NuGet package NewJson.Net delivers game cheats inside working library fork
A trojanized Newtonsoft.Json fork on NuGet smuggles game-rigging malware inside a fully functional serialization library to evade detection.
The Latest
UK AI Security Institute finds every frontier model cheats on cyber evaluations
OpenAI and Anthropic models broke rules in cybersecurity tests and failed to admit it, with cheating rates between 7.8% and…
Suno data breach exposes over 55 million user accounts and payment data
Have I Been Pwned confirms the massive breach of the AI music platform, including email addresses and partial credit card…
GlideRecord query feature turns ServiceNow sandbox escape into pre-auth RCE
CVE-2026-6875 lets attackers bypass the ServiceNow script sandbox through a JavaScript override technique, with exploitation already in the wild.
Three-country police action dismantles Kratos phishing-as-a-service empire
German and US law enforcement seized 200 servers and arrested the alleged developer of the Kratos phishing platform in Indonesia.
SharePoint flaw CVE-2026-50522 under attack after public PoC goes live
Attackers are exploiting a critical SharePoint RCE vulnerability to steal machine keys, and patching alone won't lock them out.
FakeGit campaign floods GitHub with 7,600 malicious repositories
A large-scale supply chain attack dubbed FakeGit uses thousands of deceptive GitHub repositories to distribute SmartLoader malware.
Mass scanning intensifies as WordPress wp2shell exploit goes public
Publicly released exploit code for the WordPress core wp2shell vulnerability is fueling widespread mass scanning and site takeover attempts.
Two SonicWall SMA zero-days exploited a month before disclosure
Attackers used CVE-2026-15409 and CVE-2026-15410 to compromise SonicWall SMA 1000 appliances via SSRF and code injection starting June 22.
ServiceNow sandbox escape bug now under active exploitation
Attackers are exploiting CVE-2026-6875, a critical pre-authentication RCE in the ServiceNow AI Platform, just days after disclosure.
Estee Lauder data breach linked to Oracle E-Business Suite flaw
Cosmetics giant Estee Lauder notifies customers of a data breach tied to a Clop-exploited Oracle E-Business Suite vulnerability.
Iran-linked actors use AI to accelerate malware and phishing operations
Iran-nexus threat groups are using generative AI for malware development, industrial control system mapping, and multilingual phishing campaigns.
Critical 7-zip vulnerability allows code execution via XZ archives
A heap buffer overflow in 7-Zip's XZ decompression lets attackers execute code when victims open crafted archive files.
Hugging face says autonomous AI agent breached its infrastructure
Hugging Face confirmed an autonomous AI agent breached its infrastructure through a malicious dataset in the company's data processing pipeline.
Spotlight
Critical Nginx bug CVE-2026-42533 allows remote code execution via HTTP
F5 patched a critical Nginx heap buffer overflow that lets unauthenticated attackers crash workers or achieve remote code execution.
Russian intelligence hacked IP cameras to spy on NATO military logistics
Russian intelligence operatives compromised IP cameras across NATO states and Ukraine to monitor military supply movements in real time.
Post-quantum security startup pQCee raises $3.9M seed round
Singapore-based quantum-safe cybersecurity startup pQCee raises $3.9M seed round co-led by SGInnovate and Lotus One Investment.
North Korea hides OtterCookie malware inside SVG flag images in fake coding tests
North Korean threat actors embed malware payload fragments inside SVG country flag images distributed through fake developer job interviews and coding challenges.
Features
GoSerpent malware targets Southeast Asian governments and diplomats for espionage
Kaspersky uncovers GoSerpent, a Go-based backdoor targeting government and diplomatic entities in Southeast Asia since late 2025 for long-term intelligence…
SAP patches critical NetWeaver ABAP flaw with CVSS 9.9 severity rating
SAP releases July 2026 security updates for a critical memory corruption flaw in NetWeaver ABAP and two additional CVSS 9.1…
OkoBot malware injects seed phrase phishing into Ledger and Trezor wallet apps
The OkoBot malware framework injects fake recovery seed phrase pages directly into legitimate Ledger and Trezor desktop applications on Windows…
EU antitrust ruling forces Google to open Android hardware to rival AI assistants
The European Commission orders Google to give rival AI assistants the same hardware access as Gemini under the Digital Markets…
Spirals ransomware encrypts victim networks in under 24 hours
Symantec discovered Spirals, a Rust-based ransomware that encrypted an IT services company's network in less than a day.
Zoom patches critical Windows flaw that allows account takeover
Zoom fixed CVE-2026-53412, a critical account takeover vulnerability with a CVSS score of 9.8 affecting Windows users.
