July 2026

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot 2026-07-10 at 20:42 By Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied as home routers, smart cameras, and the management chips inside data-center servers. Four of the bugs […]

Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages 2026-07-10 at 20:29 By Unknown threat actors compromised the Injective Labs SDK project’s GitHub repository and leveraged it to publish a malicious package on the npm registry to steal cryptocurrency wallet private keys and mnemonic seed phrases. The compromised version, @injectivelabs/[email protected], came embedded with fake telemetry functionality

European Union warns Meta to change ‘addictive’ Facebook, Instagram features — or get big fines 2026-07-10 at 19:07 By Thomas Barrabi European regulators told Meta on Friday to make big changes to Facebook and Instagram’s “addictive” features — or face steep fines. This article is an excerpt from Latest Technology News | New York Post

Laser Attack Resets Tangem Wallet Passwords on Cards That Can’t Be Patched 2026-07-10 at 17:51 By Researchers at Ledger’s Donjon security team have shown that a precisely timed laser pulse, aimed at the chip inside a Tangem crypto wallet card, can reset the card’s password to anything the attacker picks. No old password. No backup card. Once

Researcher Details WhatsApp-to-Host Attack Chain Using Three OpenClaw Flaws 2026-07-10 at 17:19 By Details have emerged about three now-patched security flaws in the OpenClaw personal artificial intelligence (AI) assistant that, if successfully exploited, could enable credential theft, privilege escalation, and arbitrary code execution on the host. A brief description of the high-severity vulnerabilities is as

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic 2026-07-10 at 16:15 By The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called MODBEACON. Chinese cybersecurity company QiAnXin said that while the threat cluster may appear like a low-sophistication, high-activity operation that propagates malware

Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and Tracking 2026-07-10 at 15:17 By Researchers ran 281 of the most popular free VPN apps on the Google Play Store through a new testing system and found that many fail at the basics people install a VPN for, i.e., keeping their traffic

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access 2026-07-10 at 15:17 By A threat actor has been targeting organizations spanning multiple sectors with voice-based fake security requests that prompt Microsoft 365 users to enroll a new Entra passkey with an aim to carry out data extortion attacks. The threat actor, tracked