2026

SilverFox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT 2026-07-30 at 13:32 By The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver (BYOVD) attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT (aka Winos 4.0) for […]

Don’t Ignore the Most Important System You Manage 2026-07-30 at 12:00 By Be sure to maintain the most critical piece of infrastructure: the human running it. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

FCC Blocks New Foreign-Produced Robots and Power Inverters Over Cyber Risks 2026-07-30 at 11:47 By The Federal Communications Commission (FCC) added foreign-produced mobile robots and networked power inverters to its Covered List on July 28. The move generally prevents new models from receiving the equipment authorization required for import, marketing, or sale in the US.

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation 2026-07-30 at 10:40 By The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access (OWA), to target U.S. and European government entities, as well

Smartphone Access Control Scores High Marks on Campus 2026-07-30 at 10:00 By The case for using smartphones for mobile electronic access control (EAC) credentialing. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet 2026-07-30 at 09:05 By Amazon has tied the September 2025 hijack of the npm packages debug and chalk to North Korea. For ten months, the incident sat in the public record as crypto theft: a maintainer phished through a lookalike npm domain and