#news


Summer of Clearinghouses

Jul 9, 2026 // 14:32

Everyone seems to have announced a clearinghouse over the past few weeks. We did too. Ours is called Athena, and the main thing that sets […]

Microsoft patches RoguePlanet Defender zero-day vulnerability

Jul 9, 2026 // 08:56

Microsoft has released a security patch to address a Defender zero-day vulnerability known as “RoguePlanet,” disclosed after the June 2026 Patch Tuesday. The flaw (tracked […]

TopĀ AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

Jul 9, 2026 // 08:25

Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker’s code on your own machine instead. That […]

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

Jul 9, 2026 // 07:35

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer’s computer. The assistant […]

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

Jul 9, 2026 // 07:05

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an end-to-end malicious residential proxy business using an […]

Mount Royal University confirms breach as hackers claim attack

Jul 9, 2026 // 00:36

Mount Royal University in Calgary says hackers stole and then deleted data from its file storage systems after breaching the university’s network. In an update […]

Hackers exploit Roundcube flaw to spy on academic researchers

Jul 8, 2026 // 23:37

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware. The campaign has […]

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Jul 8, 2026 // 23:37

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to developers and users of Paysafe, Skrill, and […]

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

Jul 8, 2026 // 20:11

Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are […]

Entra passkey enrollment vishing targets Microsoft 365 users

Jul 8, 2026 // 19:57

A threat actor has been targeting organizations across multiple sectors with voice-based fake security requests that ask Microsoft 365 users to enroll a new Entra […]

Previous 1 … 230 231 232 233 234 … 388 Next