News

Romania’s land registry hit by cyber attack, data allegedly for sale

cyberattack, Don't miss, EU, Government, Hot stuff, News /

Romania’s land registry hit by cyber attack, data allegedly for sale 2026-07-16 at 13:21 By Zeljka Zorz Romania’s National Agency for Cadastre and Land Registration (ANCPI) suffered a major disruption on Tuesday, July 14, when its e-Terra cadastre and land registry app became unavailable to users. What was first declared to be a “major technical […]

Romania’s land registry hit by cyber attack, data allegedly for sale Read More »

Microsoft makes Windows SSO prompts easier to manage

authentication, cybersecurity, Microsoft, Microsoft Entra ID, News, policy, SSO, Windows /

Microsoft makes Windows SSO prompts easier to manage 2026-07-16 at 11:47 By Anamarija Pogorelec Microsoft is introducing a new registry-based policy that lets IT administrators automatically accept Windows SSO permissions on Windows 11 versions 24H2 and 25H2 devices managed with Microsoft Entra ID. Users with personal Microsoft accounts and devices outside policy-managed environments will continue

Microsoft makes Windows SSO prompts easier to manage Read More »

Police dismantle investment fraud ring that stole €100 million a month

Cryptocurrency, cybercrime, EU, Europol, fraud, law enforcement, News, scams /

Police dismantle investment fraud ring that stole €100 million a month 2026-07-16 at 11:30 By Sinisa Markovic Dutch police, working alongside Belgian authorities and Europol, have dismantled a major criminal network accused of operating a global investment fraud scheme through dozens of fraudulent call centers. Investigators estimate the organization generated more than €100 million a

Police dismantle investment fraud ring that stole €100 million a month Read More »

VS Code agent host runs Copilot, Claude, and Codex in a dedicated process

GitHub, Microsoft, News, programming, software /

VS Code agent host runs Copilot, Claude, and Codex in a dedicated process 2026-07-16 at 10:45 By Anamarija Pogorelec Developers who lean on AI coding agents often keep several editor windows open at once, each tied to its own session. The 1.129 release of Visual Studio Code reworks that setup with a dedicated agent host.

VS Code agent host runs Copilot, Claude, and Codex in a dedicated process Read More »

Reading between the lines of a cyber insurance policy

CISO, cyber insurance, Don't miss, Features, financial industry, Hot stuff, News, opinion, strategy, tips /

Reading between the lines of a cyber insurance policy 2026-07-16 at 09:00 By Mirko Zorz Enterprises in regulated industries often carry cyber insurance policies because contracts require it or boards ask for documented risk transfer. The global market for these policies reached about $16 billion in premiums in 2024. Coverage has become widespread. Payouts have

Reading between the lines of a cyber insurance policy Read More »

What public money does to open-source projects

code, cybersecurity, DevOps, Don't miss, News, open source, research /

What public money does to open-source projects 2026-07-16 at 08:30 By Mirko Zorz Most of the software running inside a typical company was written by volunteers the company never paid. Open-source code sits under web apps, build pipelines, and the machine learning stacks getting so much attention right now. Roughly 96 percent of codebases carry

What public money does to open-source projects Read More »

Ransom demands are down, email is the top way attackers get in

credentials, cybercrime, cybersecurity, Don't miss, Encryption, Malware, News, Ransomware, report, Sophos /

Ransom demands are down, email is the top way attackers get in 2026-07-16 at 08:00 By Mirko Zorz An employee opens an email that looks like any other, clicks a link, and gives up a password without noticing. A stolen login opens a door deeper in the network. Files stop opening a few days later.

Ransom demands are down, email is the top way attackers get in Read More »

Companies keep getting breached by vulnerabilities they already knew about

CISO, cybersecurity, Don't miss, News, report, Vicarius, vulnerability management /

Companies keep getting breached by vulnerabilities they already knew about 2026-07-16 at 07:30 By Mirko Zorz Scanning tools have gotten good at their work. Organizations now find more weaknesses across more of their systems than at any earlier point in the industry’s history. A survey from the security firm Vicarius points to a gap that

Companies keep getting breached by vulnerabilities they already knew about Read More »

Finance phishing works because it sounds boringly normal

Cofense, cybersecurity, financial industry, News, phishing, report /

Finance phishing works because it sounds boringly normal 2026-07-16 at 06:53 By Anamarija Pogorelec Finance departments process a constant stream of invoices, contracts, payment notices, and procurement emails, making email one of the most common initial access vectors for threat actors. According to Cofense, attackers exploit those workflows with phishing emails that resemble legitimate business

Finance phishing works because it sounds boringly normal Read More »

GPT-Red beat human red teamers on a prompt injection test

agentic AI, AI, ChatGPT, Don't miss, News, OpenAI, prompt injection, red team /

GPT-Red beat human red teamers on a prompt injection test 2026-07-16 at 06:49 By Mirko Zorz GPT-Red is an automated red-teaming model that OpenAI trains to find prompt injection weaknesses. It works the way a human red-teamer does. It sends a prompt, watches how a GPT model responds, and iterates toward a goal such as

GPT-Red beat human red teamers on a prompt injection test Read More »

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software

Blackpoint Cyber, cybercrime, Malware, News /

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software 2026-07-15 at 17:43 By Sinisa Markovic LabubaRAT, a previously undocumented Rust-based remote access tool (RAT) masquerading as NVIDIA software that enables post-compromise operations on Windows systems, has been uncovered by Blackpoint Cyber. According to researchers, LabubaRAT creates “a reusable foothold for hands-on activity.” Once deployed,

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software Read More »

Threat actor impersonated hundreds of brands on GitHub to push infostealer malware

Arctic Wolf Networks, credentials, data theft, digital wallet, Don't miss, GitHub, Hot stuff, Malware, News /

Threat actor impersonated hundreds of brands on GitHub to push infostealer malware 2026-07-15 at 16:52 By Zeljka Zorz A financially motivated threat actor is impersonating hundreds of brands on GitHub and pushing a smash-and-grab infostealer masquerading as legitimate downloads of popular software, Arctic Wolf threat researchers have warned. “The 292 impersonated repositories span security tooling,

Threat actor impersonated hundreds of brands on GitHub to push infostealer malware Read More »

Spanish police dismantle €140 million cybercrime network

cybercrime, EU, fraud, Interpol, law enforcement, News /

Spanish police dismantle €140 million cybercrime network 2026-07-15 at 14:55 By Sinisa Markovic Spanish National Police have dismantled a cybercrime network accused of stealing and laundering about €140 million through fake investment platforms, CEO fraud, invoice fraud, and man-in-the-middle attacks. Four people were arrested as part of the operation: two in Portugal, one in Spain,

Spanish police dismantle €140 million cybercrime network Read More »

AWS retools Security Hub for AI and multicloud threats

AI, AWS, Microsoft Azure, monitoring, News, threat detection /

AWS retools Security Hub for AI and multicloud threats 2026-07-15 at 11:56 By Anamarija Pogorelec AWS added AI workload protection and Microsoft Azure security monitoring to Security Hub, its centralized security platform for collecting and prioritizing security findings across cloud environments. Support for additional cloud platforms will follow. “Collecting findings was never the hard part.

AWS retools Security Hub for AI and multicloud threats Read More »

FreeRDP 3.29.0 security update resolves 22 advisories

News, open source, remote access, software /

FreeRDP 3.29.0 security update resolves 22 advisories 2026-07-15 at 11:42 By Anamarija Pogorelec FreeRDP is a free implementation of the Remote Desktop Protocol, released under the Apache license, and it runs on a large share of workstations and servers through the many tools built on it. The 3.29.0 version is a security, bugfix, and maintenance

FreeRDP 3.29.0 security update resolves 22 advisories Read More »

Product showcase: Trust Chain TPRM turns vendor compliance evidence into verified assurance

News, Product showcase, Strike Graph /

Product showcase: Trust Chain TPRM turns vendor compliance evidence into verified assurance 2026-07-15 at 10:30 By Anamarija Pogorelec Trust Chain is an AI-native third-party risk management (TPRM) solution by Strike Graph that replaces the security questionnaire model with validated evidence of compliance. Rather than asking vendors to self-report their security posture, Trust Chain requires vendors

Product showcase: Trust Chain TPRM turns vendor compliance evidence into verified assurance Read More »

SingGuard-NSFA: Open-source guardrails for agentic AI

agentic AI, cybersecurity, Don't miss, GitHub, News, open source, software /

SingGuard-NSFA: Open-source guardrails for agentic AI 2026-07-15 at 08:30 By Anamarija Pogorelec SingGuard-NSFA is an open-source guardrail framework aimed at operational threats in agent workflows. Four models ship at 0.8B, 2B, 4B, and 9B parameters, all built on Qwen3.5 base backbones. Risk taxonomy The NSFA risk taxonomy organizes threats along the CIA triad of confidentiality,

SingGuard-NSFA: Open-source guardrails for agentic AI Read More »

The MDR renewal question: What changes when AI can handle the alerts

agentic AI, AI, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, Prophet Security, SOC /

The MDR renewal question: What changes when AI can handle the alerts 2026-07-15 at 08:00 By Help Net Security For most of the past decade, the managed detection and response (MDR) decision was a simple one: teams that couldn’t staff a 24/7 SOC outsourced detection and response to a provider who could. It solved a

The MDR renewal question: What changes when AI can handle the alerts Read More »

An AI overthinking attack can tie a robot up for over a minute

AI, cybersecurity, hardware, LLMs, News, research /

An AI overthinking attack can tie a robot up for over a minute 2026-07-15 at 07:30 By Anamarija Pogorelec Robots that read the world through cameras now lean on large vision-language models to interpret what they see and decide what to do next. These models handle images and text together, so any words that fall

An AI overthinking attack can tie a robot up for over a minute Read More »

SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410)

0-day, CVE, Don't miss, enterprise, Government, Hot stuff, News, secure access, SonicWall /

SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410) 2026-07-14 at 20:40 By Zeljka Zorz SonicWall has fixed two actively exploited vulnerabilities (CVE-2026-15409, CVE-2026-15410) affecting its Secure Mobile Access (SMA) 1000 Series appliances, and is urging customer organizations to upgrade to a fixed firmare version and search for evidence of potential compromise. If the outlined

SonicWall SMA appliances targeted in zero-day attacks (CVE-2026-15409, CVE-2026-15410) Read More »

Scroll to Top