Uncategorized

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023 2026-06-18 at 18:06 By Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups in 2026, claiming no less than 830 victims since August 2023. “The disruption of LockBit […]

The Scripts on Your Checkout Page Are Now a PCI DSS Problem 2026-06-18 at 18:06 By An independent PCI assessor tested Reflectiz against the new PCI DSS rules. Here is the verdict: See the full QSA assessment here → When a customer types their card number into your checkout, their browser is running far more

DragonForce Hackers Abuse Microsoft Teams Relays to Hide Backdoor.Turn C2 Traffic 2026-06-18 at 16:30 By Threat actors associated with the DragonForce ransomware have been observed using a custom Go-based remote access trojan (RAT) called Backdoor.Turn to conceal command-and-control (C2) traffic inside Microsoft Teams relay infrastructure. According to findings from Broadcom-owned Symantec and Carbon Black, the

Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network 2026-06-18 at 14:58 By If an autonomous AI agent interacts with your company’s core intellectual property today, can your security team instantly name the person who authorized it? For most enterprises, the answer is a simple no. The rush to adopt internal AI

The Scripts on Your Checkout Page Are Now a PCI DSS Problem 2026-06-18 at 14:00 By An independent PCI assessor tested Reflectiz against the new PCI DSS rules. Here is the verdict: See the full QSA assessment here → When a customer types their card number into your checkout, their browser is running far more

Microsoft Confirms RoguePlanet Defender Zero-Day, Says Patch is in Development 2026-06-17 at 21:49 By Microsoft has formally disclosed that it’s working to release a patch to address a Defender zero-day codenamed RoguePlanet. The vulnerability has now been assigned the CVE identifier CVE-2026-50656 (CVSS score: 7.8), with the tech giant describing it as a privilege escalation

Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments 2026-06-17 at 21:49 By An unknown threat actor has been observed leveraging paid or promoted posts on legitimate news websites to drum up buzz for their warez, according to new findings from Check Point Research. The threat actor also has at their disposal a

Anthropic’s Dario Amodei urges G7 to ‘resist temptation to splinter’ on AI — as workers gripe Trump ‘bullied’ firm 2026-06-17 at 21:34 By Thomas Barrabi The plea came during a lunch attended by President Trump, OpenAI CEO Sam Altman and other tech leaders who gathered in Évian-les-Bains, France – just days after the Trump administration

Kodak Confirms Breach Following Claims 2.2M Records Stolen 2026-06-17 at 19:59 By This breach may include internal corporate data and the personal information of customers.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

UM-Flint Department of Public Safety Honored for Fostering Community Trust 2026-06-17 at 19:35 By The University of Michigan-Flint’s Department of Public Safety was named the Voices for Children Advocacy Center’s 2026 Service Organization of the Year. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Junior Hacker Used Tailscale and OpenSSH to Keep Access After His C2 Went Offline 2026-06-17 at 19:00 By A French-speaking attacker broke into a small French automotive business, planted a keylogger, and stole banking and email credentials. Ordinary stuff, until one move near the end. Before his command-and-control server went dark, he installed OpenSSH and

Why CTFs Are Becoming a Critical Measure of AI Readiness 2026-06-17 at 19:00 By As AI becomes more deeply embedded in security workflows, organizations face a new challenge: determining whether their teams are prepared to use it effectively. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Why Jeff Bezos predicts AI will create labor shortage amid his space rivalry with Elon Musk 2026-06-17 at 18:17 By Reuters Bezos about projects including his space venture Blue Origin and his new AI startup Prometheus, which is aimed at speeding up physical manufacturing. This article is an excerpt from Latest Technology News | New York

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats 2026-06-17 at 18:10 By Cybersecurity researchers have flagged a “coordinated malware campaign” on the JetBrains Marketplace that has published no less than 15 malicious plugins capable of exfiltrating artificial intelligence (AI) provider keys. “Every plugin poses as an AI coding assistant built

Another Year, Another Win: SE Labs® Recognizes Symantec® Endpoint Security 2026-06-17 at 17:00 By Shanleigh Reardon How SE Labs reinforces our belief that security should be tested and proven in the real world This article is an excerpt from SECURITY.COM View Original Source

Adversarial Exposure Validation Turns Security Visibility into Confident Prioritization 2026-06-17 at 15:21 By For security teams, the findings never stop, but confidence in knowing which ones matter is becoming harder to maintain. The problem is no longer visibility. It’s validation. Security teams must decide which findings warrant action while operating under constant pressure and incomplete

The Top 10 Attack Surface Exposures in 2026 2026-06-17 at 13:30 By Breaches don’t always start with a zero-day. An exposed admin panel can get brute-forced, or credentials reused from a previous attack. But when a vulnerability does drop — like MongoBleed earlier this year, which let attackers pull credentials and session tokens from server

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats 2026-06-17 at 12:38 By Cybersecurity researchers have flagged a “coordinated malware campaign” on the JetBrains Marketplace that has published no less than 15 malicious plugins capable of exfiltrating artificial intelligence (AI) provider keys. “Every plugin poses as an AI coding assistant built

Organizations’ Emergency Response Fails to Match Confidence Levels 2026-06-17 at 12:00 By Organizations overestimate their emergency response; Almost 50% of organizations faced a lateral movement attack in the last year. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

144 Mastra npm Packages Compromised via Hijacked Contributor Account 2026-06-17 at 10:38 By As many as 144 npm packages associated with the Mastra namespace (“@mastra/*”), a popular open-source JavaScript and TypeScript framework for building artificial intelligence (AI) applications, have been compromised as part of a software supply chain attack codenamed easy-day-js, per findings from JFrog,