I added hover over text, it messed up some of the formatting. But whatever, I gotta go write my TPS report.<h2>Krebs on Security</h2><h2>Dark Reading</h2><h2>The Hacker News [ THN ] - Best Security Blog</h2>2026-07-28 - <a href="https://thehackernews.com/2026/07/microsoft-says-new-cybersecurity-ai.html" title="Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability identification and remediation harness.

The company says MDASH, using MAI-Cyber-1-Flash and GPT-5.4, scored 95.95% on CyberGym. It also claims the configuration costs 50% less than its current best MDASH combination of GPT-5.4, GPT-5.4 mini, and GPT-5.3 Codex. Access is limited to approved">Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost</a><br>2026-07-28 - <a href="https://thehackernews.com/2026/07/attackers-exploit-arista-velocloud.html" title="A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild.

The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system command injection that could pave the way for arbitrary code execution.

"VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue">Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw</a><br>2026-07-27 - <a href="https://thehackernews.com/2026/07/nvidia-forms-37-member-open-secure-ai.html" title="NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and tools for securing software and artificial intelligence (AI) agents.

The 37-member group spans cloud, security, enterprise software, and AI companies, including Microsoft, Cisco, Cloudflare, CrowdStrike, Hugging Face, IBM, Palo Alto Networks, Red Hat, and the Linux">NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework</a><br>2026-07-27 - <a href="https://thehackernews.com/2026/07/dysphoria-iot-botnet-adds-blockchain-c2.html" title="Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-based name services and infected-device relays after a March law-enforcement operation against JackSkid infrastructure. The researchers say the design makes the botnet harder to disrupt.

CNCERT, China's national computer emergency response team, and XLab, the threat-intelligence lab of Chinese">Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption</a><br>2026-07-27 - <a href="https://thehackernews.com/2026/07/public-exploit-released-for-patched.html" title="Public exploit details released on July 27 show how an unauthenticated request can reach PHP's eval() function inside vBulletin and execute code on an unpatched forum server. The attack requires no account, administrative access, or interaction from another user.

SSD Secure Disclosure lists vBulletin 6.2.1 and earlier, and 6.1.6 and earlier, as affected, but does not give a lower version">Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw</a><br>2026-07-27 - <a href="https://thehackernews.com/2026/07/weekly-recap-rogue-ai-agents-check.html" title="Monday starts with the usual promise that everything is under control. Then the logs wake up.

This week, trusted tools crossed lines, old flaws found new work, exposed systems stayed exposed, and attackers kept hiding inside normal-looking services. Nothing looked strange at first. That helped.

That is the mood. Here is the full recap.

⚡ Threat of the Week

OpenAI Says Its AI Agent Went Rogue">⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More</a><br>2026-07-27 - <a href="https://thehackernews.com/2026/07/n8n-sandbox-escape-lets-workflow.html" title="n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n's February fix for CVE-2026-27577 for another bypass.

The affected ranges are &lt;2.31.5 and &gt;=2.32.0,&lt;2.32.1. n8n fixed the flaw in versions 2.31.5 and">n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process</a><br>2026-07-27 - <a href="https://thehackernews.com/2026/07/operation-bluedash-deploys-level-rmm.html" title="Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver legitimate remote monitoring and management (RMM) tools.

"The victim was directed through compromised web infrastructure to a counterfeit Microsoft Store page claiming that Microsoft Teams had to be updated before the shared document could be opened," ZeroBEC said in">Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update</a><br>2026-07-27 - <a href="https://thehackernews.com/2026/07/cruciferra-crypter-uses-byovd-and.html" title="The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams has been observed using a sophisticated crypter service called Cruciferra.

According to a new analysis by Proofpoint, Cruciferra has been utilized by various unrelated cybercriminal threat clusters to deliver a wide array of remote">Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware</a><br>2026-07-27 - <a href="https://thehackernews.com/2026/07/teleshim-abuses-telegram-for-c2-in.html" title="Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor with ties to East Asia targeting government entities in the Middle East.

The intrusions have resulted in the deployment of previously unreported malware families dubbed TELESHIM, MIXEDKEY, and BINDCLOAK, according to Zscaler ThreatLabz. The cybersecurity firm said it detected the campaign earlier this month.">TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments</a><br>2026-07-27 - <a href="https://thehackernews.com/2026/07/github-adds-3-day-dependabot-cooldown.html" title="GitHub has announced a new cooldown mechanism in Dependabot, allowing the tool to wait at least three days after a release is published before opening a pull request.

"The cooldown configuration option in the dependabot.yml still controls the behavior, though, so you can choose a different cooldown parameter that fits your project," the Microsoft-owned subsidiary said.

According to GitHub, the">GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption</a><br>2026-07-26 - <a href="https://thehackernews.com/2026/07/malvertising-sends-malware-in-pieces.html" title="A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file from a fixed URL.

Confiant, which detailed the campaign on July 23, 2026, said it has operated since late 2024 and impersonated TradingView, Solana, and Luno to target retail traders and">Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable</a><br>2026-07-25 - <a href="https://thehackernews.com/2026/07/fastjson-1x-rce-vulnerability-targeted.html" title="Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute code without authentication, with the privileges of the Java process.

Tracked as CVE-2026-16723, the vulnerability carries an Alibaba-assigned CVSS score of 9.0. The confirmed chain requires">Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available</a><br>2026-07-25 - <a href="https://thehackernews.com/2026/07/researcher-publishes-gitlab-rce-poc.html" title="Security researchers at&nbsp;depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update.

Any authenticated user who can push to a project can run it. The attacker commits a crafted Jupyter notebook and opens its commit diff, which leaks a heap">Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git</a><br>2026-07-25 - <a href="https://thehackernews.com/2026/07/ctm360-research-reveals-how-insurance.html" title="For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering usernames and passwords, attackers collected the credentials, and accounts were compromised later when an opportunity arose.

That model is changing.

Recent investigations into insurance-focused phishing operations reveal a more immediate approach. Instead of harvesting">CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking</a><br>2026-07-25 - <a href="https://thehackernews.com/2026/07/cl0p-affiliates-target-internet-exposed.html" title="Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are exploiting flaws in internet-exposed PTC Windmill and FlexPLM deployments as part of a new data extortion campaign.

"Attackers chain a pre-authentication information disclosure in the FlexPLM WSDL endpoint with a server-side flaw in the Windchill login servlet, enabling">Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE</a><br>2026-07-25 - <a href="https://thehackernews.com/2026/07/devman-raas-portal-centralizes-payload.html" title="The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platform that offers affiliates the ability to build payloads, oversee earnings, and manage various aspects related to victims.

Swiss cybersecurity company PRODAFT is tracking the centrally administered RaaS operation under the name Funky Mantis.

"The portal combined build generation, finance,">DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts</a><br>2026-07-24 - <a href="https://thehackernews.com/2026/07/bluenoroff-zoom-phishing-kit-profiles.html" title="The North Korean threat actors behind the ClickFix-style campaigns that employ typosquatted Zoom and Microsoft Teams domains have been found to operate an active phishing kit to impersonate the videoconferencing platforms in social engineering campaigns designed to deliver malware.

"BlueNoroff has operationalised trust abuse by combining compromised industry contacts, social engineering, wallet">BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery</a><br>2026-07-24 - <a href="https://thehackernews.com/2026/07/certighost-exploit-lets-low-privileged.html" title="Researchers H0j3n and Aniq Fakhrul published a working exploit on July 24 that lets a low-privileged Active Directory user obtain a certificate for a Domain Controller and authenticate as that machine.

They codenamed the flaw Certighost. Because Domain Controller accounts carry directory replication rights, the resulting Kerberos credential can retrieve the krbtgt secret through DCSync.">Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller</a><br>2026-07-24 - <a href="https://thehackernews.com/2026/07/chatgpt-agentforger-flaw-could-deploy.html" title="Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and deploy an autonomous artificial intelligence (AI) agent inside a victim's organization.

The vulnerability has been codenamed AgentForger by Zenity Labs. The issue has since been addressed by OpenAI as of June 8,">ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link</a><br>2026-07-24 - <a href="https://thehackernews.com/2026/07/bing-images-flaws-let-crafted-svgs-run.html" title="A crafted SVG submitted to Bing's image search ran commands as NT AUTHORITY\SYSTEM on Microsoft's production image-processing workers, and as root on the Linux machines in the same fleet.

XBOW's testing got the same result on workers across different hosts and network ranges, so the problem sat in Bing's image tier, not on one bad machine. Microsoft issued two critical CVEs, CVE-2026-32194 and">Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers</a><br>2026-07-24 - <a href="https://thehackernews.com/2026/07/seeing-ai-agents-is-not-enough-security.html" title="AI agent security is moving through a familiar maturity curve: adoption, then visibility, and finally, control. But what we've collectively discovered is that enforcing least privilege for AI agents is harder than we ever imagined. This is why there are so many approaches, from prompt filtering to identity-layer access controls. Where we've collectively landed is that understanding the intent of">Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do</a><br>2026-07-24 - <a href="https://thehackernews.com/2026/07/hacker-runs-hermes-ai-agent-unattended.html" title="Someone installed a popular AI assistant on a rented server, switched off the setting that makes it ask permission before running risky commands, and pointed it at Thailand's Ministry of Finance, which runs the country's treasury and tax collection.

The agent then worked through the ministry's network on its own, checking hosts for ways to gain root access, hunting through file systems, and">Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry</a><br>2026-07-24 - <a href="https://thehackernews.com/2026/07/golden-chickens-resurfaces-with-four.html" title="The threat actors behind the Golden Chickens malware-as-a-service (MaaS) ecosystem have resurfaced with four new malware families, indicating that the operators are showing no signs of stopping despite extensive public disclosures into their inner workings.

The malware families in question are: TinyEgg, ChonkyChicken, a modularized variant of ChonkyChicken, and a modified web browser credential">Golden Chickens Resurfaces With Four New Malware Families and Modular Implants</a><br>2026-07-24 - <a href="https://thehackernews.com/2026/07/nodebb-patches-eight-ai-found-flaws.html" title="Eight security flaws in NodeBB went public on Wednesday, along with the code to exploit them. Aikido Security rates all eight as high severity and says its AI pentest agents found them in a six-hour review of the forum software's source code.

Every version before 4.14.0 is affected. NodeBB has fixed them all, and administrators should be on 4.14.2.

The simplest one takes a settings change. A">NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats</a><br>2026-07-24 - <a href="https://thehackernews.com/2026/07/kimi-k3-agents-found-redis-zero-days.html" title="Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for stock Redis 6.2.22, 7.4.9, 8.6.4, and 8.8.0.

All four chains require RESTORE. The Streams chains also need EVAL and XGROUP; the 8.8.0 chain needs EVAL and the bundled RedisBloom module. Redis says the underlying memory flaws may lead to remote code execution.

Redis 6.2.23, 7.2.15, and 7.4.10">Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say</a><br>2026-07-24 - <a href="https://thehackernews.com/2026/07/fake-notepad-plugin-delivers.html" title="The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign that involves the use of a malicious program that's dressed up as a Notepad++ plugin to compromise Windows systems.

The activity has been attributed by the agency to a threat cluster it tracks as UAC-0099, a Russia-aligned group that has previously observed weaponizing security flaws in WinRAR software to">Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks</a><br>2026-07-24 - <a href="https://thehackernews.com/2026/07/russian-espionage-group-exploited.html" title="A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra's webmail client.

The payload goes after the last 90 days of email, the organization's entire email directory, the password saved in the browser and the codes kept for two-factor recovery. Opening the message was enough to start it.

The NSA, CISA and partner agencies published">Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes</a><br><h2>Schneier on Security</h2>2026-07-27 - <a href="https://www.schneier.com/blog/archives/2026/07/cognyte-sells-a-mobile-cell-surveillance-van.html" title="<p>Yet another Israeli <a href="https://www.forbes.com/sites/thomasbrewster/2026/07/13/israels-palantir-rival-is-selling-1-million-spy-vans-to-us-cops/">mass surveillance company</a>:</p>
<blockquote><p>Made by Israeli surveillance company Cognyte, the tech simulates a mobile phone tower, which forces nearby phones to connect to it. That enables cops to keep tabs on any phones in the vicinity ­ whether they’re owned by a suspect in a case or not. Cognyte’s contract with the state of Texas reveals that the simulator, called FalcoNet, can be concealed within the vehicles, hidden in a backpack for on-foot missions or attached to a helicopter. It’s the same technology as the infamous Stingray, one of the original cell-site simulators made by defense giant L3Harris...</p></blockquote>">Cognyte Sells a Mobile Cell Surveillance Van</a><br>2026-07-24 - <a href="https://www.schneier.com/blog/archives/2026/07/friday-squid-blogging-illex-squid-catch-in-the-falklands.html" title="<p>Lower catch <a href="https://en.mercopress.com/2026/06/24/falklands-lower-catch-from-the-illex-squid-season-concern-with-fuel-costs">this year</a>.</p>
<p>As usual, you can also use this squid post to talk about the security stories in the news that I haven&#8217;t covered.</p>
<p><a href="https://www.schneier.com/blog/archives/2024/06/new-blog-moderation-policy.html">Blog moderation policy.</a></p>">Friday Squid Blogging: Illex Squid Catch in the Falklands</a><br>2026-07-24 - <a href="https://www.schneier.com/blog/archives/2026/07/why-ai-needs-a-genie-coefficient.html" title="<p><em>This essay was written with Barath Raghavan, and originally appeared in <a href="https://spectrum.ieee.org/ai-agent-benchmark">IEEE Spectrum</a>.</em></p>
<p>Major benchmarks measure what AI can do. None measure whether it does what you mean: the distance between what you ask an AI to do and the unspoken assumptions about how you want the AI to do it. We propose a new metric: the Genie coefficient.</p>
<p>There&#8217;s often a gap between one person&#8217;s request and another&#8217;s understanding. Most of the time, we bridge it using general knowledge. For example, if you ask a friend to get you coffee, they&#8217;ll pour a cup from the pot or buy one from a coffee shop. They won&#8217;t bring you a bag of raw beans or snatch a cup from a stranger and hand it to you. You never specified any of this. You never had to...</p>">Why AI Needs a “Genie Coefficient”</a><br><h2>ThreatPost</h2><h2>Sydney Morning Herald</h2><h2>New York Times</h2>2026-07-28 - <a href="https://www.nytimes.com/2026/07/27/technology/openai-data-center-nvidia.html" title="The chipmaking giant is in talks with OpenAI to provide a $250 billion financial backstop for the project, which would be among the largest of the A.I. boom.">OpenAI Close to Landing $500 Billion Data Center With Backing From Nvidia</a><br>2026-07-27 - <a href="https://www.nytimes.com/2026/07/27/technology/apple-valuation.html" title="The company slipped by the chipmaker Nvidia, amid growing concern about costs associated with the artificial intelligence boom.">Apple Regains Spot Over Nvidia as Most Valuable Public Company</a><br>2026-07-27 - <a href="https://www.nytimes.com/2026/07/27/technology/microsoft-unveils-ai-cybersecurity-tools.html" title="As some executives fret over the safety of new A.I. systems, protecting against them could be a big business for tech companies.">Microsoft Unveils A.I. Cybersecurity Tools</a><br>2026-07-27 - <a href="https://www.nytimes.com/2026/07/27/technology/meta-data-center-louisiana.html" title="A Times examination details how the Silicon Valley giant used private talks with local officials to start a project big enough to cover nearly six square miles.">How Meta Got Everything It Wanted in a Secret Louisiana Data Center Deal</a><br>2026-07-27 - <a href="https://www.nytimes.com/2026/07/27/technology/nvidia-open-source-ai.html" title="The company is continuing to back A.I. systems that can be freely used by others amid a continuing debate over the use of Chinese-made technology.">Nvidia Forms Alliance to Back Open-Source A.I. Amid Debate Over Safety</a><br>2026-07-27 - <a href="https://www.nytimes.com/2026/07/27/business/energy-environment/nuclear-power-palisades-michigan.html" title="The first U.S. attempt at reopening a shuttered reactor has been held back by run-down equipment and a lack of planning.">Why Restarting a Nuclear Power Plant Can Be Much Harder Than Expected</a><br>2026-07-26 - <a href="https://www.nytimes.com/2026/07/26/technology/personaltech/tiktok-instagram-breakup-content.html" title="As social media companies face scrutiny over addictive design features, mental health experts cite a stream of breakup content as an example of the failure to protect users.">Why TikTok’s Algorithm Keeps You Trapped in a Breakup Loop</a><br>2026-07-27 - <a href="https://www.nytimes.com/2026/07/26/style/meadow-lane-sammy-nussdorf.html" title="How the scion Sammy Nussdorf found his calling among the carefully arranged shelves of Meadow Lane, his chic market in Lower Manhattan.">A Son of Wealth Finds His Calling in a High-End Grocery Store</a><br>2026-07-25 - <a href="https://www.nytimes.com/2026/07/25/technology/open-source-silicon-valley-china.html" title="Anthropic and OpenAI are clashing with the rest of the tech industry over whether “open-source” models from China should be freely available or restricted.">Silicon Valley Splits Over Closing the Borders to Chinese A.I.</a><br>2026-07-25 - <a href="https://www.nytimes.com/2026/07/25/style/wedding-qr-codes.html" title="The technology, often associated with pandemic-era menus, is being used by more couples for ease, cost, expedience and sustainability.">QR Codes Make Their Way Down Wedding Aisles</a><br>2026-07-24 - <a href="https://www.nytimes.com/2026/07/24/technology/meta-facebook-marketplace-seller.html" title="Seller is part of the Silicon Valley company’s strategy to innovate on its original social network.">Meta Launches New Facebook Marketplace App Called Seller</a><br>2026-07-24 - <a href="https://www.nytimes.com/2026/07/24/podcasts/hardfork-hugging-face-openai.html" title="“The story that we’re talking about in this segment was science fiction until Tuesday, OK?”">OpenAI Models Go Rogue + Kimi K3 Freakout + A.I. Superforecasting</a><br>2026-07-24 - <a href="https://www.nytimes.com/2026/07/24/arts/music/ai-music-faq.html" title="Advances in A.I. are making it possible to create all kinds of music from scratch, but they also raise questions about what is legal and who will actually listen.">An A.I. Music F.A.Q.: Can I Remix Madonna? Is This All Legal?</a><br>2026-07-24 - <a href="https://www.nytimes.com/2026/07/23/technology/judge-paramount-warner-bros-deal.html" title="The court blocked the companies from closing the acquisition through mid-August, as a judge considers two lawsuits challenging it.">Judge Extends Pause for Paramount-Warner Bros. Deal</a><br><h2>Wall Street Journal</h2><h2>BBC</h2>2026-07-27 - <a href="https://www.bbc.co.uk/news/articles/c872nj1n4xyo?at_medium=RSS&at_campaign=rss" title="Labels and adhesives can prevent paper from being recycled but there's new tech aimed at changing that.">Is it time to stop using glue and labels on paper?</a><br>2026-07-27 - <a href="https://www.bbc.co.uk/news/articles/cly5qgjk5ywo?at_medium=RSS&at_campaign=rss" title="Hundreds of conversations with Anthropic’s chatbot were discovered as being publicly accessible.">Some people's chats with Claude AI found publicly available online</a><br>2026-07-27 - <a href="https://www.bbc.co.uk/news/articles/cr59m5nmemno?at_medium=RSS&at_campaign=rss" title="Birdwatchers tell the BBC how apps have changed their lifelong hobby - and attracted new birders.">Why budding birders are flocking to Shazam-like apps to identify avians</a><br>2026-07-25 - <a href="https://www.bbc.co.uk/news/articles/cd9w22n9e4go?at_medium=RSS&at_campaign=rss" title="Hugging Face said the hack was done at superhuman speed by an AI with little or no human guidance.">Warning shot or publicity stunt - how worried should we be about the OpenAI hack?</a><br>2026-07-24 - <a href="https://www.bbc.co.uk/news/articles/cx2j0wy1gl5o?at_medium=RSS&at_campaign=rss" title="The outage affected gamers' ability to launch games, apps or network features on their PlayStation.">PlayStation Network outage resolved after thousands of gamers unable to play</a><br>2026-07-24 - <a href="https://www.bbc.co.uk/news/articles/cvgjenp4680o?at_medium=RSS&at_campaign=rss" title="The US president says fines against Google, as well as Apple, Meta and Amazon, should be "entirely reversed.">Trump vows to investigate EU over fining of US tech companies</a><br>2026-07-24 - <a href="https://www.bbc.co.uk/news/articles/cd0xnge2zx7o?at_medium=RSS&at_campaign=rss" title="It all began with an innocuous video shared by Seattle resident Kiana Hall on Instagram.">How Jimothy the raccoon became the internet's latest animal obsession</a><br>2026-07-25 - <a href="https://www.bbc.co.uk/iplayer/episode/m002zn5l?at_medium=RSS&at_campaign=rss" title="Highlights from the Esports World Cup in Paris and how to build a gaming PC.">Tech Now</a><br><h2>SecurityBrief AU</h2><h2>ITNews AU</h2>2026-07-28 - <a href="https://www.itnews.com.au/news/asd-to-critical-infrastructure-ops-be-ready-to-isolate-systems-for-three-months-627708?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="New technical guidance for Australia's essential services issued.">ASD to critical infrastructure ops: be ready to isolate systems for three months</a><br>2026-07-27 - <a href="https://www.itnews.com.au/news/fake-corepack-tool-site-goes-quiet-after-luring-devs-with-malware-627678?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="Dropped infostealer and proxy-hijacking software.">Fake Corepack tool site goes quiet after luring devs with malware</a><br>2026-07-27 - <a href="https://www.itnews.com.au/news/its-ai-agent-spent-days-hacking-a-company-but-sources-say-openai-did-not-notice-for-a-week-627679?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="Until &#8288;well after the threat was contained.">Its AI agent spent days hacking a company, but sources say OpenAI did not notice for a week</a><br>2026-07-24 - <a href="https://www.itnews.com.au/news/google-rolls-out-new-selfie-video-sign-in-feature-627629?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title="Perform guided head movements to authenticate.">Google rolls out new selfie video sign-in feature</a><br>2026-07-24 - <a href="https://www.itnews.com.au/news/us-and-allies-say-russian-hackers-stole-emails-without-social-engineering-627628?utm_source=feed&utm_medium=rss&utm_campaign=iTnews+Security+feed" title=""Half-click exploit".">US and allies say Russian hackers stole emails without social engineering</a><br><h2>BleepingComputer</h2>2026-07-27 - <a href="https://www.bleepingcomputer.com/news/security/hackers-target-us-firms-in-fastjson-rce-zero-day-attacks/" title="Hackers are actively exploiting a vulnerability in the FastJson open-source Java library, allowing remote code execution without user interaction or elevated privileges. [...]">Hackers target US firms in FastJson RCE zero-day attacks</a><br>2026-07-27 - <a href="https://www.bleepingcomputer.com/news/security/arista-patches-velocloud-orchestrator-zero-day-exploited-in-attacks/" title="Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks. [...]">Arista patches VeloCloud Orchestrator zero-day exploited in attacks</a><br>2026-07-27 - <a href="https://www.bleepingcomputer.com/news/security/new-dysphoria-ddos-botnet-spreads-to-200k-devices-worldwide/" title="A botnet called Dysphoria has compromised around 200,000 devices across the world and is using them for distributed denial of service (DDoS) attacks and traffic relay operations. [...]">New Dysphoria DDoS botnet spreads to 200k devices worldwide</a><br>2026-07-27 - <a href="https://www.bleepingcomputer.com/news/security/new-certighost-poc-exploit-lets-attackers-hijack-windows-domains/" title="A proof-of-concept exploit for "Certighost," a Windows Active Directory Certificate Services vulnerability, has been released that can allow authenticated attackers to potentially compromise a Windows domain. [...]">New Certighost PoC exploit lets attackers hijack Windows domains</a><br>2026-07-27 - <a href="https://www.bleepingcomputer.com/news/apple/apple-sued-over-fake-app-store-crypto-wallet-app-stealing-18m-in-bitcoin/" title="Apple is being sued by three people who claim approximately $1.8 million in Bitcoin was stolen after downloading and using a fraudulent Sparrow Wallet application from the App Store. [...]">Apple sued over fake App Store crypto wallet app stealing $1.8M in Bitcoin</a><br>2026-07-27 - <a href="https://www.bleepingcomputer.com/news/security/coca-cola-confirms-data-theft-in-fairlife-ransomware-attack/" title="The Coca-Cola Company has confirmed that hackers stole data from its dairy subsidiary, Fairlife, during a ransomware attack earlier this month. [...]">Coca-Cola confirms data theft in Fairlife ransomware attack</a><br>2026-07-27 - <a href="https://www.bleepingcomputer.com/news/security/ernst-and-young-data-breach-claimed-by-shinyhunters-extortion-gang/" title="The ShinyHunters extortion gang has claimed responsibility for a recently disclosed Ernst & Young data breach, saying it obtained credentials for some of the company's systems via a supply-chain attack. [...]">Ernst & Young data breach claimed by ShinyHunters extortion gang</a><br>2026-07-27 - <a href="https://www.bleepingcomputer.com/news/security/shadow-ai-agents-are-multiplying-heres-how-to-find-and-secure-them/" title="Shadow AI agents are rapidly spreading across enterprise platforms, often without IT or security visibility. Nudge Security explains how organizations can discover, assess, and govern AI agents before unmanaged permissions and autonomous actions create security risks. [...]">Shadow AI agents are multiplying. Here's how to find and secure them.</a><br>2026-07-26 - <a href="https://www.bleepingcomputer.com/news/security/github-pypi-add-time-absed-defenses-against-supply-chain-attacks/" title="GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to protect against supply-chain attacks and to limit their impact. [...]">GitHub, PyPI add time-based defenses against supply chain attacks</a><br>2026-07-25 - <a href="https://www.bleepingcomputer.com/news/security/steam-forum-clickfix-attacks-infect-gamers-with-xmrig-cryptominers/" title="Steam discussion forums are being abused in ClickFix attacks that pretend to be fixes for game and computer problems but actually infect devices with cryptominers. [...]">Steam forum ClickFix attacks infect gamers with XMRig cryptominers</a><br>2026-07-25 - <a href="https://www.bleepingcomputer.com/news/security/malicious-sites-use-javascript-to-build-malware-in-browser-memory/" title="A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. [...]">Malicious sites use JavaScript to build malware in browser memory</a><br>2026-07-25 - <a href="https://www.bleepingcomputer.com/news/security/shinyhunters-data-leaks-fuel-2-000-sextortion-email-scam/" title="Threat actors are using email addresses exposed in data breaches leaked by the ShinyHunters extortion group to send sextortion emails demanding $2,000 in Bitcoin. [...]">ShinyHunters data leaks fuel $2,000 sextortion email scam</a><br>2026-07-25 - <a href="https://www.bleepingcomputer.com/news/artificial-intelligence/openai-confirms-chatgpt-is-down-worldwide/" title="ChatGPT, the famous artificial intelligence chatbot that allows users to converse with various personalities and topics, has connectivity issues worldwide. [...]">OpenAI confirms ChatGPT is down worldwide</a><br>2026-07-24 - <a href="https://www.bleepingcomputer.com/news/security/ontrac-notifies-customers-of-data-breach-after-network-hack/" title="OnTrac parcel delivery company is informing that hackers breached its corporate network and may have accessed personal details belonging to its customers. [...]">OnTrac notifies customers of data breach after network hack</a><br>2026-07-24 - <a href="https://www.bleepingcomputer.com/news/security/hermes-ai-agent-used-to-automate-attack-on-thai-finance-ministry/" title="A threat actor used the open-source Hermes AI agent in unattended "YOLO" mode to automate post-exploitation activity during an alleged breach of Thailand's Ministry of Finance. [...]">Hermes AI agent used to automate attack on Thai Finance Ministry</a><br><h2>/r/NetSec</h2>2026-07-27 - <a href="https://www.reddit.com/r/netsec/comments/1v832a6/exploiting_volvoeichers_fleet_management_platform/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/EatonZ"> /u/EatonZ </a> <br /> <span><a href="https://eaton-works.com/2026/07/27/my-eicher-hack/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1v832a6/exploiting_volvoeichers_fleet_management_platform/">[comments]</a></span>">Exploiting Volvo/Eicher’s fleet management platform to gain control over all users and vehicles</a><br>2026-07-27 - <a href="https://www.reddit.com/r/netsec/comments/1v8ek4i/pollards_p1_factoring_algorithm_in_plain_c/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/DataBaeBee"> /u/DataBaeBee </a> <br /> <span><a href="https://leetarxiv.substack.com/p/pollards-p-1-factoring-algorithm">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1v8ek4i/pollards_p1_factoring_algorithm_in_plain_c/">[comments]</a></span>">Pollard's P-1 Factoring Algorithm in Plain C</a><br>2026-07-27 - <a href="https://www.reddit.com/r/netsec/comments/1v8192k/new_vbulletin_vulnerability/" title="<!-- SC_OFF --><div class="md"><p>CVE-2026-61511 - a critical vulnerability in vBulletin that allows an unauthenticated attacker to execute arbitrary code on a remote server.</p> </div><!-- SC_ON --> &#32; submitted by &#32; <a href="https://www.reddit.com/user/SSDisclosure"> /u/SSDisclosure </a> <br /> <span><a href="https://ssd-disclosure.com/vbulletin-runtime-template-runmaths-preauth-rce/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1v8192k/new_vbulletin_vulnerability/">[comments]</a></span>">New vBulletin Vulnerability!</a><br>2026-07-24 - <a href="https://www.reddit.com/r/netsec/comments/1v52lix/escaping_claude_coworks_local_vm_sandbox_via/" title="&#32; submitted by &#32; <a href="https://www.reddit.com/user/natcoba"> /u/natcoba </a> <br /> <span><a href="https://www.accomplish.ai/blog/sharedroot-escaping-claude-cowork-sandbox/">[link]</a></span> &#32; <span><a href="https://www.reddit.com/r/netsec/comments/1v52lix/escaping_claude_coworks_local_vm_sandbox_via/">[comments]</a></span>">Escaping Claude Cowork’s local VM sandbox via CVE-2026-46331</a><br><h2>/r/InfoSecNews</h2><h2>
</h2>