Uncategorized

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos 2026-07-02 at 10:24 By Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run […]

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation 2026-07-02 at 09:41 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-45659 (CVSS score: 8.8), is a case

Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters 2026-07-02 at 01:43 By Argo CD, a widely used tool for deploying software to Kubernetes, has an unpatched flaw in its repo-server component that lets an unauthenticated attacker run code, provided they can reach the component’s internal network port. Synacktiv, which found the

19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges 2026-07-02 at 01:43 By A teenager accused of belonging to the hacking group Scattered Spider has been extradited from Finland to face U.S. charges of conspiracy, computer intrusion, and fraud, the U.S. Department of Justice announced on July 1. Peter Stokes, 19, a dual U.S. and Estonian

SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT 2026-07-01 at 20:53 By Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT. Kaspersky said the activity is part of a “massive, multi-domain, multi-language” campaign that distributes malicious installer archives hosted on spoofed websites. These installers masquerade as

VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer 2026-07-01 at 20:18 By Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social engineering and Blogger pages to deliver an information stealer called PureLogs. The activity has been codenamed VEIL#DROP by Securonix. It’s suspected that the initial payloads are distributed

Sony to stop releasing PlayStation games on discs as online sales dominate 2026-07-01 at 18:38 By Reuters The change will not apply to games released, or already scheduled for disc release, before 2028. This article is an excerpt from Latest Technology News | New York Post View Original Source

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures 2026-07-01 at 18:26 By A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal. Fortinet’s FortiGuard Labs identified the campaign in May 2026. It opens with a phishing PDF disguised as a corrupted file, checks that the visitor is

Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic 2026-07-01 at 18:25 By Adobe has released patches for multiple maximum-severity security flaws impacting Adobe ColdFusion and Adobe Campaign Classic. The ColdFusion updates “resolves critical and important vulnerabilities that could lead to arbitrary code execution, privilege escalation, arbitrary file system read, and security feature bypass,” Adobe

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands 2026-07-01 at 17:42 By Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor’s safety sandbox and run any command on a developer’s computer. There is no click to fall for and no approval

Meta contractors posed as teens to test rival AI chatbots on suicide, sex and drugs: report 2026-07-01 at 17:28 By Ariel Zilber The covert effort was managed by Meta contractor Covalen and targeted OpenAI’s ChatGPT, Google’s Gemini and Character.AI, according to Wired. This article is an excerpt from Latest Technology News | New York Post

US-based ‘Amazon of South Korea’ forced to recover laptop from bottom of Chinese river in bizarre data privacy clampdown: report 2026-07-01 at 16:12 By Thomas Barrabi A Coupang rep traveled to Shanghai on Dec. 17 to meet with the suspect and his lawyer, who handed over a desktop PC, four hard drives and copies, a

2026 Cybersecurity Assessment: The Gap Between Awareness and Resilience 2026-07-01 at 16:02 By Organizations have never had greater awareness of cyber risk. Yet turning that awareness into operational resilience has never been more challenging. The 2026 Bitdefender Cybersecurity Assessment confirms this is the case, as this year’s findings reveal a series of surprising contradictions. Here

Microsoft Accelerates Post-Quantum Cryptography Shift to 2029 2026-07-01 at 15:12 By Microsoft on Tuesday said it’s accelerating its quantum safe security roadmap, stating technology advances in quantum computing are making it essential to replace existing encryption standards sooner than previously expected. “Advances in quantum research and development have shifted the risk horizon,” Mark Russinovich, chief

Marc Andreessen is making the same audacious bet the Founding Fathers did: that America’s best days are ahead 2026-07-01 at 14:00 By Lydia Moynihan “We’re the best country in the world,” Marc Andreessen told The Post. “The idea that we still have that level of risk-taking spirit in the country … is a really, really

Phantom Squatting Uses AI-Hallucinated Domains for Phishing and Malware 2026-07-01 at 13:52 By Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before anyone else can, then hosting phishing pages on them to catch traffic that AI tools point their way. Palo Alto Networks’ Unit 42 calls the

AV-TEST Gives Symantec® Endpoint Security Complete a Perfect Score 2026-07-01 at 13:00 By Mark Kennedy From detection to protection, SES Complete is the total package This article is an excerpt from SECURITY.COM View Original Source

A CISO’s Guide to Robocall Mitigation: Applying MITRE ATT&CK to Voice-Based Threats 2026-07-01 at 10:00 By The challenge for security leaders is no longer simply blocking unwanted calls.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls 2026-07-01 at 09:46 By Anthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department lifted the export controls it had imposed on Fable and its more tightly controlled sibling Mythos 5 about two and a half weeks earlier. Fable

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts 2026-07-01 at 08:46 By Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line interface (CLI), compromising dozens of accounts in the process. The activity, per Huntress, originates from an IPv6 address range (2a0a:d683::/32) controlled