Uncategorized

Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library 2026-07-22 at 09:00 By Cybersecurity researchers have discovered a NuGet typosquat that’s unlike the typical information-stealing malware distributed via package registries: usual info-stealers: it’s designed to rig live game results on Digitain. The package, named “Newtonsoftt.Json.Net,” masquerades as the Newtonsoft.Json library and is a trojanized […]

Security Experts Discuss the Evolution of JADEPUFFER 2026-07-22 at 09:00 By Researchers have discovered a new development with the agentic threat actor JADEPUFFER.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs 2026-07-22 at 01:07 By Apple has moved to address a security flaw in its Hide My Email service that enabled users’ real email addresses to be unmasked, effectively undermining the feature’s privacy guarantees. 404 Media reported Tuesday that a fix for the […]

ChatGPT encouraged Alabama mom’s suicide, lawsuit alleges: ‘You are not delusional. You are prophetic’ 2026-07-21 at 23:02 By Ariel Zilber Christian Faith Madison, 29, died last year after she was hit by an oncoming vehicle on an Alabama highway. This article is an excerpt from Latest Technology News | New York Post View Original Source

Designers are producing ‘adversarial’ styles meant to scramble surveillance cameras 2026-07-21 at 21:04 By Faran Krentcil The future’s so invasive, you have to wear shades. This article is an excerpt from Latest Technology News | New York Post View Original Source

Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities 2026-07-21 at 20:30 By Google’s DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber, a specialized artificial intelligence (AI) model built atop 3.5 Flash that’s designed to discover, validate, and patch vulnerabilities quickly and efficiently. According to the tech giant, […]

AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code 2026-07-21 at 20:30 By Hidden text on a web page was enough to make Kiro, AWS’s agentic coding IDE, rewrite its own configuration file and run an attacker’s code on a developer’s machine, with no approval step able to stop it. […]

Chinese AI firms that rip off US models could face sanctions, Treasury Secretary Scott Bessent warns 2026-07-21 at 20:16 By Thomas Barrabi As The Post has reported, AI giants like Anthropic, OpenAI and Google have each raised alarms about China-based labs using unauthorized distillation – a technique where a more advanced model is used to […]

China-based Moonshot AI seeks $50B valuation — and could go public this year: report 2026-07-21 at 19:44 By Thomas Barrabi The company – founded in 2023 by Carnegie Mellon-trained AI researcher Yang Zhilin – drew global attention with the launch of Kimi K3. The large-language model was trained on 2.8 trillion parameters, making it the […]

Healthcare Software Provider Craneware Announces Data Breach 2026-07-21 at 18:05 By A software provider for the healthcare sector revealed it experienced a data breach.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Critical SharePoint RCE CVE-2026-50522 Under Active Exploitation After Public PoC 2026-07-21 at 17:57 By A third SharePoint Server flaw patched by Microsoft as part of its Patch Tuesday update for July 2026 has come under active exploitation, per watchTowr. The vulnerability in question is CVE-2026-50522 (CVSS score: 9.8), a critical deserialization of untrusted data in […]

Zimbra Patches Critical SNMP Command Injection and Four XSS Vulnerabilities 2026-07-21 at 17:47 By Zimbra has rolled out fixes to address multiple critical security issues, including a command injection flaw in the Simple Network Management Protocol (SNMP) monitoring component. As many as nine security vulnerabilities have been patched in Zimbra 10.1.20. Topping the list is […]

Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access 2026-07-21 at 17:04 By Threat actors have been observed exploiting a now-patched high-severity Palo Alto Networks PAN-OS vulnerability as an entry point to deploy Qilin (aka Agenda) ransomware on victim environments. Arctic Wolf Labs said it investigated multiple intrusions in June 2026 that began with […]

N-day is Becoming N-Hour. Patching Faster Won’t Save You. 2026-07-21 at 16:30 By Every patch is a confession. The moment a vendor ships a security fix, the diff between the old code and the new code tells anyone watching exactly what was broken and where. Turn that diff back into a working exploit, and you […]

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit 2026-07-21 at 16:30 By A cloud tenant using nothing but ordinary GPU access can push a data center’s power draw up and down fast enough to threaten the grid it runs on, with no exploit and no break-in. That is the claim […]

79% of Ransomware Attacks Start with Compromised Identities 2026-07-21 at 16:00 By The most common method used to enact ransomware is the abuse of compromised credentials.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Open-Source Android AI Agents Could Let Invisible Screen Text Run Code on Host PCs 2026-07-21 at 14:58 By An Android app that can draw over other windows and write to shared storage can slip instructions to the AI agent driving that phone, in text no human eye will ever see. Two more steps, and the […]

Eye on the Sky: SkySafe Named 2026 Golden Eagle Award Winner 2026-07-21 at 12:00 By This year Security Magazine partnered with The National Center for Spectator Sports Safety and Security (NCS4) to present the Golden Eagle Award to SkySafe as the 2026 Golden Eagle Award winner for its case study submission, “University of Illinois Sets […]

WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning 2026-07-21 at 11:59 By Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites. The two security flaws, tracked as CVE-2026-63030 and CVE-2026-60137, have been codenamed wp2shell. “By the […]

New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack 2026-07-21 at 10:34 By Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first documented earlier this month. The same operator has now been spotted deploying ENCFORGE, a new compiled Go ransomware designed to […]