Oracle’s July 2026 Critical Patch Update, its largest ever, contains 1,449 new security patches spanning 32 product families, from Oracle Database and E-Business Suite to PeopleSoft, GoldenGate, Java SE, and Fusion Middleware. Fusion Middleware was particularly hard hit, with new security patches for 355 security vulnerabilities, 219 of them remotely exploitable without authentication, meaning they…

Read more →

Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain complete control of a target environment. The high-severity flaw, tracked as CVE-2026-8933 (CVSS score: 7.8), impacts default installations of Ubuntu Desktop 24.04, 25.10, and 26.04. The disclosure comes…

Read more →

Malware targeting AI coding assistants and software developers’ automated workflows is spreading into more environments with more capabilities, placing defenders at a growing disadvantage. A malware strain dubbed Sandworm_Mode, first discovered by Socket in February, represents a growing threat to software development. According to a CrowdStrike report, the self-propagating worm can spread through code repositories…

Read more →

OpenAI models escaped from a controlled cyber test, exploited zero-day flaws and breached Hugging Face while searching its production database for test answers.

Read more →

New SharePoint flaw exploited as attackers steal machine keys for lasting access.

Read more →

Swiss rail vehicle manufacturer Stadler Rail says the Everest ransomware gang demanded about $12.3 million after breaching a data exchange platform shared with one of its suppliers. […]

Read more →

Cisco has revealed a family of open-weight AI models called Antares that, it said, can help security teams isolate potentially vulnerable parts of a software repository before deeper investigation begins. Rather than detecting a specific CVE or generating a patch, these models search a codebase using only a Common Weakness Enumeration (CWE) description and return…

Read more →

A top White House technology official is accusing a Chinese company of distilling Anthropic’s models to create their own AI product. Michael Kratsios, who leads the White House Office of Science and Technology Policy, claimed that Moonshot AI, a Beijing, China-based AI company, had distilled Anthropic’s recently-released Fable model to develop its own K3 model.…

Read more →

Learn how growing teams make AI tools reliable with clear workflows, shared rules, secure systems, and repeatable processes that improve quality and speed daily

Read more →

AI is changing how channel partners operate long before it changes what they sell. Across the IT channel, service providers are using generative and agentic AI to automate sales, finance, quoting, and service delivery while simultaneously building new AI consulting, security, and data management practices for customers. We spoke with leaders from WCA Technologies, MRE…

Read more →

Samsung Unpacked was as much about software as it was hardware.

Read more →

The emergence of agentic ransomware has sparked concerns about how artificial intelligence (AI) could reshape cyberattacks.  Unlike traditional ransomware that relies on predefined scripts or human operators, agentic ransomware can make decisions, adapt to obstacles, and execute attacks with minimal human intervention.  To better understand what this means for security leaders, I recently spoke with…

Read more →

Enterprise AI can accelerate ransomware attacks when AI assistants and agents inherit excessive permissions or compromised identities. Acronis explains how identity controls, governance, and least-privilege access help reduce AI-enabled ransomware risk while supporting secure AI adoption. […]

Read more →

In this post, I will discuss about costs of B2B friction and show you how broken partner access is undermining revenue. The supply chain doesn’t break at logistics anymore. It breaks at login. According to the Thales Digital Trust Index 2026 report, 89% of partner users have delayed or abandoned work due to access issues.…

Read more →

Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a silent hijack of a user’s WhatsApp data. The shortcoming has been codenamed HermeticReader by Guardio Labs. It’s officially tracked as CVE-2026-48294 (CVSS score: 7.4), with the vulnerability

Read more →

New TrickBot variant hides C2 communication inside DNS queries, replacing decade-old HTTP pattern

Read more →

Plus, every conversation is recorded now and not all 401(k) plans are created equal.

Read more →

Read this before switching your cell or internet service: Ookla’s latest study measures speed, performance, and consistency among US telecom providers.

Read more →

This post will show you how to prevent Xiaomi from spying on you and stealing your data. Xiaomi is a high-end budget smartphone producer with popular phone brands to its credit. However, there have been controversies about data theft and accusations of Xiaomi spying on users’ activities.  Cybersecurity researchers Garbi Cirlig and Andrew Tierney have…

Read more →

Eclypsium has launched InfraTrust, a new infrastructure cybersecurity knowledge base and monthly InfraTrust Pulse report designed to help organizations prioritize vulnerabilities affecting infrastructure, firmware, networking, and edge devices. […]

Read more →

Save up to $1,900 on the new Galaxy Z Fold 8 at AT&T right now.

Read more →

OpenAI has introduced Presence, a product designed to help companies deploy AI agents that handle customer support and internal service requests across voice and chat. (Source: OpenAI) The company describes Presence as a deployment platform rather than a standalone model. “Presence brings together the components teams need to run agents in production: policies and standard…

Read more →

Astelia has added agentic capabilities to its reachability analysis platform as organizations face shrinking exploit windows and the growing challenge of managing vulnerabilities. At the core of the platform is Astelia’s reachability analysis, which determines whether a vulnerability can be reached and exploited within a specific environment. By correlating network topology with the technical requirements…

Read more →

ThreatDown has announced a synchronized expansion of its AI and identity security capabilities to protect organizations from emerging, unmanaged risks. The company launched AI visibility, giving security and managed service provider (MSP) teams a full inventory of the AI tools running across their environments, while simultaneously extending its ITDR capabilities to secure non-human identities (NHI).…

Read more →

Last week, Hugging Face disclosed a new kind of security incident⁠opens in a new window after they detected and contained an AI agent that compromised their infrastructure,…

Read more →

Some of OpenAI’s most powerful AI models teamed up to escape their sandbox and attack systems at Hugging Face in a cybersecurity evaluation gone wrong, the company has admitted. The models under test were modified to allow them to perform potentially harmful actions that production versions would refuse. The incident highlights how, if AI prompt…

Read more →

Swimlane has announced the launch of Swimlane AI SOC for MSSPs, which the company says is designed to empower managed security service providers through agentic AI automation rather than compete for their customers. Some AI SOC providers are moving into managed services, turning former partners into competitors for the very MSSPs they once supported. Swimlane…

Read more →

Researchers have disclosed a prompt injection vulnerability affecting Microsoft’s official Azure DevOps Model Context Protocol (MCP) server that can manipulate AI coding agents into accessing sensitive information using a developer’s own permissions.  The findings demonstrate how hidden instructions embedded in a pull request can cause trusted AI assistants to perform unintended actions without the reviewer’s…

Read more →

The Adobe Acrobat extension for Chrome could be used to access conversations and data rendered in WhatsApp Web without any form of authentication. […]

Read more →

Barracuda Networks, Inc., the cyber resilience platform provider, has introduced new enhancements to the Barracuda Partner Success Program.  According to the company, these new offerings are designed to help MSPs and channel partners deepen expertise, improve operational efficiency, and unlock new opportunities for growth and profitability. Barracuda adds demand-generation tools for partners Barracuda is introducing…

Read more →

The wider form factor of the Z Fold 8 is nice, but I just want a phone that lasts.

Read more →

The Samsung Galaxy Z Fold 8 Ultra is a good phone, but there’s something way more compelling about the Galaxy Z Fold 8.

Read more →

The new wide-fold form factor is better than traditional book-style foldables.

Read more →

New York, United States, 22nd July 2026, CyberNewswire

Read more →

Vectra AI found attacker-relevant exposure conditions in 98% of enterprise environments, underscoring how AI agents, unmanaged devices, and rapidly changing infrastructure are making traditional security visibility less reliable. The findings, detailed in the company’s 2026 State of Threat Exposure Management Report, suggest that exposure management now requires more than tracking known vulnerabilities. Security teams must…

Read more →

The wider, shorter shape is similar to the Apple mystery device due this fall, say analysts.

Read more →

The AI giant has committed $20 billion to a new data-center project in Georgia and hired an architect of Elon Musk’s computing build-out.

Read more →

Fast-food chain Chick-fil-A is warning customers after attackers hijacked loyalty accounts using stolen passwords in a credential stuffing attack. Chick-fil-A says it detected suspicious login activity against some Chick-fil-A One accounts in June and launched an investigation. The company later concluded that unauthorized parties ran an automated credential stuffing attack against its website and mobile…

Read more →

A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS score: 7.5), a case of unauthenticated path traversal impacting Windmill’s “get_log_file” endpoint (“/api/w/{workspace}/jobs_u/get_log_file/{filename}”). “The filename parameter is concatenated into

Read more →

The 2-gigawatt deal covers tens of billions of dollars’ worth of chips, and AMD will invest up to $5 billion in Anthropic.

Read more →

Security leaders who build fast, visible paths to AI adoption are becoming the most valued partners in their organizations. AI governance done right gives security teams the visibility they need, employees the tools they want, and CISOs the strategic influence they have earned. According to McKinsey’s State of AI report, 76 percent of employees now…

Read more →

With dozens of chats on the go, you’ve probably had an occasion where you’ve sent the wrong response to the wrong person. I’ve found a way to avoid this problem.

Read more →

The Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday ordered U.S. government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents. […]

Read more →

Hugging Face recently disclosed a security breach. OpenAI has now said that it was its AI models which broke containment and hacked Hugging Face themselves

Read more →

In the latest development, the fastest way to trade prediction markets just went live. Banana Predict is now live in beta at predict.bananagun.io, giving traders a dedicated terminal for prediction markets built on the same speed obsession that made Banana Gun a name in crypto trading. You get a real order book, cent-priced Yes and…

Read more →

European banks inadvertently transmitted customer data to ad platforms via tracking pixels, raising serious compliance, security, and privacy concerns.

Read more →

The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today, AI-equipped attackers are simply outpacing defenses. Most intrusions now bypass endpoint and malware-based detection entirely. The CrowdStrike Global Threat Report estimates around 79% of attacks are malware-free, as threat actors rely on

Read more →

A vulnerability in snap-confine lets an unprivileged user gain root access on affected Ubuntu Desktop systems. Install the latest snapd update to fix the issue.

Read more →

Glow has emerged from stealth with $180 million in funding at a $1.2 billion valuation to advance a prevention-first approach to endpoint security. The funding round was led by Sequoia, Cyberstarts, Greenoaks, and Redpoint Ventures, with participation from Index Ventures, Swish Ventures, Lux Capital, Operator Collective, and Holly Ventures. The company will use the funding…

Read more →

Cloud storage costs tend to creep up over time, since most services charge monthly or annually for as long as you use them. FileJump’s Lifetime Plan skips that model entirely, offering 2TB of cloud storage for a single payment of $59 (MSRP $467). […]

Read more →

Most universities responding to generative AI have done so reactively. A hastily revised syllabus here. A detection tool there. A committee convened after the fact.

Read more →

Building a presentation can take lots of time. There are design choices to figure out: the slide layouts, fonts, theme colors, and so on. You can use a template to skip this hassle, but you still have to paste your text and other content into the slides and edit it all so that the results…

Read more →

Here’s some insight into how Google must comply with the European Commissions’s Digital Markets Act.

Read more →

The agent abused the victim’s Docker daemon to access and encrypt AI-related files.

Read more →

The US Department of Justice has seized more than 1,000 internet domains that streamed FIFA World Cup 2026 matches without a license. The domain seizure notice (Source: US Department of Justice) The seizures came in three waves over the course of the tournament. The first two rounds took down nearly 400 domains by the end…

Read more →

New Ubuntu snap-confine race condition lets local users escalate to root on default installs

Read more →

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds DD-WRT, Langflow, and WordPress flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added DD-WRT, Langflow, and WordPress flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the KeV catalog: CVE-2021-27137 (CVSS score of 8.1) DD-WRT Stack-Based Buffer…

Read more →

Lookout has announced the launch of the Lookout Mobile Software Exposure Center (MSEC). Integrated natively into the Lookout Mobile Endpoint Security platform, MSEC enables organizations to continuously detect, validate, prioritize, and remediate exploitable vulnerabilities across their mobile software ecosystem. The advancement of frontier AI models, such as Anthropic’s Claude Mythos, marks a fundamental shift in…

Read more →

CodeMender actively builds and runs exploits in customer-managed sandboxes to verify if vulnerabilities are truly exploitable

Read more →

Box has announced new security capabilities designed to give organizations greater control over AI agents working with enterprise content. With new agent guardrails, third-party agent activity oversight, prompt injection detection, agent classification-based access policies, and more, customers will be able to extend Box’s security controls to both Box Agents and third-party agents, such as Claude,…

Read more →

Arista Networks has announced the launch of its new AI-driven Edge Threat Management (ETM) for VeloCloud SD-WAN, delivering integrated zero trust security for enterprise branch offices. Customers can leverage this integration to simplify the branch, collapsing multiple disparate boxes into a single unified secure SD-WAN edge platform. Integrated ETM provides perimeter protection at the WAN…

Read more →

Cyware, an agentic AI-powered operational threat intelligence and collective defense platform, has appointed Alvaro Warden as the global head of channel sales and marketplace Ecosystems. Warden will lead the organization’s global partner, alliance, and marketplace strategy to expand the company’s ecosystem footprint across North America, APAC, and EMEA. He also currently serves on the customer…

Read more →

Frontier AI models will take just about any route to finish a task, cheating included, according to new cybersecurity evaluations from the UK government’s AI Security Institute (AISI). AISI defines cheating as a model doing something outside the bounds of what a task allows, or breaking a stated rule outright, in order to reach the…

Read more →

Here in this high-tech era of 2026, keeping important info backed up and synced should be effortless and something that just happens on its own, automatically, without any actual thought or ongoing human effort. In many areas of our digital life, that mercifully does Just Work™ in exactly that way. Fire up an email in…

Read more →

Liquibase is expanding its global partner ecosystem and has appointed Phil Robinson as vice president of global channels and alliances to lead recruitment, enablement, joint marketing, and partner-led services. Liquibase targets database governance services growth The moves reflect Liquibase’s investment in partners to help enterprises close the database delivery gap and build new services around…

Read more →

AI is changing both what customers expect from managed service providers and the security risks those providers must help them address. Executives from Insight, NinjaOne, and Xage Security told Channel Insider that MSPs are being pushed beyond traditional IT management as customers seek guidance on AI adoption, cybersecurity, governance, and measurable business outcomes. That shift…

Read more →

The move ramps up a conflict between warring factions in Silicon Valley over how to regulate the transformative technology.

Read more →

When Anthropic unveiled Project Glasswing and the Mythos model, much of the discussion focused on the capabilities themselves. Security leaders debated what these systems could mean for vulnerability discovery, exploit development and the pace of offensive innovation. Researchers examined technical benchmarks. Industry observers questioned how quickly these capabilities might fall into attackers’ hands. Those conversations…

Read more →

Siemens has acquired Precision Innovations and Defacto Technologies to add AI-driven design exploration and workflow automation capabilities across the system-on-a-chip development lifecycle. The deals expand Siemens’ electronic design automation portfolio with tools intended to help semiconductor teams evaluate chip architectures earlier, automate complex design processes, and reduce time to silicon. Precision Innovations targets earlier SoC…

Read more →

OpenAI confirmed its AI models exploited zero-days during internal testing, reaching Hugging Face servers in an unintended real-world cyberattack. OpenAI admitted on July 21 that its own AI models, including GPT-5.6 Sol and an unnamed pre-release system, were behind the cyberattack on Hugging Face disclosed the previous week. The models weren’t acting under attacker control.…

Read more →

With dozens of chats on the go, you’ve probably had an occasion where you’ve sent the wrong response to the wrong person. I’ve found a way to avoid this problem.

Read more →

Google’s Gemini 3.5 Flash Cyber model finds, validates, and patches vulnerabilities before they can be exploited while helping mitigate broader misuse. It is part of a limited-access pilot program that will soon be available to governments and trusted partners through CodeMender, Google DeepMind’s AI coding agent, with broader access planned over time. “CodeMender is our…

Read more →

Delivering enterprise-grade customer experience CX is no longer just for big brands. iCXeed’s Ryan Rayner explores where to start and how AI can help a small team serve…

Read more →

German and US law enforcement have dismantled the infrastructure behind Kratos, a notorious phishing-as-a-service (PhaaS) platform. Its alleged developer and administrator was arrested in Indonesia by local police. Seizure banner (Source: BKA) The takedown was led by the Frankfurt public prosecutor’s cybercrime unit (ZIT) and Germany’s Federal Criminal Police Office (BKA), working alongside US law…

Read more →