News

Police dismantle Kratos phishing platform behind 15,000 monthly campaigns

cybercrime, EU, law enforcement, News, phishing /

Police dismantle Kratos phishing platform behind 15,000 monthly campaigns 2026-07-22 at 11:02 By Sinisa Markovic German and US law enforcement have dismantled the infrastructure behind Kratos, a notorious phishing-as-a-service (PhaaS) platform. Its alleged developer and administrator was arrested in Indonesia by local police. Seizure banner (Source: BKA) The takedown was led by the Frankfurt public […]

Police dismantle Kratos phishing platform behind 15,000 monthly campaigns Read More »

Small teams are the heaviest users of AI coding agents

agentic AI, AI, code, Don't miss, Features, GitHub, Hot stuff, News, research, software development /

Small teams are the heaviest users of AI coding agents 2026-07-22 at 09:00 By Sinisa Markovic The pull request arrives with the tests already run and the description already written, the work of an agent that handled the whole thing on its own. Somebody still has to read it. On GitHub that somebody is usually […]

Small teams are the heaviest users of AI coding agents Read More »

Snowpick: Open-source ServiceNow exposure scanner

AppOmni, Bishop Fox, cybersecurity, Don't miss, GitHub, News, open source, ServiceNow, software, Varonis /

Snowpick: Open-source ServiceNow exposure scanner 2026-07-22 at 08:30 By Mirko Zorz An employee opens a company service portal, searches the knowledge base, and drops a file onto a ticket. Someone who never signed in can send a request to that same portal and get records back. Bishop Fox ran that test across 166 ServiceNow instances […]

Snowpick: Open-source ServiceNow exposure scanner Read More »

Security teams keep finding critical flaws after scheduled testing ends

AI, cybersecurity, News, penetration testing, report, security ROI, security testing, Synack /

Security teams keep finding critical flaws after scheduled testing ends 2026-07-22 at 08:00 By Anamarija Pogorelec Enterprise environments change between scheduled security assessments, leaving organizations with periods where new vulnerabilities can go undetected. Synack’s State of Continuous Security Validation report found that 95% of surveyed organizations identified high- or critical-severity vulnerabilities outside planned testing windows […]

Security teams keep finding critical flaws after scheduled testing ends Read More »

AI can’t fix cybersecurity’s hiring problem

AI, automation, certificates, Compliance, News, regulation, report, SANS, skill development /

AI can’t fix cybersecurity’s hiring problem 2026-07-22 at 07:30 By Anamarija Pogorelec Organizations are redefining cybersecurity roles through workforce frameworks and placing greater emphasis on verified skills as AI and new regulatory requirements change hiring. The SANS 2026 Cybersecurity Workforce Survey found demand for specialists in new roles more than doubled over the past year, […]

AI can’t fix cybersecurity’s hiring problem Read More »

Cloud operations become the next big role for agentic AI

access controls, agentic AI, AI, automation, Cloud, cybersecurity, investment, News, report, Unisys /

Cloud operations become the next big role for agentic AI 2026-07-22 at 07:00 By Anamarija Pogorelec Companies are using agentic AI to manage growing application environments, automate routine tasks, and support decisions. Business and IT leaders increasingly see the technology as part of cloud application management, according to Unisys’ AI & Cloud Insights Report. To […]

Cloud operations become the next big role for agentic AI Read More »

AI agents tricked into recommending malicious GitHub repositories

GitHub, Island, Malware, News /

AI agents tricked into recommending malicious GitHub repositories 2026-07-21 at 17:27 By Sinisa Markovic Roughly 7,600 malicious GitHub repositories were uncovered, more than 800 of them posing as AI Skills or Model Context Protocol (MCP) servers, in a wave that peaked in April 2026, according to Island. The scale of the FakeGit operation (Source: Island) […]

AI agents tricked into recommending malicious GitHub repositories Read More »

JadePuffer returns with ransomware built to target AI models and infrastructure

agentic AI, AI, Don't miss, Hot stuff, LLMs, machine learning, News, Ransomware, Sysdig, threat /

JadePuffer returns with ransomware built to target AI models and infrastructure 2026-07-21 at 16:38 By Zeljka Zorz JadePuffer, the threat actor behind the recently documented extortion operation executed end-to-end by an AI agent, is now attempting to leverage ENCFORGE, novel ransomware created to target AI and machine learning (ML) infrastructure. The extortion contact embedded in […]

JadePuffer returns with ransomware built to target AI models and infrastructure Read More »

Cisco’s open-weight Antares models make vulnerability localization cheaper

AI, Cisco, Don't miss, Hugging Face, LLMs, News /

Cisco’s open-weight Antares models make vulnerability localization cheaper 2026-07-21 at 16:01 By Mirko Zorz A security analyst opens an unfamiliar repository, pulls up a vulnerability advisory, and starts hunting for the file where the weakness lives. The naming conventions belong to someone else. Evidence sits in scattered corners of a codebase that runs to thousands […]

Cisco’s open-weight Antares models make vulnerability localization cheaper Read More »

SonicWall SMA zero-days were exploited weeks before disclosure

0-day, Don't miss, Hot stuff, intrusion, Malware, News, secure access, SonicWall, Volexity /

SonicWall SMA zero-days were exploited weeks before disclosure 2026-07-21 at 13:35 By Zeljka Zorz Two recently disclosed SonicWall SMA 1000 vulnerabilities – CVE-2026-15409 and CVE-2026-15410 – were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances, Volexity researchers revealed. The intrusions began as early as June 22, […]

SonicWall SMA zero-days were exploited weeks before disclosure Read More »

Fake FBI agents target people who already got scammed

deepfakes, FBI, fraud, News, scams /

Fake FBI agents target people who already got scammed 2026-07-21 at 13:21 By Sinisa Markovic Scammers are impersonating FBI personnel who supposedly handle Internet Crime Complaint Center (IC3) complaints, using that disguise to deceive and revictimize people who already lost money once. The IC3 published the update on July 20, 2026, building on an earlier […]

Fake FBI agents target people who already got scammed Read More »

AWS wants GuardDuty to automate the first steps of threat investigations

agentic AI, AI, AWS, News, threat detection /

AWS wants GuardDuty to automate the first steps of threat investigations 2026-07-21 at 12:14 By Anamarija Pogorelec Amazon GuardDuty investigation agent is now in public preview. The feature provides AI-powered investigations of GuardDuty findings, AWS accounts and AWS organizations, helping security teams reduce investigation time. During the public preview, the investigation agent is available at […]

AWS wants GuardDuty to automate the first steps of threat investigations Read More »

Estée Lauder discloses data breach tied to Oracle EBS vulnerability

breach, CVE, data breach, News, Oracle /

Estée Lauder discloses data breach tied to Oracle EBS vulnerability 2026-07-21 at 12:01 By Sinisa Markovic Cosmetics company Estée Lauder disclosed a data breach tied to a vulnerability in Oracle E-Business Suite (EBS) used for the company’s human resources operations. Estée Lauder is one of the largest beauty companies in the world, known for its […]

Estée Lauder discloses data breach tied to Oracle EBS vulnerability Read More »

Open-source maintainers still work underfunded as sponsorship crosses $100 million

DevOps, GitHub, News, open source /

Open-source maintainers still work underfunded as sponsorship crosses $100 million 2026-07-21 at 11:37 By Anamarija Pogorelec A maintainer patches a library late at night that ships inside thousands of products, and no invoice follows. Sebastián Ramírez and Caleb Porzio spent years in that position. Ramírez, known as tiangolo, builds tools that other Python projects depend […]

Open-source maintainers still work underfunded as sponsorship crosses $100 million Read More »

The air gap is a myth and other OT security truths

CISO, critical infrastructure, cyber resilience, Don't miss, energy sector, Features, Hot stuff, interoperability, News, opinion, Risk Management, strategy, threat modeling, tips /

The air gap is a myth and other OT security truths 2026-07-21 at 09:00 By Mirko Zorz Benjamin Bachmann, Director Group Information Security at Bilfinger, speaks with Help Net Security about defending industrial plants. He explains why attackers want to control operations instead of stealing data, and why the air gap is mostly a myth. […]

The air gap is a myth and other OT security truths Read More »

Nobody was checking the drives that encrypt your laptop

backup, Don't miss, Encryption, firmware, hardware, Hot stuff, KIOXIA America, Lenovo, Micron Technology, News, research, Samsung, SSD, storage, Western Digital /

Nobody was checking the drives that encrypt your laptop 2026-07-21 at 08:30 By Anamarija Pogorelec A drive ships with a label promising hardware encryption. You plug it in, set a password, and trust the chip inside to handle the rest. Millions of laptops and workstations run this way, on solid-state drives built to the TCG […]

Nobody was checking the drives that encrypt your laptop Read More »

Cybersecurity jobs available right now: July 21, 2026

cybersecurity jobs, News /

Cybersecurity jobs available right now: July 21, 2026 2026-07-21 at 07:00 By Anamarija Pogorelec Application Security Analyst Stellantis | USA | On-site – View job details As an Application Security Analyst, you will perform application security testing using SAST, DAST, IAST, and other assessment tools to identify vulnerabilities and support remediation efforts. You will integrate […]

Cybersecurity jobs available right now: July 21, 2026 Read More »

AI-generated reports push GNOME to shorten its disclosure window

Linux, News, open source, vulnerability disclosure /

AI-generated reports push GNOME to shorten its disclosure window 2026-07-21 at 06:53 By Anamarija Pogorelec Volunteer maintainers of open source projects now receive a steady flow of security vulnerability reports produced with AI tools. Many arrive with no mention that a language model helped write them. The volume has grown enough that GNOME is revising […]

AI-generated reports push GNOME to shorten its disclosure window Read More »

The Odyssey piracy scams surface hours after its theatrical debut

cybercrime, Malware, Malwarebytes, News, scams /

The Odyssey piracy scams surface hours after its theatrical debut 2026-07-20 at 21:59 By Sinisa Markovic Christopher Nolan’s The Odyssey had barely reached theaters before scammers began targeting people searching for pirated copies, according to Malwarebytes. Within hours of the film’s release, researchers found two separate scams running on cloned piracy sites: fake browser warnings […]

The Odyssey piracy scams surface hours after its theatrical debut Read More »

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel

cyber espionage, Group-IB, Iran, Malware, Microsoft 365, News /

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel 2026-07-20 at 20:20 By Sinisa Markovic Microsoft 365 calendars have become a hiding place for espionage malware, with commands and stolen files stashed inside appointments dated to the year 2050, researchers from Group-IB discovered. Targeted campaign tied to Iranian espionage activity The malware, which Group-IB […]

HOLLOWGRAPH malware turns Microsoft 365 calendars into an espionage channel Read More »

Scroll to Top