Uncategorized

Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild 2026-06-30 at 08:04 By A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cyber. The vulnerability, tracked as CVE-2026-46817 (CVSS score: 9.8), refers to an improper privilege management and authentication flaw in Oracle Payments that […]

Ford rehires experienced engineers after AI misses the mark 2026-06-30 at 05:03 By Fox Business Ford has rehired experienced human engineers to help address the shortcomings of artificial intelligence (AI) tools meant to tackle quality issues in the automaker’s production processes. This article is an excerpt from Latest Technology News | New York Post View Original Source

Chinese AI is now on par with Anthropic in terms of cybersecurity: report 2026-06-30 at 00:34 By Marc Vartabedian Chinese artificial intelligence models have caught up to top U.S. systems in cybersecurity – a shift that could add pressure on the White House as it scrambles to figure out its domestic AI policy. Security researchers

How digital price tags are spreading at retailers like Walmart — and sparking ‘surveillance’ fears 2026-06-30 at 00:34 By Lisa Fickenscher Union officials have suggested that the digital tags could eventually be used to exploit so-called biometric data that identifies shoppers who enter stores — in particular facial recognition data — to charge customers different

Rocket Lab buys satellite pioneer Iridium for $8B – setting up showdown with SpaceX 2026-06-29 at 22:10 By Marc Vartabedian Rocket Lab is buying Iridium Communications in an $8 billion cash-and-stock deal – equipping the rocket maker with a global satellite network and wireless spectrum that could help it compete with Elon Musk’s SpaceX. The

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input 2026-06-29 at 21:40 By Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every query and every character typed into the address bar through an attacker-controlled server before redirecting users

Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks 2026-06-29 at 20:48 By The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, deploying new malware and turning a legitimate cloud service into its command channel. Acronis Threat Research Unit found active compromises inside Indian government networks, including

WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private 2026-06-29 at 20:48 By WhatsApp on Monday officially announced the start of global reservations of usernames with an aim to protect the privacy of more than three billion users on the messaging platform. The optional feature is designed to help users connect with someone

⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More 2026-06-29 at 17:41 By This week was a reminder that attackers do not always need big tricks. One small mistake, one old access path, one missed patch, and suddenly the door is open. The noise is not all noise, either. Forums

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers 2026-06-29 at 16:36 By New findings unearthed by Infoblox show that more than 236,000 websites are using investment scam templates built using a legitimate Chinese open-source, cross-platform application development framework called DCloud Uni-App. The templates power bogus cryptocurrency exchanges, multi-language pig-butchering operations, WhatsApp

Why Post-Quantum Cryptography Starts With Credentials 2026-06-29 at 14:42 By Today’s encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography protecting it will soon be broken by quantum computers. Although no machine today can break elliptic curve cryptography or RSA, quantum hardware is advancing rapidly and will

Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse 2026-06-29 at 14:40 By A Russian advanced persistent threat (APT) group has continued to evolve and expand its malware arsenal as part of its ongoing cyber onslaught against Ukraine throughout 2025. Slovakian cybersecurity company ESET said it observed 35 distinct spear-phishing campaigns mounted by

Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw 2026-06-29 at 12:56 By A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2 that lets a malicious or compromised SSH server trigger memory corruption on a connecting client, with possible code execution. No credentials, no user interaction. The bug affects every

Microsoft Removes 119 Edge Extensions That Hid Malware in Images and Fonts 2026-06-29 at 11:32 By Microsoft has shut down a long-running malicious extension operation on the Edge Add-ons store that hid its payloads inside ordinary image and font files, then woke up days after install to steal credentials and run ad fraud. The company

Why Insider Threats Deserve a Spot at the Top of Your Risk List 2026-06-29 at 11:00 By Most people picture insider threats one way — the disgruntled employee, the corporate spy, the contractor who walked out with a thumb drive. Those exist, and they matter, but they’re not the majority of what this category actually

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer 2026-06-29 at 10:31 By Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS hosts. “This attack avoids the most common npm execution

Ukraine Says Russian Intelligence Used Fake Support Texts to Steal Messaging Credentials 2026-06-27 at 20:27 By The Security Service of Ukraine (SSU) said it, together with the U.S. Federal Bureau of Investigation (FBI), uncovered a long-running campaign orchestrated by Russian intelligence services to break into the messaging accounts of government officials, military personnel, politicians, and

US allows Anthropic to release Mythos AI to ‘trusted’ US organizations 2026-06-27 at 19:17 By Reuters Anthropic’s powerful AI model, Mythos 5, gets government go-ahead for “trusted” US organizations after a two-week ban. This article is an excerpt from Latest Technology News | New York Post View Original Source

OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards 2026-06-27 at 15:19 By OpenAI on Friday released three versions of GPT-5.6, called Sol, Terra, and Luna, as a limited preview to a small number of companies as part of an ongoing engagement with the U.S. government. While Sol is the latest flagship model

FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys 2026-06-26 at 22:38 By The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, and the operators have added a step: they now coax targets into handing over their Signal Backup Recovery Key. Hand it over once, and the attacker can restore