked to Adware and Fake Google Traffic

www.techrepublic.com · a month ago

Socket researchers linked 152 Chrome wallpaper extensions to hidden data logging, fake Google search traffic, and ad monetization.

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development

thehackernews.com · a month ago

Microsoft has formally disclosed that it's working to release a patch to address a Defender zero-day codenamed RoguePlanet. The vulnerability has now been assigned the CVE identifier CVE-2026-50656 (CVSS score: 7.8), with the tech giant describing it as a privilege escalation flaw.

AI is accelerating cyberattacks—here’s how to stay ahead

techcommunity.microsoft.com · a month ago

See how Microsoft unifies identity and security signals to help teams prevent, detect, and respond to AI-accelerated attacks faster.

SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies

gbhackers.com · a month ago

Austin, TX, USA, June 17th, 2026, CyberNewswire New SpyCloud research highlights the expansion of phishing attacks as AI and phishing-as-a-service fuel enterprise targeting.

Elon Musk’s Next Move May Be a Mega-Merger of SpaceX and Tesla

www.nytimes.com · a month ago

Some shareholders might object, but there is little they could do, legal experts say.

Ozempic Maker Novo Nordisk Confirms Security Incident After $25M Hacker Demand

www.techrepublic.com · a month ago

Hackers claim they stole 1.3TB of Novo Nordisk data, including clinical trial and AI model information, after issuing a $25 million demand.

Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline

thehackernews.com · a month ago

A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credentials. Ordinary stuff, until one move near the end. Before his command-and-control server went dark, he installed OpenSSH and Tailscale on a victim's machine, building a way back in that did not run through the C2 at all.

Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability

sec.cloudapps.cisco.com · a month ago

A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI.

Cisco Webex App Open Redirect Vulnerability

sec.cloudapps.cisco.com · a month ago

A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to redirect users to a malicious webpage. Cisco has addressed this vulnerability in the Cisco Webex App, and no customer action is needed. This vulnerability existed due to improper input validation of URL parameters in an HTTP request.

Cisco Crosswork Network Controller Server-Side Template Injection Vulnerability

sec.cloudapps.cisco.com · a month ago

A vulnerability in the web-based management interface of Cisco Crosswork Network Controller could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to insufficient input validation in the configuration template engine of the web-based management interface.

Cisco Identity Services Engine Remote Code Execution and Information Disclosure Vulnerabilities

sec.cloudapps.cisco.com · a month ago

Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to achieve remote code execution or conduct information disclosure attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

How the ‘Hard Fork’ Hosts Bring Their Tech Podcast to a Live Audience

www.nytimes.com · a month ago

Kevin Roose and Casey Newton explain why they try to include “a little chaos” when they record their New York Times tech podcast in front of a crowd in San Francisco.

FortiBleed leak exposes Fortinet VPN credentials for 73,000 devices.

www.bleepingcomputer.com · a month ago

A newly discovered data leak dubbed "FortiBleed" has exposed what appears to be a collection of Fortinet and FortiGate VPN credentials for 73,932 firewall URLs at organizations worldwide.

Estonia plans government IDs giving AI agents rights and responsibilities

www.csoonline.com · a month ago

There’s no shortage of agentic AI tools out there that offer to perform online tasks on your behalf, if only you’ll give them all your passwords and credit card details. The trouble starts when those agents don’t know when to stop, or when others don’t know to stop them.

Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It

gbhackers.com · a month ago

London, United Kingdom, June 17th, 2026, CyberNewswire New research from cybersecurity company Heimdal finds 29% of US executives say AI risk is under control, against 7% of the practitioners running it day-to-day. Across 1,000 IT professionals in the UK and US, AI adoption has outpaced security controls by roughly two to one.

Anthropic Employees Accuse Trump Administration of Targeting Them

www.nytimes.com · a month ago

Workers at the artificial intelligence company have been puzzled and increasingly concerned by the administration’s move to limit their latest A.I. models.

Why Waymo’s Driverless Taxis Won’t Be on Your Streets Anytime Soon

www.nytimes.com · a month ago

The Silicon Valley company’s ambitions to roll out autonomous cars nationwide have hit political roadblocks in some of the country’s biggest markets.

Webinar Today: How Modern Breaches Bypass MFA and Evade Detection

www.securityweek.com · a month ago

Attendees will learn how attackers evade conventional detection methods, why legacy MFA alone is no longer sufficient, and how organizations can strengthen their defenses.

Why Account Takeovers Are Rising and How to Stop Them

www.bleepingcomputer.com · a month ago

Account takeovers are rising as attackers bypass traditional defenses through phishing, session hijacking, and MFA fatigue. Specops Software explores how device trust and continuous verification help reduce account takeover risk.

We benchmarked AI-generated code against an AI security reviewer and published the results including where the reviewer made things worse

vibereview.app · a month ago

50 features, same model and prompts, two branches. Unreviewed branch shipped six CWE-502 native ObjectInputStream sinks and five sh -c command injection endpoints, several reachable by ordinary authenticated users. We also introduced a trust-all X509TrustManager on the reviewed branch and included it in the scoring rather than leaving it out.

Google Adds New Android Controls for WhatsApp Backups, Password Transfers

www.techrepublic.com · a month ago

Google’s June 2026 Android system updates add WhatsApp backup controls, Play Protect checks, passkey portability, and Play Store AI search.

India's Telegram ban hit the UAE too. Here's how to get around it

www.bleepingcomputer.com · a month ago

India has banned Telegram until June 22 after the app was used to circulate leaked exam papers. CEO Pavel Durov accuses telecom Reliance of BGP hijacking that disrupted the app as far away as the UAE. Here's what happened, and how to get around the block with an MTProto proxy.

Modular Phishing Kit Uses GitHub Pages to Steal Payment Card Details and Passwords

gbhackers.com · a month ago

A sophisticated, long-running phishing operation has evolved into a serverless, modular campaign that weaponizes GitHub Pages to harvest payment card data, credentials, and customer identifiers from banking customers in Mexico. The campaign’s architecture centers on a phishing kit containing a selector panel that operators use to generate institution-specific landing pages.

1Password Acquires Apono in Reported $250M-$300M Deal

www.securityweek.com · a month ago

Apono specializes in just-in-time access governance technology for humans, machines, and AI agents.

Tenet Security Emerges from Stealth with $6 Million Seed Funding

www.securityweek.com · a month ago

Tenet aims to detect and stop dangerous AI agentic behavior in real time.

Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization

thehackernews.com · a month ago

For security teams, the findings never stop, but confidence in knowing which ones matter is becoming harder to maintain. The problem is no longer visibility. It's validation. Security teams must decide which findings warrant action while operating under constant pressure and incomplete information. Increasingly, the challenge is not discovering potential risks.

Microsoft confirms Office apps launch issues after June updates

www.bleepingcomputer.com · a month ago

Microsoft is investigating a new issue preventing third-party applications from launching Microsoft Office applications or opening documents on up-to-date Windows systems.

Google’s Vertex AI SDK could allow RCE through bucket squatting

www.csoonline.com · a month ago

A design flaw in the Vertex AI software development kit (SDK) for Python, Google Cloud’s managed platform for building, training, and deploying AI agents, could allow hijacking and poisoning of models outside of a developer’s own Google Cloud project.

ClickFix Attack Deploys Potemkin Loader, RMMProject RAT, and EtherRAT Across 11 Hosts

gbhackers.com · a month ago

A sophisticated ClickFix social engineering campaign in May 2026 triggered a full hands-on-keyboard intrusion spanning 11 hosts, deploying a novel trio of malicious tools: Potemkin loader, RMMProject RAT, and EtherRAT. The attack chain began when the user visited a compromised website and pasted a base64-encoded PowerShell command into Win+R. This command abused pcalua.

Rockwell Automation Patches Vulnerabilities in ICS Controllers and Software

www.securityweek.com · a month ago

The industrial automation giant has fixed security holes in Logix, CompactLogix, Flex, RSLinx, and FactoryTalk products.

Google Cloud Vertex AI Vulnerability Lets Attackers Take Over and Poison AI Models

gbhackers.com · a month ago

A critical vulnerability in Google Cloud’s Vertex AI has been discovered, allowing attackers to hijack machine learning model uploads, poison artifacts, and achieve cross-tenant remote code execution (RCE) without any prior access to the victim’s environment.