Uncategorized

From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale 2026-07-10 at 14:39 By Most enterprises assume their asset inventory is close enough to accurate. The evidence suggests otherwise. According to a survey of over 600 security leaders in the 2026 Axonius Actionability Report, only 45% of organizations consolidate their asset […]

Exposed Hacker Server Reveals WP-SHELLSTORM Backdooring Thousands of WordPress Sites 2026-07-10 at 14:30 By A cybercrime crew left one of its own servers wide open on the internet for three weeks, and it exposed the operation’s inner workings: the hacking tools, the activity logs, and target lists naming more than 1.4 million websites. Far fewer

Michael Saylor’s recent Bitcoin sales are a worry for crypto investors 2026-07-10 at 14:00 By Charles Gasparino Is Saylor going to turn the current Bitcoin winter into the storm of the century for crypto?  This article is an excerpt from Latest Technology News | New York Post View Original Source

Humble Brag: Symantec® Data Center Security Achieves Common Criteria Certification 2026-07-10 at 13:00 By Muhammad Ihsan Enterprise-grade protection, independently verified This article is an excerpt from SECURITY.COM View Original Source

Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks 2026-07-10 at 12:42 By A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months) in prison in the U.S. for their role in conspiring with the now-defunct BlackCat ransomware operators to extort multiple victims and working with two other

Attackers Exploit ‘Ill Bloom’ Vulnerability to Drain $3.1 Million From Cryptocurrency Wallets 2026-07-10 at 12:42 By Security firm Coinspect has disclosed a crypto wallet flaw it calls Ill Bloom, and attackers are already using it. The flaw is in how some wallet software generated its recovery phrase, the words that control the money. When that phrase is made

Estonia to Grant Digital IDs to AI Agents 2026-07-10 at 09:00 By The nation intends to assign digital identification numbers to AI agents.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs 2026-07-09 at 23:06 By Datadog Security Labs is warning of “several overlapping campaigns” that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. “Operators rely on automated scraping tooling with custom or legitimate-sounding user agents, leveraging GitHub ‘ghost’ accounts that

New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware 2026-07-09 at 23:06 By Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older destructive programs bolted into one, offered as commands the operator can choose from. Each is

I spent 3 days with America’s biohackers — the secrets they swear weren’t what I expected 2026-07-09 at 22:54 By McKenzie Beard I asked over 30 biohackers about their favorite longevity tricks. Their answers shocked me. This article is an excerpt from Latest Technology News | New York Post View Original Source

ThreatsDay: Cloud Bucket Hijacking, Windows LPE Chain, Global Fraud Bust + 17 More Stories 2026-07-09 at 20:12 By Most security mess starts as admin work. A link gets clicked. A tool gets trusted. A bucket name gets reused. A setting stays loose because nobody wants to touch it. This week is full of that kind of

npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk 2026-07-09 at 20:12 By GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor authentication (2FA). The Microsoft-owned subsidiary noted that the following npm install behaviors

Meta patents ‘creepy’ AI device that tracks wearer’s sighs and laughter, medication intake 2026-07-09 at 19:08 By Thomas Barrabi The patent filing, which was filed on July 2, describes an “apparatus” for “emotional state analysis and real-time fitness coaching.” Meta wrote in part that the device would use insights such as whether the user is

GodDamn Ransomware Uses PoisonX Driver to Disable Endpoint Defenses 2026-07-09 at 15:46 By Cybersecurity researchers have flagged a new ransomware family called GodDamn that employs the PoisonX kernel driver to neutralize security software as part of its defense evasion strategy. According to a new report published by the Threat Hunter Team from Symantec, the ransomware

Summer of Clearinghouses 2026-07-09 at 15:46 By Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets it apart is that it was already real and running when we announced it — built quietly months earlier, heads down, taking findings

AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up 2026-07-09 at 15:26 By AI has changed how fast attacks move. Work that once took an attacker days now takes minutes. Using models like Mythos, attackers write tailored bait, pick targets, test what lands, and jump to the next host

Microsoft Patches RoguePlanet Defender Flaw That Can Grant SYSTEM Privileges 2026-07-09 at 14:30 By Microsoft has released security updates for a Defender vulnerability known as RoguePlanet, nearly a month after details of the flaw became public. The vulnerability, tracked as CVE-2026-50656 (CVSS score: 7.8), is a privilege escalation issue in the Microsoft Malware Protection Engine

Do you need ‘personalized sunlight’? New device boosts vitamin D —without going outside 2026-07-09 at 13:29 By Allie Yang A new product is on the market eliminating the 95% of UVA present in sunlight, claiming to deliver just enough UVB to stimulate vitamin D production. This article is an excerpt from Latest Technology News |

GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses 2026-07-09 at 13:00 By Threat Hunter Team Third iteration of ransomware from Hyadina developers who first launched the Monster ransomware in 2022. This article is an excerpt from SECURITY.COM View Original Source

Meta’s New AI Image Tool Lets Others Use Your Public Instagram Photos in AI Images 2026-07-09 at 11:28 By Meta has announced that its new artificial intelligence (AI) model Muse Image lets people use public Instagram posts and reels to generate AI content, and it’s enabled by default. “You can also @-mention Instagram accounts in