Uncategorized

Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs 2026-07-21 at 14:58 By An Android app that can draw over other windows and write to shared storage can slip instructions to the AI agent driving that phone, in text no human eye will ever see. Two more steps, and the […]

Eye on the Sky: SkySafe Named 2026 Golden Eagle Award Winner 2026-07-21 at 12:00 By This year Security Magazine partnered with The National Center for Spectator Sports Safety and Security (NCS4) to present the Golden Eagle Award to SkySafe as the 2026 Golden Eagle Award winner for its case study submission, “University of Illinois Sets

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning 2026-07-21 at 11:59 By Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites. The two security flaws, tracked as CVE-2026-63030 and CVE-2026-60137, have been codenamed wp2shell. “By the

New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack 2026-07-21 at 10:34 By Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first documented earlier this month. The same operator has now been spotted deploying ENCFORGE, a new compiled Go ransomware designed to

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution 2026-07-21 at 09:29 By Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber. In a post shared on X, the threat intelligence firm said it’s observing in-the-wild exploitation of CVE-2026-6875 (CVSS score: 9.5), a sandbox

Cyberattack Halts Coca-Cola’s Fairlife Productions 2026-07-21 at 08:00 By A company owned by Coca-Cola paused operations following a cyberattack.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Judge approves Anthropic’s $1.5B settlement of authors’ AI copyright lawsuit — first major case to settle 2026-07-21 at 01:54 By Reuters The case is one of dozens brought by copyright owners including authors and news outlets against tech companies over the training of their large language models. This article is an excerpt from Latest Technology News |

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware 2026-07-20 at 23:20 By Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI) skills or Model Context Protocol (MCP) servers to deliver a malware family known as SmartLoader as part of an ongoing campaign

China’s Moonshot AI pauses subscriptions for powerful Kimi K3 model due to surging demand 2026-07-20 at 21:02 By Thomas Barrabi The Beijing-based firm said Sunday it had experienced “unprecedented compute challenges” and would temporarily focus on ensuring it could serve its existing paid users. The large-language model was trained on 2.8 trillion parameters, making it

Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign 2026-07-20 at 20:29 By A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments, droppers, builder notes, and two campaign chains. One was already live against Windows users in Mexico,

Most American voters have favorable view of AI — despite media focus on controversies: poll 2026-07-20 at 20:04 By Thomas Barrabi In a national poll conducted by HarrisX, 56% of voters said they had a favorable view about AI, while 36% had an unfavorable view. 72% of respondents agreed that AI could help people spend

Hugging Face Confirms Data Breach Caused by Autonomous AI Agent 2026-07-20 at 19:16 By A host platform for AI models and datasets confirmed it had experienced a data breach.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

3 Ways to Defend Against LOTL Attacks Now 2026-07-20 at 18:53 By Shanleigh Reardon When trusted tools become part of the attack chain, the old protection techniques fall short. Here are three that work. This article is an excerpt from SECURITY.COM View Original Source

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050 2026-07-20 at 17:33 By A newly discovered espionage implant has been using a hijacked Microsoft 365 calendar as its command channel, planting operator instructions and smuggling out stolen files as attachments on calendar events dated to the year 2050. Group-IB, which named

Dina Atwell — Women in Security 2026 2026-07-20 at 17:06 By A career in the security industry isn’t something that Dina Atwell planned for, but as with many things with life, the profession found her. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Hannah Behnke — Women in Security 2026 2026-07-20 at 17:06 By At the age of 18, Hannah Behnke took her first step into the security world in a classic way: she got a job as a “mall cop.” This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Mythos Didn’t Break Your Security Program. Your Exposure Window Could. 2026-07-20 at 17:06 By The industry spent the initial months after Anthropic’s April 7 Mythos reveal focused on volume. How many new CVEs would Mythos add to an already overloaded pipeline? How quickly would the flood of AI-driven discovery overwhelm triage capabilities? How long would

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0-Day and More 2026-07-20 at 16:32 By A single request should not be able to do this much. But this week, small inputs led to code execution, memory loss, stolen keys, and disabled security tools. The paths were often simple: exposed systems, weak checks,

Security’s 2026 Women in Security 2026-07-20 at 16:30 By Recognized for their achievements and influence, this year’s honorees drive progress throughout their organizations. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine 2026-07-20 at 15:13 By At least one Russian intelligence service is systematically hijacking internet-connected security cameras across Europe and Ukraine, using the feeds to watch military transport routes, weapons shipments bound for Kyiv, and the locations of Ukrainian troops. That