Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter TAG-195 Upgrades MaaS Ecosystem with Modular Tools Inside a DPRK BlueNoroff ClickFix Kit SourTrade: Browser-Assembled Malware Delivered Through Malvertising MedusaHVNC: A Hidden Desktop That Steals Live Windows Sessions Unpacking “Cruciferra”: An Analysis of a…
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens Adobe fixed a maximum-severity vulnerability flaw in…
CALIFORNIA, USA, 2nd August 2026, CyberNewswire
Plus, what AI content does to our brains, Meta’s mountain of lawsuits, the million-dollar talent wars for math geniuses and more.
Google is preparing a new Chrome security feature that would block policy-installed extensions from hijacking the New Tab page or changing the default search engine. […]
Almost every company can now produce a list of what’s inside its software. Almost none can prove the list is right. Related: SBOM’s role in cybersecurity Construction solved this a century ago. Every steel beam carries a stamp naming the mill that poured it. Every concrete truck arrives with a ticket recording the batch. Every…
Tips for navigating a feed full of machine-made content.
Every time someone presses the button on a poker machine, it gets logged. Multiply that across a venue’s floor, a full year of play, and every cash-in, cash-out, ATM trip and…
The best investment I’ve made for my MacBook Pro only cost me $13 – here’s why I recommend it.
In a rare show of bipartisan agreement, both the U.S. House and the Senate have voted to approve bills aimed at battling fraud — especially scams aimed at older adults.
Including New Secret Switch, Enterprise Storage Flagship, Backup Appliances, AI-Driven Surveillance And More
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Nono: Open-source sandbox for AI agents AI coding agents run with the same permissions as their users, meaning they can access sensitive files, credentials, and production systems. A prompt injection, hallucinated command, or simple mistake can quickly turn that access…
After attacks hit 30+ Minnesota water systems, CISA urged utilities to remove internet-exposed PLCs and strengthen OT security. Between Sunday and Monday, July 26 and 27, a coordinated cyberattack hit operational technology (OT) systems at more than 30 community water utilities across the state, according to Minnesota IT Services (MNIT). “A coordinated cyberattack targeted operational technology…
Discover essential strategies for creating a secure certificate and key inventory to protect your organization from rising digital threats.
Introduction This diary provides indicators from an Atomic MacOS (AMOS) stealer infection that I generated in my lab on July 31st, 2026. This was distributed through a web page from getmacouscloud[.]com with instructions to paste text into a macOS Terminal window, supposedly for “macOS toolkit,” but instead the text is a command to retrieve and…
Silicon Valley startups are setting up open models, with some operating on shoestring budgets because of limited interest from venture capitalists.
For most of the past two years, AI-generated video was a novelty. The clips were short, physically incoherent, and unmistakably synthetic — good for a viral demo, useless for…
Security experts find validation of their fears after AI hacking models from OpenAI and Anthropic escaped corporate test-beds.
An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking 1,082.65 BTC worth about $70.2 million at the time. Galaxy Research mapped the sweep and tied it to a firmware flaw in Coldcard, the Bitcoin-only hardware wallet made by Canadian firm Coinkite. A March 2021 firmware integration error routed seed generation to…
Feeding your vehicle’s symptoms or a mechanic’s quote to a bot can give deeper insights, but the automotive pros urge caution.
Balaji Srinivasan says he believes America is descending into anarchy. His solution: Build a new country from scratch.
A critical vulnerability in the Active Storage framework can allow an unauthenticated attacker to read arbitrary files from a Rails application, and potentially escalate to remote code execution (RCE). […]
Microsoft says Russian hackers hijacked hotel Wi-Fi portals to spread malware and steal Microsoft 365 tokens from travelers. Microsoft Threat Intelligence disclosed CaptiveCrunch, a campaign it attributes to Storm-2945, an operational sub-cluster of Midnight Blizzard, the Russian SVR-linked group also known as APT29 and Cozy Bear. Since early May 2026, Storm-2945 has been manipulating DNS…
Adobe fixed a maximum severity vulnerability in Campaign Classic that could let attackers run code remotely without user interaction. Adobe has addressed a critical vulnerability, tracked as CVE-2026-48449 (CVSS score of 10.0), in Adobe Campaign Classic, the company’s enterprise marketing automation platform. The flaw is caused by incorrect authorization and could allow attackers to execute…
A three-part podcast series about how the rise of AI-generated content is warping our sense of what is real, and the dangers that presents.
Professional handcraft is the key to unlocking value from emerging technology and data, suggest Aston Martin Aramco F1 executives and partners.
KeySmart’s SmartCard (Gen 3) is perfect for Android and Apple users, and it’s 20% off with a ZDNET-exclusive code right now.
Investors are coming around to the idea that Big Tech spending on AI can make sense—as long as there is a cloud-computing business involved.
Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on July 27, 2026, removed the malicious code, notified affected clients, and reported it to authorities. Anyone who visited a site carrying the affected script on July 27 and…
These affordable gaming laptops were neck and neck in my testing, but one pulled ahead for me.
Most phishing campaigns rely on the fact that the victim is afraid to loose “something”: money, access to information, … Many brands have been impersonated by campaigns but I spotted some phishing emails that focus on AI services like ChatGPT. Yesterday, I found this email that was properly designed but also sent with a very…
Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-48449, carries a severity score of 10.0 on the CVSS scoring system. It has been described as a case of incorrect authorization that could…
A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, microphone audio, and keystrokes, Microsoft said in its latest report. Researchers track the operation as CaptiveCrunch and attribute it to Storm-2945. It assesses Storm-2945 to be an operational sub-cluster of…
Explore CISA’s latest SBOM guidance to see if it truly enhances software security or if it misses key risk management improvements.
Server DRAM contract prices jumped by around 90% in the March quarter, and TrendForcehttps://www.trendforce.com/presscenter/news/20260331-12995.html forecast another 58 to 63%…
iTWire TV interviews Neil Westhof, HP’s head of personal assistant category for Australia and New Zealand, about the launch of the HP Elite Board G1.
Finding it difficult to choose a suitable VPN service provider? Here’s a checklist for choosing VPN service. Virtual Private Networks, otherwise known as VPNs, are designated services used to spoof locations on the internet. They are mainly deployed to bypass geo-restrictions and access censored content on the web. There are numerous VPN service providers out…
Jacob Tsimerman won the biggest prize in math. Now he’s working on the most important problem of his career.
Bets on consumer chatbots and flashy side projects overshadowed AI coding opportunity, which rival Anthropic used to capture the lead.
OpenAI’s Hugging Face incident disclosure prompted Anthropic to review its own evaluations.
The attack chain begins with a spear-phishing email containing a link to an encrypted archive.
Bitsight researchers uncovered the operation by monitoring an expired domain used for factory backdoors and telemetry.
The Italian Senate’s EU Policies Committee approved a decree allowing the storage of facial biometric data from cameras in sensitive public areas for seven days.
The I-GRIP initiative connects law enforcement agencies across 196 countries with financial institutions to expedite the process of stopping fraudulent money transfers.
Researchers from four universities conducted a study pitting AI chatbots against human scammers in a simulation of “pig butchering” scams, a form of romance scam that escalates to fake cryptocurrency investments.
Pharmaceutical company Amgen says it suffered a data breach after threat actors stole corporate data and patient information stored in multiple cloud systems operated by third-party service providers. […]
The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. […]
South Korea warned that nation-state actors are using phishing and compromised websites to silently infect citizens and businesses. South Korea agencies (The National Intelligence Service, the National Police Agency, the Korea Internet & Security Agency, and the Financial Security Institute) jointly published an advisory warning that a state-backed hacking group is actively targeting South Korean…
Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors’ clipboards with ones controlled by an attacker. […]
Anthropic said its Claude-based security models gained unauthorized access to the sensitive production environments of three outside organizations during internal testing designed to measure the models’ offensive cyber capabilities. The events, which Anthropic revealed Thursday, are the second revelation in 10 days that AI models from the world’s wealthiest providers have trespassed into protected networks,…
AI is beginning to do more than find software vulnerabilities. Anthropic says its Claude Mythos Preview model has now contributed new techniques for analyzing the mathematics behind cryptographic systems. The model developed an improved attack against the post-quantum signature candidate HAWK and accelerated an existing line of attack against a seven-round version of AES-128, according…
President Donald Trump blamed Minnesota Friday for the cyberattacks its water systems have suffered in recent days, saying the state was “behind it.” Trump said the state being “incompetent” was the issue, but it wasn’t clear whom he thought actually conducted cyberattacks that U.S. investigators have attributed to Iran — if, perhaps, somehow Minnesota incompetently…
Apple’s iPhone and Mac businesses are generating record revenue, but worsening component constraints could limit shipments. Apple reported its strongest June quarter on record, with revenue rising 16% year over year to $109.4 billion and earnings per share reaching $2.02. The biggest drivers were the iPhone and Mac businesses, which both posted record June-quarter sales.…
AI-powered managed crowdsourced testing company Testlio announced Wednesday it has become the first and only crowdsourced testing platform currently listed on both the AWS Marketplace and Microsoft Marketplace, following a strong first half of 2026. The company reported 55% year-over-year bookings growth during the first six months of the year, driven by expansion in payments…
Artificial intelligence is changing ransomware at a pace many enterprises are struggling to match. While most cybersecurity conversations continue to center on preventing attacks, the growing sophistication and speed of AI-enabled ransomware is forcing organizations, and the channel partners that support them, to rethink cyber resilience from the standpoint of recovery. AI expands the ransomware…
Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations.
Cybersecurity vendor Coro is expanding its EMEA partner footprint, adding distribution relationships and recruiting MSPs and VARs as European customers seek simpler security platforms, greater automation, and more control over where their data is stored. Ingo Schaefer, vice president of sales for EMEA at Coro, said persistent cybersecurity talent shortages and tighter budgets are pushing…
Identity systems sit at the center of enterprise security, but they are also one of the first places attackers look when launching ransomware and other disruptive cyberattacks. In this eSecurityPlanet video podcast, Marty Momdjian, Global Field CTO at Semperis, joins the conversation to discuss how attackers compromise Active Directory and Entra ID, what warning signs…
Identity systems sit at the center of enterprise security, but they are also one of the first places attackers look when launching ransomware and other disruptive cyberattacks. In this eSecurityPlanet video podcast, Marty Momdjian, General Manager, Ready1 & Strategic Initiatives at Semperis, joins the conversation to discuss how attackers compromise Active Directory and Entra ID,…
Today, we’re releasing the HIPAA Security Rule on AWS: Technical Safeguards Implementation and Readiness Guidance. This helps covered entities and business associates configure, implement, and evidence compliance with the HIPAA Security Rule Technical Safeguard requirements (45 CFR §164.312) when building healthcare workloads on AWS. The HIPAA Security Rule’s Technical Safeguards (§164.312) define five standards and…
Hims & Hers patients may have shared more than symptoms and treatment concerns when they sought care online. The Federal Trade Commission (FTC) has filed a lawsuit against Hims & Hers, alleging that the company allowed advertisers to collect and share sensitive patient information while telling customers their health information would remain confidential. The complaint,…
OpenAI says it has reduced the price of two GPT-5.6 models, cutting Luna’s API price by 80% and Terra’s by 20% as it works to make its models more efficient. […]
A Chinese-speaking threat actor is suspected to be behind a fresh wave of cyber attacks targeting government organizations mainly located in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab Republic, since January 2025. These targeted organizations operate across several sectors, such as healthcare, research, government offices,
Google has used AI tools to detect and patch 1,072 vulnerabilities in versions 149 and 150 of its Chrome browser, the company announced in a blog post. That’s more vulnerabilities patched than in the previous 23 updates combined, according to Bleeping Computer. One vulnerability detected by AI had been present in Chrome for 13 years…
A couple-dozen changes to SBOM fields will make them more comprehensive, but some argue that the framework lacks real risk-management improvements.
Microsoft has quietly pushed out a new OneDrive Photos app to Windows 11 users. What’s it all about?
In the U.S., regulation can protect incumbents while discouraging entrepreneurs. China gives fast-moving startups room to grow before exerting state control.
What you’ll get back depends on how much you spent – but don’t expect much.
A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human involvement. […]
South Korea’s Personal Information Protection Commission (PIPC) has fined KT Corp. 53.9 billion won ($37.4 million) after finding that weak network access controls allowed hackers to expose the personal information of 16,647 mobile customers. The regulator said hackers accessed KT’s wireless network through an unauthorized femtocell, a small base station used to extend mobile coverage,…
OWASP NHI guidance highlights detection gaps as the biggest security challenge.
Brinks Home is investigating a cybersecurity incident that attackers claim began with a Microsoft Entra voice phishing campaign targeting employee identities. The company confirmed an attacker has threatened to publicly release information allegedly stolen from its systems. “The party responsible for this situation has threatened to release information it claims to have taken. We are…
Disclosure: This article was created in collaboration with Status Labs.
Apple’s outgoing CEO, Tim Cook, bade an emotional farewell to analysts and shareholders on Thursday as the company announced a record June quarter. His successor, John Ternus, takes over at the beginning of September with the company seemingly in solid shape. The results were impressive, though some worrying challenges were confirmed. Apple managed to set a new…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water and wastewater systems sector. […]
Worried about your personal AI chats being exposed? Here’s how to tighten your privacy across several of the major chatbots.
Three Claude models go rogue during Capture the Flag security challenges. Here’s the trail of damage each left behind.
Behind the rogue agent’s attack on Hugging Face was a particular sequence of human decisions. We all need to pay better attention – because threat actors are learning, too.
LinkedIn’s ‘Seems like AI slop’ button is coming to users, and its existence signals a changing perspective on AI infiltrating digital communities.
Cybersecurity researchers have shed light on a previously undocumented Go-based loader framework called HollowFrame and a Rust-based malware family tracked as Matryoshka. According to Blackpoint Cyber, the intrusion sequence begins with a spear-phishing message containing a link to an encrypted archive, which holds a Windows Shortcut (LNK). Executing the file triggers a multi-stage chain that
Walking around Dubai, it’s hard to believe a war is still going on in neighboring countries. No missiles have struck the city, and it was clear during a recent visit that local residents are keeping to their routines. The biggest public worry, as it has been in many parts of the world, is the extreme…
Over at Best Buy, the 2024 Moto G Play dropped down to $100, making this Android one of the budget buys around.
Fortnite scam pages like the ones below appear by the dozen every day, recycled endlessly under different names and designs. One version promises $50 from a fake superhero collaboration. Another claims it can calculate what your locker is worth. Both lead to the same destination: a fake Epic Games login page designed to steal your…
As newspapers move online, the buildings that once housed their printing presses need new occupants. The Minnesota Star Tribune has just sold its old printing plant on the edge of Minneapolis to the aptly named property developer Legacy Investing, which plans to create a new data center there. has found the ideal way to bring…
It’s a sign of the times: Security conference DefCon has added smart glasses to its list of banned audio- or video-recording devices. The organizers have said that, with no consistent way to understand whether smart glasses are recording or not, they have taken the step to ban them in their entirety on the grounds that…
It’s a sign of the times: Security conference DefCon has added smart glasses to its list of banned audio- or video-recording devices. The organizers have said that, with no consistent way to understand whether smart glasses are recording or not, they have taken the step to ban them in their entirety on the grounds that…
Here’s why in a world where AI models can hack other companies, we have to outreason our adversaries.
Software supply chain attacks are evolving beyond compromised software packages into attacks targeting the people, identities, and workflows used to build and distribute software. Intel 471’s report, Poisoned Trust: How Supply Chain Attacks Weaponize Developer Ecosystems, found that threat actors are increasingly targeting developer accounts, CI/CD pipelines, repositories, IDEs, and publishing infrastructure. By compromising these…
We tested the best laptop cooling pads to keep your device running smooth with powerful cooling, RGB lights, high RPM and more.
ZDNET’s latest Data Byte highlights the Netgear Orbi 370’s performance in our lab testing. Here’s what the numbers say.
Discover how to apply Zero Trust principles to secure AI adoption, manage agentic risk, and mitigate the threats of frontier AI models.
A Chinese-speaking threat actor has been using DeepSeek’s AI models to orchestrate cyber-attacks targeting Asian organizations
Managed detection and response services give organizations access to 24/7 threat monitoring, investigation, and incident response without requiring them to build a complete security operations center. They combine security technology, automation, and human expertise to help organizations identify and contain threats more efficiently. We evaluated five leading MDR providers for 2026 based on threat coverage,…
Bitsight says some cheap Android TV boxes have shipped with apps that rewrite their hardware identity to mimic Samsung, Huawei, Xiaomi, or Vivo phones, then click ads on websites run by the same operators. Researchers named the operation Fuyao and attributed it to Zhejiang Fengwo IoT Technology Co., Ltd., a mainland China company founded in…
OpenAI models going rogue, the first documented agentic ransomware operation, and an emergent AI-driven supply chain threat made for a packed July roundup
Organizations are rapidly embedding artificial intelligence (AI) into enterprise resource planning (ERP) systems, but many cybersecurity leaders remain unconvinced that their organizations are prepared to secure these environments. According to the 2026 Onapsis State of AI, Security, and ERP report, AI adoption is accelerating across SAP, Oracle, and Salesforce environments even as concerns about security,…
