Agencies are urgently warning U.S. organizations of ongoing Iranian-affiliated cyber targetingof internet-connected operational technology (OT) devices, including programmable logic controllers...
A New York startup’s use of a Chinese AI model to rein in a rogue agent built with OpenAI technology is stoking fears that guradrails restricting U.S. AI firms from doing cybersecurity work could...
RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root...
Check Point has released security updates to address multiple vulnerabilities impacting Security Management and Multi-Domain Management (MDSM) products, including a critical flaw that has come...
GCHQ’s National Cyber Security Centre and international partners issue warning as ‘LAUNDRY BEAR’ cyber threat group exposed for targeted phishing campaign
In today’s hyperconnected world, organizations face cyber threats that extend far beyond their internal networks. Attackers target brands through phishing websites, leaked credentials, exposed...
New paper: “Encryption and Globalization 15 Years Later: End-to-End Encryption and the Third Round of the ‘Going Dark’ Debate“: Abstract: This Article updates and expands on 2012 research on...
Pro-Iran hackers claimed responsibility for a United Airlines website outage Wednesday night that left users reporting an inability to log in, check in or change flights. “The Islamic Cyber...
The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly with C2 but connects through the browser. It enables arbitrary command...
Here’s some of the ways Talos is showing up at Black Hat, alongside our friends at Cisco and Splunk.
Who needs a working security badge when you know how to talk your way into the records room?
An open directory and a SEA of victims reaching as far as LATAM all lead to TriBack Loader.
Oracle has released its July 2026 Critical Patch Update, delivering one of its largest quarterly security releases to date. The latest Oracle security patch addresses more than 1,400...
Closed models with guardrails can still cause harm, but may also not be able to fix problems they caused
Closed models with guardrails can still cause harm, but may also not be able to fix problems they caused
Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings will drop from $20,000-$30,000+ to a fixed $10,000, while its...
Insikt Group identifies four new TAG-195 malware families, revealing an architectural transition toward modular, operator-driven tooling in the MaaS ecosystem
Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in snap-confine that an unprivileged user can trigger to obtain root access and gain...
Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrobat Chrome extension that has over 314 million users, which, if exploited, could facilitate a...
With roughly two weeks left for public comment on FAA Section 2209, critical infrastructure operators are running out of time to shape rules that could determine whether sensitive facilities can...
On July 21 and July 22, Huntress observed a number of attacks that started with a malicious public Claude Artifact hosted on a legitimate Claude domain, and ended in organizations being infected...
The observed incidents include “malicious project file interactions and manipulation of data on human machine interface (HMI) and supervisory control and data acquisition (SCADA) displays,” the...
Drupal security advisory (AV26-738)
Exim security advisory (AV26-737)
Sunday-to-Monday onslaught fuels speculation over AI-assisted bug reports
Progress security advisory (AV26-736)
Check Point security advisory (AV26-735)
Mitel security advisory (AV26-734)
n8n security advisory (AV26-733)
A high-severity security flaw impacting open-source developer platform Windmill has come under active exploitation in the wild, per VulnCheck. The vulnerability in question is CVE-2026-29059 (CVSS...