Uncategorized

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found 2026-07-13 at 20:17 By Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsing-history collector built into its official store version. The collector was dormant. An empty […]

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More 2026-07-13 at 18:05 By Somewhere right now, a security tool is quietly finding bugs faster than any human can fix them. That’s supposed to be the good news. The catch is that the attackers have the same tools, pointed the other […]

New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email 2026-07-13 at 16:49 By Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite what it thinks it knows about you. A single email can trick that agent into saving a false […]

Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft 2026-07-13 at 16:42 By A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial intelligence (AI)-assisted lure creation, and post-compromise mailbox operations targeting Microsoft 365 accounts. Distributed via Telegram and costing $400 […]

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory 2026-07-13 at 15:37 By Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory (AD) enumeration. “The script looked for the Domain Controller (DC) and mapped users, computers, and domains, before creating a directory and […]

Meta Files Patent for AI That Can Listen All Day and Track How You’re Feeling 2026-07-13 at 14:54 By Meta has filed a patent application for an AI that listens to your voice throughout the day, works out how it thinks you are feeling from the way you sound, and keeps a timestamped log of […]

Thinking Fast and Slow in the SOC: The Case for Combining Autonomous AI with Analyst Copilots 2026-07-13 at 14:37 By A few days ago, I was sitting with the CISO of a Fortune 50 company, walking through how his security team was thinking about AI agents in the SOC. Smart team. Serious program. They had […]

Misconfigured Server Reveals Three Evilginx Phishing Operations Targeting Microsoft 365 2026-07-13 at 14:33 By An attacker running a live Microsoft 365 phishing operation left a Python web server listening on a public port with directory listing switched on. The command that did it: python3 -m http.server 8080, was still sitting in the readable .bash_history. From that one […]

The Detection Gap: MITRE ATT&CK T1140 and T1105 2026-07-13 at 13:00 By Kirk Hasty MITRE ATT&CK Walkthrough: T1140 (Deobfuscate/Decode Files or Information), T1105 (Ingress Tool Transfer) This article is an excerpt from SECURITY.COM View Original Source

How China is ripping off cutting-edge AI from Anthropic, OpenAI — and threatening US national security 2026-07-13 at 13:00 By Thomas Barrabi Industry sources told The Post these distillation attacks are only getting more common and could help adversaries develop terrifying hacking or autonomous weapon capabilities – or even leapfrog ahead of US firms in […]

Security Leaders Discuss Exposure of 24B Credentials 2026-07-13 at 10:00 By Researchers discovered 8 terabytes of exposed credentials.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

iCagenda and Balbooa Forms Joomla Flaws Reportedly Exploited as Zero-Days 2026-07-13 at 08:36 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity security flaws impacting iCagenda and Balbooa extensions for Joomla to its Known Exploited Vulnerabilities (KEV) catalog, following reports of zero-day exploitation in the wild. The vulnerabilities, both rated 10.0 […]

Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install 2026-07-11 at 20:59 By Version 8.14.0 of the jscrambler npm package shipped with a malicious preinstall hook that silently drops and runs a native infostealer during installation, one build each for Windows, macOS, and Linux. Published on July 11, 2026, it needs no import and no CLI call. Installing […]

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns 2026-07-11 at 20:49 By Cybersecurity researchers have disclosed details of sustained cyber espionage activity against several Pakistani law enforcement organizations undertaken by suspected China- and India-aligned threat actors between February 2024 and April 2026. “At Balochistan Police, the compromised assets included servers hosting web applications that […]

Surgeons just used robots that look like humans to perform surgery for the first time 2026-07-11 at 19:27 By McKenzie Beard The future of surgery just scrubbed in. This article is an excerpt from Latest Technology News | New York Post View Original Source

Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions 2026-07-11 at 14:36 By Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code execution. The vulnerability has been described as a case of stored cross-site scripting (XSS) […]

Apple sues OpenAI for trade theft, sending shock waves through Silicon Valley 2026-07-10 at 23:50 By Ariel Zilber Apple sued OpenAI and two ex-employees in a bombshell suit accusing them of misappropriation of the consumer tech giant’s trade secrets. This article is an excerpt from Latest Technology News | New York Post View Original Source

URGENT – Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat 2026-07-10 at 23:49 By Progress Software has told ShareFile customers to shut down the Windows servers running their Storage Zone Controllers, confirming to The Hacker News that it is responding to a “credible external security threat.” The company has temporarily […]

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot 2026-07-10 at 20:42 By Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied as home routers, smart cameras, and the management chips inside data-center servers. Four of the bugs […]

Injective Labs GitHub Compromise Pushes Wallet-Key-Stealing npm Packages 2026-07-10 at 20:29 By Unknown threat actors compromised the Injective Labs SDK project’s GitHub repository and leveraged it to publish a malicious package on the npm registry to steal cryptocurrency wallet private keys and mnemonic seed phrases. The compromised version, @injectivelabs/[email protected], came embedded with fake telemetry functionality […]