July 2026

U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support 2026-07-14 at 11:02 By The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has designated two individuals and a VPN service provider for enabling ransomware actors’ and other cybercriminals’ malicious activities, including ransomware attacks against Americans. The VPN, named First VPN Service

How Post-Quantum Cryptography is Gaining Adoption 2026-07-14 at 11:00 By IT leaders need to act now to procure the next wave of secure and standard compliant systems they need for the year ahead. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet 2026-07-14 at 10:08 By A campaign of 148 npm packages disguised as student web proxies turned visitors’ browsers into a distributed denial-of-service botnet for roughly two weeks in May, according to new research from JFrog. The packages did not go after the developers

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity 2026-07-14 at 09:19 By Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting a single flaw in the platform. The way in has been the trust the organization had already extended,

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks 2026-07-13 at 20:36 By Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that’s capable of harvesting sensitive data from compromised systems. Unlike other information stealers that are built on AppleScript droppers or Objective-C-based wrappers, CrashStealer is implemented in native C++, according to

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found 2026-07-13 at 20:17 By Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsing-history collector built into its official store version. The collector was dormant. An empty