Uncategorized

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs 2026-07-23 at 13:30 By RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise […]

Ex-NYC Mayor Eric Adams targeted in bonkers Chinese AI videos with fake voiceover claiming ‘I am Jesus Christ’ 2026-07-23 at 13:00 By Hannah Fierick, Natalie O’Neill “My name is Eric Leroy Adams, I am Jesus Christ,”  he declares in the phony AI footage.“I’m gonna give you a new Libertarian constitution.” This article is an excerpt

Smart Video and AI-Powered Tools Are Reshaping Campus Security 2026-07-23 at 12:00 By Campuses require far more security than the traditional gates and guards. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access 2026-07-23 at 11:51 By Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come under active exploitation in the wild. The security flaw, tracked as CVE-2026-16232 (CVSS score: 9.3), is

Tesla profit disappoints as Elon Musk’s AI spending surge leads to cash burn 2026-07-23 at 00:55 By Reuters Analysts warned it could become difficult for Tesla to keep up with its recent capital-spending pace. This article is an excerpt from Latest Technology News | New York Post View Original Source

GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier 2026-07-23 at 00:08 By Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings will drop from $20,000-$30,000+ to a fixed $10,000, while its permanent invite-only VIP tier will pay $30,000 or

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data 2026-07-22 at 22:34 By Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user’s WhatsApp data. The shortcoming has been codenamed

Teen suing Mark Zuckerberg’s Meta over mental health harms drops his claims days before trial 2026-07-22 at 22:05 By Reuters R.K.C., who started using social media when he was about 8, said he became addicted to it, losing sleep and suffering from depression and anxiety, according to court filings. This article is an excerpt from

Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs 2026-07-22 at 21:07 By Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933

Reddit, news outlets weigh cutting Google off as AI summaries kill traffic: report 2026-07-22 at 20:45 By Thomas Barrabi USA Today, Politico, Reuters and The Economist are also reconsidering their ties to Google over its use of AI-generated “overviews” – which are placed at the top of search results instead of links to outside outlets

Chick-Fil-A Data Breach Exposes Customer Payment Data 2026-07-22 at 19:42 By Security leaders discuss the Chick-Fil-A breach. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Trump tech official accuses China’s Moonshot AI of ‘large-scale’ plot to steal from Anthropic 2026-07-22 at 19:05 By Reuters Moonshot recently unveiled Kimi K3, a 2.8 trillion-parameter model that it said is the world’s largest open-weight AI system and delivers performance approaching Anthropic’s frontier Fable model. This article is an excerpt from Latest Technology News |

Odyssey-Themed Scams Appear Within Hours of Film’s Release 2026-07-22 at 18:50 By The Odyssey by Christopher Nolan has been one of the most anticipated films of the summer, and not just by cinephiles — but by scammers, too.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

55M Impacted by Suno Data Breach 2026-07-22 at 18:00 By Suno, an AI music generation tool, was breached.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication 2026-07-22 at 17:22 By A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill’s “get_log_file” endpoint (“/api/w/{workspace}/jobs_u/get_log_file/{filename}”). “The

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark 2026-07-22 at 17:22 By OpenAI on Tuesday said a combination of its artificial intelligence (AI) models, including GPT-5.6 Sol and an “even more capable pre-release model,” was behind the security incident that targeted Hugging Face’s production infrastructure last week. The AI company

The Fastest Path to AI Adoption Runs Through Security 2026-07-22 at 17:22 By Security leaders who build fast, visible paths to AI adoption are becoming the most valued partners in their organizations. AI governance done right gives security teams the visibility they need, employees the tools they want, and CISOs the strategic influence they have

Why Modern SOCs Need Multi-Layered Detections 2026-07-22 at 15:21 By The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today, AI-equipped attackers are simply outpacing defenses. Most intrusions now bypass endpoint and malware-based detection entirely. The CrowdStrike Global Threat Report estimates around 79% of attacks

4 Application Control Updates That Help Teams Move Faster 2026-07-22 at 13:00 By Larry Howarth Support for more devices, privileged access, simplified sign-ins, and keeping Linux environments current—all without loosening security This article is an excerpt from SECURITY.COM View Original Source

Police Dismantle Kratos Phishing Kit Built to Steal Microsoft 365 Sessions and Bypass MFA 2026-07-22 at 11:39 By German and US law enforcement have taken down the core infrastructure of Kratos, described by German investigators as one of the world’s most widely used criminal phishing kits, and Indonesian authorities arrested the man they say developed