Uncategorized

Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries 2026-06-22 at 15:45 By Google has set September 30, 2026, as the day it begins enforcing Android developer verification in the first four countries, and the major device-maker app stores are in from the start. On that date, certified Android phones in Brazil, Indonesia, Singapore, […]

Stop Your Legacy Infrastructure from Hijacking Your AI Agents 2026-06-22 at 14:58 By Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs are still not accounting for – how attackers are circumventing AI security programs by using legacy infrastructure to hijack AI agents. AI […]

⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More 2026-06-22 at 13:55 By It’s Monday again. This week’s threat list looks painfully familiar: abused integrations, fake tools, poisoned websites, ransomware crews trying to shut down security tools, and mobile malware asking for way too much control. The annoying part […]

Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices 2026-06-22 at 12:11 By Canada’s spy service got a judge’s permission to reach into infected servers, home routers, and IoT gear sitting on Canadian soil and neutralize two foreign-run botnets. The Federal Court released a public version of the ruling on June 15. It is the […]

AIBOMs: Bringing AI Security Out of the Shadows, A Practical Guide for Security Professionals 2026-06-22 at 12:00 By AIBOMs are no longer optional; they are essential for securing AI deployments. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network 2026-06-22 at 09:57 By A new malware family is turning forgotten home routers into a distributed reconnaissance and proxy network, not the DDoS botnet these devices usually end up in. QiAnXin’s XLab calls it AryStinger and counts at least 4,300 infected routers, a total it says […]

INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific 2026-06-22 at 09:06 By A new report from INTERPOL has revealed a “dramatic increase” in cybercrime in Asia and the South Pacific, fueled by rapid digitalization, internet penetration, new technologies, organized criminal networks, and a disparity in cybersecurity maturity. According to INTERPOL’s 2025/2026 Asia […]

GM replaces more than 1,000 workers with 50 robots at flagship Detroit plant: ‘We’re disgusted’ 2026-06-21 at 22:43 By Brandon Cruz “If AI continues to be used as an accessory to that crime, it has to be stopped.” This article is an excerpt from Latest Technology News | New York Post View Original Source

Cybersecurity firm IDs unfixable security flaw that affects seven iPhone models — is yours on the list? 2026-06-20 at 20:39 By Ben Cost There’s no cure for this digital virus. This article is an excerpt from Latest Technology News | New York Post View Original Source

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys 2026-06-20 at 12:56 By Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that’s installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers […]

Unpatchable ‘usbliter8’ Exploit Breaks Apple A12 and A13 SecureROM Boot Chain 2026-06-19 at 21:37 By Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution inside the SecureROM of Apple’s A12 and A13 chips. That code is burned into the silicon at manufacture. No software update can reach it. Affected devices […]

The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes 2026-06-19 at 21:33 By The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands out to affiliates for impairing system defenses before deploying the encryptor. This mature portfolio of EDR-terminating tools is […]

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution 2026-06-19 at 20:38 By Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent to load an attacker’s web page, and that page’s JavaScript can reach a […]

World’s first AI museum is vibrant sensory overload — but is it really ‘art’? 2026-06-19 at 20:37 By Linda Laban It interacts with visitors via a wearable sensory wrist device that captures body heat, heart rate and more. This article is an excerpt from Latest Technology News | New York Post View Original Source

Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites 2026-06-19 at 18:07 By Dutch law enforcement authorities, along with counterparts from Canada , Germany, and the U.S., have disrupted malicious infrastructure associated with SocGholish and cleaned up nearly 15,000 infected WordPress websites. “With these actions we deprive cybercriminals of access to infected computer systems,” Maikel […]

CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices 2026-06-19 at 17:00 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday urged Fortinet customers with FortiGate appliances to take steps to secure against ongoing malicious activity aimed at thousands of internet-accessible devices. The sweeping campaign, believed to be the work of Russian-speaking […]

From Assistive to Agentic: The AI Shift That’s Redefining Threat Management 2026-06-19 at 15:38 By Introduction The average enterprise security team has 40 or more security tools, giving a lot of visibility into internal telemetry and asset data. But often, these tools are working in siloes, generating (overlapping) alerts and data. And yet, breach dwell […]

Forget Data Leakage: Shadow AI’s Real Threat Is Access Control 2026-06-19 at 13:30 By The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public AI tools. Security teams responded with usage policies, domain blocks, and data loss prevention rules. That response made sense at the time. It […]

8 XDR Questions From the Show Floor 2026-06-19 at 13:00 By Paul Miller And how XDR keeps getting better every day This article is an excerpt from SECURITY.COM View Original Source

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data 2026-06-19 at 12:03 By Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incident impacting the competitive intelligence company on June 11, 2026. To that end, organizations will be unable to connect to […]