Uncategorized

Google loses fight against EU’s record $4.7B fine over alleged antitrust practices 2026-07-02 at 20:18 By Taylor Herzlich Google on Thursday lost its last bid to overturn a record-breaking $4.7 billion antitrust fine from the European Union, the latest blow as overseas regulators crack down on Big Tech. This article is an excerpt from Latest […]

The Visibility Challenge Nobody Asked For 2026-07-02 at 19:30 By Alex Campbell The same technology protecting online activity is concealing malware, C2 traffic, and data exfiltration. Here’s the fix. This article is an excerpt from SECURITY.COM View Original Source

ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories 2026-07-02 at 18:49 By This week’s security news is mostly about weak spots. Browsers, bots, sandboxes, AI systems, and email flows all show the same problem in different ways. Everything looks normal until someone tests a small gap and finds a way through. […]

Elon Musk’s Tesla shocks Wall Street with record sales — but shares still tumble 2026-07-02 at 18:08 By Reuters The strong figures suggest Tesla’s mainstay auto business is regaining momentum after two straight annual sales declines. This article is an excerpt from Latest Technology News | New York Post View Original Source

US government would get 5% stake in OpenAI under Sam Altman proposal: report 2026-07-02 at 17:19 By Ariel Zilber Sam Altman has argued that broad public ownership is the best way to ensure Americans benefit from the enormous wealth AI is expected to generate. This article is an excerpt from Latest Technology News | New […]

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API 2026-07-02 at 16:04 By The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that’s designed to gain surreptitious access to a victim’s email correspondence via the Google API. “In this campaign, the attackers focused their attention on corporate […]

Identity Lifecycle Management Wasn’t Built for AI Agents  2026-07-02 at 14:30 By Identity lifecycle management was architected around a person with an employment record, a manager, and a departure date. AI agents have none of those. As autonomous principals proliferate across enterprise environments, the governance model built for humans develops structural blind spots that traditional […]

Why Response Time Is Becoming the Missing Metric in Workplace Safety and Security 2026-07-02 at 14:00 By Even the strongest prevention programs cannot eliminate every risk. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack 2026-07-02 at 12:13 By Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking […]

FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations 2026-07-02 at 11:00 By The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx ransomware operations, indicating that the verified, stolen credentials were intended for follow-on intrusions. “An operator tied to FortiBleed’s infrastructure was found actively working negotiation panels for both groups, […]

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos 2026-07-02 at 10:24 By Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run […]

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation 2026-07-02 at 09:41 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-45659 (CVSS score: 8.8), is a case […]

Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters 2026-07-02 at 01:43 By Argo CD, a widely used tool for deploying software to Kubernetes, has an unpatched flaw in its repo-server component that lets an unauthenticated attacker run code, provided they can reach the component’s internal network port. Synacktiv, which found the […]

19-Year-Old Scattered Spider Suspect Extradited to Face U.S. Hacking Charges 2026-07-02 at 01:43 By A teenager accused of belonging to the hacking group Scattered Spider has been extradited from Finland to face U.S. charges of conspiracy, computer intrusion, and fraud, the U.S. Department of Justice announced on July 1. Peter Stokes, 19, a dual U.S. and Estonian […]

SEO-Poisoned Software Sites Abuse ScreenConnect to Deploy AsyncRAT 2026-07-01 at 20:53 By Unknown threat actors are leveraging the ScreenConnect remote access tool as a way to deploy and execute AsyncRAT. Kaspersky said the activity is part of a “massive, multi-domain, multi-language” campaign that distributes malicious installer archives hosted on spoofed websites. These installers masquerade as […]

VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer 2026-07-01 at 20:18 By Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social engineering and Blogger pages to deliver an information stealer called PureLogs. The activity has been codenamed VEIL#DROP by Securonix. It’s suspected that the initial payloads are distributed […]

Sony to stop releasing PlayStation games on discs as online sales dominate 2026-07-01 at 18:38 By Reuters The change will not apply to games released, or already scheduled for disc release, before 2028. This article is an excerpt from Latest Technology News | New York Post View Original Source

Ousaban Banking Trojan Targets Iberian Bank Users with Fake PDF Lures 2026-07-01 at 18:26 By A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal. Fortinet’s FortiGuard Labs identified the campaign in May 2026. It opens with a phishing PDF disguised as a corrupted file, checks that the visitor is […]

Adobe Patches 7 CVSS 10.0 Flaws in ColdFusion and Campaign Classic 2026-07-01 at 18:25 By Adobe has released patches for multiple maximum-severity security flaws impacting Adobe ColdFusion and Adobe Campaign Classic. The ColdFusion updates “resolves critical and important vulnerabilities that could lead to arbitrary code execution, privilege escalation, arbitrary file system read, and security feature bypass,” Adobe […]

Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands 2026-07-01 at 17:42 By Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor’s safety sandbox and run any command on a developer’s computer. There is no click to fall for and no approval […]