News

New macOS malware steals passwords by posing as Apple’s crash-reporting tool

apple, macOS, Malware, News /

New macOS malware steals passwords by posing as Apple’s crash-reporting tool 2026-07-14 at 16:46 By Sinisa Markovic Jamf Threat Labs has uncovered a new macOS infostealer named CrashStealer that disguises itself as Apple’s crash-reporting tool to steal passwords, Keychain data, and cryptocurrency wallets. The malware was first spotted in May while it was still under […]

New macOS malware steals passwords by posing as Apple’s crash-reporting tool Read More »

Download: The ultimate guide to network operations management

News, Tines, Whitepapers and webinars /

Download: The ultimate guide to network operations management 2026-07-14 at 16:00 By Anamarija Pogorelec Modern network operations are too manual. Today’s IT and security teams are managing growing complexity across networks, infrastructure, tools, and workflows. The result? Slower response, duplicated effort, and operational friction. This guide explores how intelligent workflows help teams reduce manual work,

Download: The ultimate guide to network operations management Read More »

“Context bombs” can frustrate AI-driven attacks, researchers found

agentic AI, AWS, deception, Don't miss, Hot stuff, LLMs, News, prompt injection, research, Tracebit /

“Context bombs” can frustrate AI-driven attacks, researchers found 2026-07-14 at 15:27 By Zeljka Zorz A new approach tried out by Tracebit researchers has proven very effective at stopping AI agents from fully compromising targeted environments. What makes it notable isn’t the technique – prompt injection is old news – but the direction it’s pointed: not

“Context bombs” can frustrate AI-driven attacks, researchers found Read More »

Google adds FIDO2 keys and phone passkeys to Windows login via GCPW

2FA, authentication, cybersecurity, Google, Google Workspace, hardware, News, security key /

Google adds FIDO2 keys and phone passkeys to Windows login via GCPW 2026-07-14 at 13:35 By Anamarija Pogorelec Google has started rolling out FIDO2-compliant physical security key support as a second factor for authentication in Google Credential Provider for Windows (GCPW) to all Google Workspace customers. GCPW is a free tool that lets users sign

Google adds FIDO2 keys and phone passkeys to Windows login via GCPW Read More »

No one knows how many old shims can still bypass UEFI Secure Boot

cybersecurity, Don't miss, ESET, Microsoft, News, PowerShell, research, vulnerability /

No one knows how many old shims can still bypass UEFI Secure Boot 2026-07-14 at 13:26 By Mirko Zorz The vast majority of UEFI computers carry a Microsoft certificate that will trust a small first-stage loader called a shim, a program Microsoft signs so that Linux and assorted boot tools can run with Secure Boot

No one knows how many old shims can still bypass UEFI Secure Boot Read More »

UK charges five persons linked to fraud platform behind more than a million scam calls

cybercrime, fraud, National Crime Agency, News, scams, UK /

UK charges five persons linked to fraud platform behind more than a million scam calls 2026-07-14 at 12:18 By Sinisa Markovic Five people have been charged in the UK following a National Crime Agency (NCA) investigation into Russian Coms, a caller ID spoofing service used by fraudsters. Ayoub Sehailia, 28, Zakkaria Sehailia, 30, Usman Din,

UK charges five persons linked to fraud platform behind more than a million scam calls Read More »

Microsoft Entra ID authentication overhaul to start in September 2026

authentication, MFA, Microsoft, Microsoft Entra ID, News, passkeys /

Microsoft Entra ID authentication overhaul to start in September 2026 2026-07-14 at 11:49 By Anamarija Pogorelec Microsoft will begin rolling out passkeys as the default authentication experience for Microsoft Entra ID in the public cloud on September 1, 2026. Organizations with SMS or voice authentication enabled will automatically be enabled for passkeys. The next time

Microsoft Entra ID authentication overhaul to start in September 2026 Read More »

New tutorials on underground hacking forums have roughly doubled

cybercrime, dark web, News, Radware, research, Study /

New tutorials on underground hacking forums have roughly doubled 2026-07-14 at 09:30 By Sinisa Markovic Underground hacking forums are producing more original tutorials again, with growing attention on financial fraud, particularly the theft and fraudulent use of payment card data, known as carding, and cash-out techniques. New tutorials per month versus reposts (Source: Radware) Fraud

New tutorials on underground hacking forums have roughly doubled Read More »

The best defense against AI attacks turns out to be a skeptical human

AI, cybersecurity, Don't miss, generative AI, Hot stuff, News, report, SANS, threats /

The best defense against AI attacks turns out to be a skeptical human 2026-07-14 at 09:00 By Mirko Zorz Analysts across the security industry now run generative AI through their daily work, from log triage to incident write-ups. Active use in cybersecurity strategy reached 78% of practitioners in 2026, up from half the field a

The best defense against AI attacks turns out to be a skeptical human Read More »

Fake smart home residents could stand in for real ones in security research

automation, cybersecurity, data, data collection, Internet of Things, LLMs, News, Privacy, research, smart home /

Fake smart home residents could stand in for real ones in security research 2026-07-14 at 08:30 By Anamarija Pogorelec Smart home security research runs on a scarce ingredient: recordings of how real people use the gadgets in their homes. Getting that data means wiring up someone’s house and watching for months, which is slow, costly,

Fake smart home residents could stand in for real ones in security research Read More »

Chatto: Open-source team messenger with privacy at its core

Encryption, messaging, News, open source, Privacy, software /

Chatto: Open-source team messenger with privacy at its core 2026-07-14 at 07:30 By Anamarija Pogorelec Teams that want their group chats off commercial platforms have a growing menu of self-hosted options. Chatto joined that group when its developer released the code under an open-source license and posted binaries for anyone to run on their own

Chatto: Open-source team messenger with privacy at its core Read More »

Cybersecurity jobs available right now: July 14, 2026

cybersecurity jobs, News /

Cybersecurity jobs available right now: July 14, 2026 2026-07-14 at 07:00 By Anamarija Pogorelec Cyber Network Engineer Fiserv | USA | On-site – View job details As a Cyber Network Engineer, you will lead the design, governance, and security review of enterprise network architectures across on-premises and cloud environments. You will provide expertise in network

Cybersecurity jobs available right now: July 14, 2026 Read More »

Hackers breach Lidl’s IT service provider, steal customer data

breach, data breach, News, Retail /

Hackers breach Lidl’s IT service provider, steal customer data 2026-07-13 at 19:34 By Sinisa Markovic German discount supermarket chain Lidl has notified customers in Germany, Belgium, and the Netherlands that customer data was stolen after attackers breached one of its IT service providers. In notices published on its support websites in Belgium and the Netherlands,

Hackers breach Lidl’s IT service provider, steal customer data Read More »

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe

cyber espionage, EU, News, Russian Federation, UK /

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe 2026-07-13 at 17:52 By Sinisa Markovic The EU and the UK jointly sanctioned dozens of Russian individuals and entities, accusing Moscow of coordinating a malicious cyber ecosystem targeting Europe, its member states, and international partners. The UK sanctioned 24 individuals and entities, while

EU and UK blacklist Russia’s cyber operators over efforts to destabilize Europe Read More »

Ransomware negotiator who betrayed clients sentenced to 70 months in prison

cybercrime, law enforcement, News, Ransomware, US DoJ, USA /

Ransomware negotiator who betrayed clients sentenced to 70 months in prison 2026-07-13 at 15:22 By Sinisa Markovic A former ransomware negotiator at incident response firm DigitalMint has been sentenced to 70 months in prison after admitting he shared confidential client information with the BlackCat ransomware group and later helped carry out ransomware attacks. Prosecutors say

Ransomware negotiator who betrayed clients sentenced to 70 months in prison Read More »

Fake OAuth client IDs are helping attackers slip past sign-in logs

authentication, credentials, cybercrime, Don't miss, Microsoft, Microsoft Entra ID, News, OAuth, Proofpoint, spoofing /

Fake OAuth client IDs are helping attackers slip past sign-in logs 2026-07-13 at 15:10 By Mirko Zorz Attackers running account enumeration against Microsoft cloud tenants have added a step that keeps their probing out of the usual telemetry. They spoof the OAuth client ID, the globally unique identifier assigned to an application and passed as

Fake OAuth client IDs are helping attackers slip past sign-in logs Read More »

Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers

Don't miss, enterprise, file-sharing, Hot stuff, News, Progress, threat /

Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers 2026-07-13 at 14:45 By Zeljka Zorz A “credible external security threat” targeting Progress Software’s ShareFile Storage Zone Controllers (SZC) – the on-premises, customer-managed server components where organizations store files shared via this popular enterprise platform – has spurred the company to

Security threat prompts Progress to disable ShareFile accounts, tell customers to shut down servers Read More »

Claude Code users keep 50% higher limits until July 19

Anthropic, Claude Code, News /

Claude Code users keep 50% higher limits until July 19 2026-07-13 at 12:06 By Anamarija Pogorelec Anthropic has extended a limited-time promotion that increases weekly usage limits in Claude Code by 50% through July 19, 2026, at 11:59 PM PT. When the promotion ends, weekly usage limits will return to their standard levels without any

Claude Code users keep 50% higher limits until July 19 Read More »

Why SBOMs, signing, and provenance still don’t tell you if software is safe

cybersecurity, DevSecOps, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, strategy, zero trust /

Why SBOMs, signing, and provenance still don’t tell you if software is safe 2026-07-13 at 09:30 By Help Net Security We have made real progress in software supply chain security, improving visibility into software components, authenticity and build integrity. Much of this progress traces back to Executive Order 14028, which pushed agencies, contractors and enterprises

Why SBOMs, signing, and provenance still don’t tell you if software is safe Read More »

Cynative: Open-source deep research agent

agentic AI, AWS, cybersecurity, Don't miss, GitHub, Hot stuff, LLMs, News, open source, software /

Cynative: Open-source deep research agent 2026-07-13 at 09:00 By Mirko Zorz Running a large language model against a live cloud account to hunt for security holes comes with an obvious hazard. An agent that holds real credentials and a mandate to poke around can delete a bucket, flip a permission, or leak a secret on

Cynative: Open-source deep research agent Read More »

Scroll to Top