#news


Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots

Jul 7, 2026 // 19:39

A critical flaw in Google’s Dialogflow CX could have let an attacker with edit rights on one chatbot take over every chatbot in the same […]

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

Jul 7, 2026 // 18:37

A green pipeline is not a governed one, and agentic coding is widening the gap faster than review can close it. By Shane Warden, Principal […]

Spain arrests suspected member of pro-Russian hacktivist groups

Jul 7, 2026 // 18:37

Spain’s National Police have arrested a man who is suspected of being an active member of the CyberArmy of Russia Reborn (CARR) and Z-Pentest, both pro-Russian […]

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

Jul 7, 2026 // 18:21

Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial intelligence (AI) platform, that could result in […]

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

Jul 7, 2026 // 18:21

A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization’s private repositories, researchers at Noma Security have shown. The attacker […]

DEBULL Tooling Abuses Microsoft Device-Code Flow to Target M365 Accounts

Jul 7, 2026 // 18:21

A Microsoft 365 device code phishing campaign has been observed leveraging collaboration-themed lures to take control of victim accounts between the last week of June […]

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

Jul 7, 2026 // 15:19

U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows device ID, according to a […]

New Januscape Linux flaw allows VM escape on Intel, AMD devices

Jul 7, 2026 // 15:17

A 16-year-old Linux kernel vulnerability, dubbed Januscape, allows attackers to escape a virtual machine and execute arbitrary code on the host. According to Hyunwoo Kim, […]

Webinar tomorrow: Why modern email attacks require a new approach to defense

Jul 7, 2026 // 15:16

Organizations continue to invest in secure email gateways, multi-factor authentication, and identity protection, yet phishing, business email compromise (BEC), and account takeover (ATO) attacks remain […]

What Changes When Your Software Supply Chain Includes AI Writing Your Code?

Jul 7, 2026 // 14:43

Software supply chain security was hard enough. Then AI joined the build pipeline. For five years, “software supply chain security” meant one question: what’s in […]

Previous 1 … 233 234 235 236 237 … 388 Next