Linux has a wealth of applications, but sometimes the smaller tools get overlooked. Here’s a list of those I’d prefer never to be without.

Read more →

The nature of security threats is changing. AI hasn’t just driven up energy prices and consumer electronics costs, it’s also ushering in a new era of AI-augmented cyberattacks, one where the time between a flaw being discovered and being exploited is shrinking fast. Apple is already signaling that it sees this coming. Why Apple moved first…

Read more →

McAfee says a Google Notes browser extension is replacing copied crypto payment details, putting wallet transfers at risk for Chrome, Brave, and Microsoft Edge users.

Read more →

An aggressive password-spraying campaign targeting Microsoft 365 environments generated more than 81 million login attempts over a two-week period. […]

Read more →

It was one of the biggest tech headlines in June: Amid the race leading up to the initial public offerings (IPOs) of artificial intelligence (AI) giants, the United States used its “blocking card” to disable Anthropic’s latest models. Citing national security concerns, the Trump Administration forced the company to prevent non-U.S. citizens (even in the…

Read more →

A Brazilian banking trojan called Ousaban is going after Windows users who bank in Spain and Portugal. Fortinet’s FortiGuard Labs identified the campaign in May 2026. It opens with a phishing PDF disguised as a corrupted file, checks that the visitor is really in Spain or Portugal, and hides its real payload inside an image. The goal…

Read more →

Adobe has released patches for multiple maximum-severity security flaws impacting Adobe ColdFusion and Adobe Campaign Classic. The ColdFusion updates “resolves critical and important vulnerabilities that could lead to arbitrary code execution, privilege escalation, arbitrary file system read, and security feature bypass,” Adobe said in an alert released Tuesday. The vulnerabilities are listed

Read more →

The maker of ProtonMail and ProtonVPN says its second-generation chatbot is never trained on user data.

Read more →

Setting up a VPN on your smart TV blocks hackers from accessing your network and stealing your data. But there are other benefits, too.

Read more →

Two flaws in Cursor, an AI code editor, could let a single, ordinary-looking prompt break out of the editor’s safety sandbox and run any command on a developer’s computer. There is no click to fall for and no approval box to ignore. Cato AI Labs found the pair and named them DuneSlide. They are tracked as CVE-2026-50548 and CVE-2026-50549,…

Read more →

Dropzone AI has signed an exclusive distribution agreement with QBS Software to bring its Agentic SOC platform to managed security service providers (MSSPs) and value-added resellers (VARs) across Europe, the Middle East, and Africa (EMEA). Exclusive distribution agreement targets MSSPs and VARs with agentic SOC capabilities The partnership expands access to Dropzone AI’s autonomous security…

Read more →

Securonix said the Veil#Drop campaign abuses Google Blogspot to deliver PureLog Stealer in memory

Read more →

Fake Interpol investigation emails are targeting small businesses with Proton Drive links that deliver ransomware, encrypt files, and route victims to Tox chat.

Read more →

Threat intelligence is only as useful as the context behind it. Criminal IP explains how its integration enriches threat indicators in OpenCTI with risk scoring, infrastructure intelligence, and phishing analysis. […]

Read more →

Torrance, California, USA, 1st July 2026, CyberNewswire

Read more →

A recently disclosed critical security flaw impacting Progress Kemp LoadMaster is seeing active exploitation attempts, according to an advisory from eSentire’s Threat Response Unit (TRU). The Canadian cybersecurity company said it identified exploitation attempts targeting CVE-2026-8037 (CVSS score: 9.6), an operating system (OS) command injection flaw that could be exploited to achieve

Read more →

81 Million Login Attempts, 78 Compromised Accounts: The LSHIY Password Spray Hitting Azure CLI Huntress researchers have been tracking a massive automated password spray campaign against Microsoft Azure CLI environments since June 12, 2026. A password spray attack is when attackers try a small number of common passwords across many accounts instead of many passwords…

Read more →

This role makes the difference between your business winning and losing in the age of AI.

Read more →

FortiGuard says the Brazilian banking trojan Ousaban is targeting Spain and Portugal via phishing

Read more →

Anthropic has announced its Fable 5 and Mythos 5 models will once again be available to the public as it has reached an agreement with the Commerce Department to deploy the AI models with new guardrails and classifiers meant to address jailbreaks. In a blog posted Tuesday, Anthropic said that export controls that prevented their…

Read more →

CyberFOX is adding another puzzle piece to its cybersecurity platform, this time by acquiring Timus Networks, a cloud-native Secure Access Service Edge (SASE) vendor focused on Zero Trust Network Access (ZTNA). The deal is designed to bring secure remote access, secure web browsing, adaptive policy enforcement, and always-on connectivity to the CyberFOX platform.  It’s also…

Read more →

A Swedish court ruled that the search giant favored its own price-comparison service over Klarna’s.

Read more →

NetRise is bringing a managed software supply chain risk management offering to the federal market through a partner-led model, giving federal integrators and managed service providers a new way to help agencies evaluate software risk beyond vendor questionnaires, attestations, and traditional software bills of materials. NetRise targets federal software supply chain visibility The offering is…

Read more →

Exabeam has expanded its security operations platform with new capabilities to help enterprises detect, investigate, and mitigate risks associated with AI agents, autonomous workflows, and human-to-agent activity. The July release broadens Exabeam’s Agent Behavior Analytics, Outcomes Navigator, Nova, Threat Center, Attack Surface Insights, and data collection workflows.  For channel partners, the update reflects a growing…

Read more →

Planning ahead to defend against cyber threats is the work that keeps events uneventful.

Read more →

Cybersecurity researchers have flagged a new malware artifact generated using DeepSeek that constructed a novel attack path combining “unrealistic browser-malware concepts with a real browser capability” to turn it into a working ransomware technique that runs entirely inside the browser on both Windows and Android devices. “This is the first documented case where a frontier…

Read more →

Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical security flaw. […]

Read more →

Netzilo has announced expanded AI agent governance and runtime enforcement capabilities for Amazon Bedrock AgentCore and other major AI agent harnesses. As enterprises move AI agents from experimentation into production, agents are becoming a new enterprise edge. They operate across cloud platforms, agent runtimes, orchestration frameworks, developer environments, user devices, mobile phones, and on-premises systems.…

Read more →

If there was ever a time when it dawned on users how full of holes the software they’ve been using is, it’s now. Last month Microsoft pushed out its biggest patch Tuesday update ever. And yesterday, on the last day of June, Google published an update which included a whopping 382 security fixes. The stable…

Read more →

Dawnguard announced the public launch of its security architecture automation platform, making it available to organizations looking to design, build, and operate secure cloud-native systems from day zero through production. The launch marks the company’s move from enterprise design partnerships into general availability, following a year of platform development and customer validation. Alongside the product…

Read more →

Intruder has announced the launch of its Free plan, providing security, IT, and DevOps teams ongoing access to professional-grade vulnerability management, cloud security, and attack surface management at no cost. Smaller organizations face the same threats as Fortune 500 companies, but without the budgets and headcount to match. Mid-sized businesses appear in breach headlines week…

Read more →

CISA confirms BlueHammer (CVE-2026-33825) is now used in ransomware attacks to gain SYSTEM privileges through Microsoft Defender. BlueHammer, tracked as CVE-2026-33825, has moved from proof-of-concept noise to real ransomware attacks in the wild, the US CISA confirms. BlueHammer allows attackers to escalate privileges locally in Microsoft Defender. The vulnerability, along with two other zero-days dubbed…

Read more →

The US government has reversed export restrictions on Anthropic’s frontier AI models Fable 5 and Mythos 5, allowing the company to resume global access after nearly three weeks of disruption triggered by concerns over the models’ cybersecurity capabilities. “As of today, June 30, the export controls on Fable 5 and Mythos 5 have been lifted,”…

Read more →

A website framed as a game led AI assistants to submit private GitHub file contents.

Read more →

The new classifier in Fable 5 blocks the jailbreak technique that prompted the US export controls “in over 99% of cases”

Read more →

Microsoft has fixed the GIF functionality in the Emoji Panel for Windows 11 and Windows Server users after the provider shut down its service. […]

Read more →

Microsoft on Tuesday said it’s accelerating its quantum safe security roadmap, stating technology advances in quantum computing are making it essential to replace existing encryption standards sooner than previously expected. “Advances in quantum research and development have shifted the risk horizon,” Mark Russinovich, chief technology officer of Microsoft Azure, said. “We believe

Read more →

Earlier this year, Microsoft quietly deleted a post that argued Windows 11’s built-in Microsoft Defender Antivirus was good enough for most people. But independent evidence says they were right.

Read more →

Accounts-payable staff at U.S. companies keep receiving invoice emails that look like they come from vendors they already work with. One landed at a life-sciences company in April 2026, addressed to the person who handles payments and written in the voice of a Wisconsin contractor’s billing contact. It asked about invoices that appeared to still…

Read more →

Toolkits to wage phishing campaigns are a now-venerable instrument for cybercriminals, but researchers recently turned up details on something like a full-fledged “business email compromise-as-a-service” platform. Cisco Talos said Wednesday that it had found an operator panel dubbed ARToken, which shares infrastructure and other things in common with, and as an affiliate to, the EvilTokens…

Read more →

Microsoft has brought forward its timelines for transitioning to post-quantum cryptography (PQC)

Read more →

Few apps are as essential to mobile productivity as the humble word processor. I think I’ve probably spent a solid seven years of my life staring at Google Docs on one device or another at this point, and those minutes only keep ticking up with practically every passing day. While we can’t do much about…

Read more →

The U.S. Federal Trade Commission (FTC) says Amazon will pay a $2.25 million civil penalty to settle charges that it blocked identity theft victims’ access to transaction records. […]

Read more →

Afterpay has given Australians a fresh way to pay off a new Mac, iPad, iPhone, Apple Watch or Apple Vision Pro, and the timing is clearly aimed at the upcoming iPhone and Mac…

Read more →

AI assistants like ChatGPT are supposed to be safe to use, with appropriate guardrails to stop people creating harmful content. However, a British AI security firm just figured out how to make ChatGPT produce explicit material. Mindgard, a company that tests AI engines for weaknesses, found that a slightly altered version of a benign viral…

Read more →

Aflac Japan has notified regulators that policy details and personal and banking information have been compromised

Read more →

Anthropic has introduced Claude Sonnet 5, the latest version of its general-purpose AI model, with improved reasoning, coding, tool use, and knowledge work capabilities. The model can make plans, use tools such as browsers and terminals, and complete tasks autonomously. Scores for Sonnet 5 on a variety of evaluations compared to those of Sonnet 4.6…

Read more →

The Eufy Omni S2 improves on its predecessor with four times the suction power, and an odor-free mop roller.

Read more →

Researchers found a shell injection flaw in 10 of 11 popular open-source AI agents, allowing attackers to bypass command filters. Adversa AI just published a survey, titled “GuardFall: a universal shell injection vulnerability in open-source AI agents,” of eleven open-source AI coding and computer-use agents, and the headline finding is uncomfortable: ten of them leave…

Read more →

Adobe has released security patches for seven maximum-severity vulnerabilities in the ColdFusion web app development platform and the Campaign Classic marketing automation platform. […]

Read more →

Large language models keep inventing web addresses that do not exist. Attackers have started buying those made-up domains before anyone else can, then hosting phishing pages on them to catch traffic that AI tools point their way. Palo Alto Networks’ Unit 42 calls the trick phantom squatting, and its new research shows it is already happening in…

Read more →

Anthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department lifted the export controls it had imposed on Fable and its more tightly controlled sibling Mythos 5 about two and a half weeks earlier. Fable 5 returns to users on Wednesday, July 1, across Claude.ai, the Claude Platform, Claude Code,…

Read more →

When I spoke at a recent cybersecurity awareness event for financial planners and tax advisors, the audience really engaged with the subject. As happens at conferences the world over, people often come up to speakers to ask follow-up questions, or just give their feedback about points made during the presentation. This time, it struck me…

Read more →

AZK Media today announced the appointment of multi-award-winning communications strategist Kathryn Goater as Senior Account Director, further strengthening the agency’s senior…

Read more →

Original content is the lifeblood of conversations and curiosities. Imagine a world without it: we could find a thousand ways to regurgitate the same material that’s already been created, but we would witness the decline of fresh ideas and arguments. Website owners fuel the ecosystem of ideas, news, and interesting tidbits, but they face the…

Read more →

Cybersecurity researchers have warned of a “massive, ongoing, automated password spray attack” aimed at Microsoft’s Azure command-line interface (CLI), compromising dozens of accounts in the process. The activity, per Huntress, originates from an IPv6 address range (2a0a:d683::/32) controlled by internet infrastructure provider LSHIY LLC (AS32167). “Between June 12 and June 26, the threat

Read more →

ClickFix, the trick that fools people into running malware by hand, has quietly grown a back office. New research shows the malicious commands behind its fake “prove you’re human” pages are now handed out by API-driven servers that give each visitor the same malware in a different disguise. The same research also turned up a…

Read more →

Most people who handle sensitive data already encrypt it in two places. They lock it down when it sits on a hard drive, and they lock it down when it moves across a network. There has always been a third moment that stayed open. The instant a computer pulls that data into memory to work…

Read more →

Most engineering organizations write code with AI, and a good number of them keep that code away from customers. A Flux survey of engineering leaders and practitioners found that nearly half run AI-generated code in production. Almost every company in the sample uses AI somewhere in development, with under 5% reporting no plans to adopt…

Read more →

By: Max Gannon, Cofense Intelligence Cofense Intelligence is observing a clear shift in phishing operations: threat actors are moving beyond broad, one-size-fits-all campaigns and adopting platform-aware delivery that adapts to the victim’s device, browser, and environment. What began as simple Windows-focused malware distribution campaigns has evolved into more sophisticated campaigns that can selectively deliver credential…

Read more →

Multiple vulnerabilities have been discovered in Google Chrome, the most severe of which could allow for arbitrary code execution. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution in the context of the logged on user. Depending on the privileges associated with the user an attacker could then install…

Read more →

Nearly three in five banks do not enforce the strongest email authentication protections as impersonation threats continue to grow.

Read more →

A new Microsoft Teams admin policy, Manage external bots and their access to meetings, gives organizations greater visibility and control over external bots in meetings. The policy identifies bots and applies safeguards before they are admitted. Microsoft will begin retiring the existing Require verification by participants (CAPTCHA) meeting policy. Admitting a bot should be a…

Read more →

In this Help Net Security video, Greg Young, VP Cybersecurity and Corporate Development at TrendAI, explains how to build Enterprise Risk Management that a board will pay for. Drawing on nearly four decades in cybersecurity, including time as a CISO and 14 years as a Gartner analyst, he argues that boards fund ERM when they…

Read more →

Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that could be exploited by an attacker to facilitate arbitrary file reads or trigger a denial-of-service (DoS) condition. The vulnerabilities are listed below – CVE-2026-8451 (CVSS score: 8.8) – An insufficient input validation

Read more →

Every AI accelerator on the planet is hungry, and lately it’s memory it craves most: the capacity to hold enormous models right next to the chip.

Read more →

Meta is letting WhatsApp’s 3 billion users hide their phone number behind a username, the privacy trick Signal and Telegram shipped years ago. Reservations open this week. The…

Read more →

In this post, I will talk about the global market trends and business developments shaping the future. Global markets are changing faster than ever, creating both opportunities and challenges for businesses, investors, and professionals. You may find it increasingly difficult to predict customer demand, keep pace with technological advancements, respond to economic uncertainty, or identify…

Read more →

The group compromised at least 10 regional organizations, including two state-owned entities, and deployed a new backdoor.

Read more →

Sultan to lead growth strategy, customer engagement, and market expansion across Asia Pacific and Japan

Read more →

The model has been shut down for 2½ weeks due to security concerns, roiling the AI industry.

Read more →