Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs 2026-07-20 at 13:23 By A solo Russian-speaking threat actor known as “bandcampro” outsourced a chunk of their operations to Google’s open-source Gemini CLI artificial intelligence (AI) and commandeered a live botnet. The findings come from an analysis of 200 Gemini CLI […]
New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction 2026-07-20 at 13:23 By Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro’s Zero Day Initiative (ZDI)
New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During Extraction Read More »
Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution 2026-07-20 at 13:23 By F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a heap buffer overflow in the worker process with crafted HTTP requests. CVE-2026-42533 was patched on July 15 in nginx 1.30.4 (stable) and
Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution Read More »
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines 2026-07-20 at 13:23 By Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems were published to RubyGems with the end goal of serving additional payloads. The rogue gems are listed below – git_credential_manager (versions
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines Read More »
World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent 2026-07-20 at 13:23 By In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated by an autonomous AI agent system. The company said it detected and responded to the incident targeting its
World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent Read More »
Dem-backed ‘Project 2029’ wants a tech clampdown that looks like Europe’s — and risks war with Silicon Valley 2026-07-20 at 13:00 By Thomas Barrabi The liberal backers of “Project 2029” want the next Democratic presidential candidates to pursue a major crackdown that includes a social media ban for kids under age 16, limits on the
Hugging Face Hacked in Autonomous AI Attack 2026-07-20 at 12:36 By Ionut Arghire Targeting production infrastructure, the attack compromised internal datasets and service credentials. The post Hugging Face Hacked in Autonomous AI Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Hugging Face Hacked in Autonomous AI Attack Read More »
Bitcoin ETF inflows extend to second week, but recovery lacks momentum 2026-07-20 at 12:33 By Cointelegraph by Helen Partz US spot Bitcoin ETFs extended their inflow streak to two weeks with $75.7 million in net inflows, but analysts said demand remains insufficient to fuel a sustained uptrend. This article is an excerpt from Cointelegraph.com News
Bitcoin ETF inflows extend to second week, but recovery lacks momentum Read More »
Dr. Jazma Mekelle Parker — Women in Security 2026 2026-07-20 at 12:00 By Dr. Jazma Mekelle Parker began her security career as a contract background investigator for the U.S. Office of Personnel Management (OPM). This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source
Dr. Jazma Mekelle Parker — Women in Security 2026 Read More »
The Windows 10 hangover is becoming a security problem 2026-07-20 at 11:37 By Anamarija Pogorelec Windows 11 now runs on 78.8% of Windows devices after Microsoft ended support for Windows 10 on 14 October 2025, according to Lansweeper. Windows 10 still accounts for 16.9% of devices and no longer receives security updates, leaving newly discovered
The Windows 10 hangover is becoming a security problem Read More »
Chrome 150 Update Patches Severe Memory Safety Bugs 2026-07-20 at 11:12 By Ionut Arghire The fresh security update resolves six critical and high-severity use-after-free vulnerabilities. The post Chrome 150 Update Patches Severe Memory Safety Bugs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Chrome 150 Update Patches Severe Memory Safety Bugs Read More »
South Korea eyes September launch for second phase of CBDC pilot: Report 2026-07-20 at 10:18 By Cointelegraph by Yohan Yun The Bank of Korea’s CBDC pilot will add two regional banks, new payment features and tests of government subsidy payments using tokenized bank deposits This article is an excerpt from Cointelegraph.com News View Original Source
South Korea eyes September launch for second phase of CBDC pilot: Report Read More »
Meet Dusseldorf, Microsoft’s open-source out-of-band security platform 2026-07-20 at 09:00 By Anamarija Pogorelec Out-of-band vulnerabilities surface when an application quietly reaches out to an external system during an attack, and capturing that traffic calls for infrastructure that many researchers assemble on their own. A new open-source project from Microsoft supplies that infrastructure in a package
Meet Dusseldorf, Microsoft’s open-source out-of-band security platform Read More »
More alerts are making your team slower, and an outcome-based SOC fixes that 2026-07-20 at 08:30 By Help Net Security In this Help Net Security video, Thom Langford, EMEA CTO, Rapid7, explains why piling on more security alerts makes a SOC slower to respond. Attackers log in with stolen credentials and use trusted tools like
More alerts are making your team slower, and an outcome-based SOC fixes that Read More »
World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent 2026-07-20 at 08:27 By In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated by an autonomous AI agent system. The company said it detected and responded to the incident targeting its
World’s Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent Read More »
WP2Shell WordPress Vulnerabilities Exploited in the Wild 2026-07-20 at 08:21 By Eduard Kovacs Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure. The post WP2Shell WordPress Vulnerabilities Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
WP2Shell WordPress Vulnerabilities Exploited in the Wild Read More »
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines 2026-07-20 at 08:15 By Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems were published to RubyGems with the end goal of serving additional payloads. The rogue gems are listed below – git_credential_manager (versions
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines Read More »
A forensic tool for backdoored code completions in AI assistants 2026-07-20 at 08:00 By Sinisa Markovic Developers lean on AI coding assistants for a growing share of their daily work, letting the tools predict the next few lines and accepting many suggestions with a quick glance. Those tools learn from large collections of code, and
A forensic tool for backdoored code completions in AI assistants Read More »
Product showcase: ZoneAlarm Mobile Security adds customizable content filtering to mobile security 2026-07-20 at 07:30 By Anamarija Pogorelec ZoneAlarm Mobile Security is a security app from Check Point designed to protect mobile devices against phishing, malicious websites, unsafe networks, and fraudulent links. It is available for iPhone, iPad, Android, and can run on Apple silicon
Cardano activates van Rossem hard fork, paving way for Leios 2026-07-20 at 07:26 By Cointelegraph by Felix Ng The upgrade reduces smart contract execution costs while laying the groundwork for Ouroboros Leios, a major scalability upgrade expected later this year. This article is an excerpt from Cointelegraph.com News View Original Source
Cardano activates van Rossem hard fork, paving way for Leios Read More »