Iran-linked actors use AI to accelerate malware and phishing operations
Iran-nexus threat groups are using generative AI for malware development, industrial control system mapping, and multilingual phishing campaigns.
The Latest
Critical 7-zip vulnerability allows code execution via XZ archives
A heap buffer overflow in 7-Zip's XZ decompression lets attackers execute code when victims open crafted archive files.
Hugging face says autonomous AI agent breached its infrastructure
Hugging Face confirmed an autonomous AI agent breached its infrastructure through a malicious dataset in the company's data processing pipeline.
Critical Nginx bug CVE-2026-42533 allows remote code execution via HTTP
F5 patched a critical Nginx heap buffer overflow that lets unauthenticated attackers crash workers or achieve remote code execution.
Russian intelligence hacked IP cameras to spy on NATO military logistics
Russian intelligence operatives compromised IP cameras across NATO states and Ukraine to monitor military supply movements in real time.
Post-quantum security startup pQCee raises $3.9M seed round
Singapore-based quantum-safe cybersecurity startup pQCee raises $3.9M seed round co-led by SGInnovate and Lotus One Investment.
North Korea hides OtterCookie malware inside SVG flag images in fake coding tests
North Korean threat actors embed malware payload fragments inside SVG country flag images distributed through fake developer job interviews and…
GoSerpent malware targets Southeast Asian governments and diplomats for espionage
Kaspersky uncovers GoSerpent, a Go-based backdoor targeting government and diplomatic entities in Southeast Asia since late 2025 for long-term intelligence…
SAP patches critical NetWeaver ABAP flaw with CVSS 9.9 severity rating
SAP releases July 2026 security updates for a critical memory corruption flaw in NetWeaver ABAP and two additional CVSS 9.1…
OkoBot malware injects seed phrase phishing into Ledger and Trezor wallet apps
The OkoBot malware framework injects fake recovery seed phrase pages directly into legitimate Ledger and Trezor desktop applications on Windows…
EU orders Google to open Android mic, camera and screen to rival AI assistants
The European Commission orders Google to give rival AI assistants the same hardware access as Gemini under the Digital Markets Act.
Spirals ransomware encrypts victim networks in under 24 hours
Symantec discovered Spirals, a Rust-based ransomware that encrypted an IT services company's network in less than a day.
Zoom patches critical Windows flaw that allows account takeover
Zoom fixed CVE-2026-53412, a critical account takeover vulnerability with a CVSS score of 9.8 affecting Windows users.
Russian hackers use fake Webex and Zoom installers to deliver Starland RAT
Cisco Talos uncovered a Russian-speaking threat actor using trojanized installers to deliver Starland RAT and memory-only implants.
Spotlight
New NadMesh botnet hunts exposed AI services for cloud credentials
Researchers discovered the NadMesh botnet, which targets exposed AI infrastructure to steal cloud keys and Kubernetes tokens.
Grok Build uploaded entire Git repositories to xAI cloud storage
A security researcher found that xAI's Grok Build CLI packaged and uploaded entire code repositories, including deleted secrets, to Google Cloud Storage.
Claude for Chrome flaw lets rogue extensions read Gmail messages
Researchers discovered that malicious Chrome extensions can abuse a permission flaw in the Claude for Chrome extension to read Gmail without user consent.
ACR Stealer uses ClickFix lures to steal browser tokens and Microsoft 365
Microsoft observed two ACR Stealer campaigns using fake error messages to trick users into running code that steals credentials and cloud session tokens.
Features
Abbott discloses cyberattack on its cancer diagnostics business
The medical device giant confirmed unauthorized access to internal systems in its cancer diagnostics unit, which includes the recently acquired…
Microsoft patches record 570 flaws as AI accelerates vulnerability discovery
Artificial intelligence helped Microsoft discover and patch 570 security vulnerabilities in July, nearly tripling last month's record-breaking patch count.
SharePoint zero-day added to CISA KEV as exploitation mounts
CISA warns of active exploitation of CVE-2026-58644 and three other SharePoint flaws, urging federal agencies to patch within a week.
TuxBot v3 IoT botnet shows signs of AI-assisted development
The TuxBot v3 Evolution botnet framework was built with help from an LLM, but the AI left a safety disclaimer…
White House launches Gold Eagle AI vulnerability clearinghouse
The Treasury-led Gold Eagle program uses frontier AI models to accelerate vulnerability discovery and coordinated patching.
Malicious Vite npm packages use blockchain command and control to deliver remote access trojan
Checkmarx uncovered seven malicious npm packages targeting Vite developers with blockchain-based C2 infrastructure spanning Tron, Aptos, and Binance Smart Chain.
