> TODAY'S SUMMARY (111 articles)
Today's cybersecurity news highlights several critical threats and trends. A significant data breach at DigiCert has exposed sensitive business customer information due to an improperly secured system. Meanwhile, fake security tools on GitHub are targeting cybersecurity professionals, deploying backdoors and infostealers. Authorities are also raising alarms about AI-assisted fraud, with three individuals accused of using deepfakes to impersonate CEOs and defraud businesses of over $129 million. In Japan, an emergency cybersecurity package was announced following a wave of attacks on corporations and government agencies. Additionally, vulnerabilities in OpenSSH are being actively exploited, allowing attackers to bypass authentication on certain Linux systems. Finally, there is growing concern over attacks targeting industrial refrigeration systems, which could have serious implications for food safety and supply chains.
|
// AI-powered summary generated at 20:00
Nightmare Eclipse a publié LegacyHive, une zero-day dans le service de profils utilisateur de Windows. Elle fonctionne sur les machines Windows et WS à jour.
Le post LegacyHive : la zero-day Windows publiée juste après le Patch Tuesday de juillet a été publié sur IT-Connect.
Oura Rings, Garmin GPS fitness watches, Apple Watches, Whoop bands—every year, more and more tech devices are promising to monitor our health and fitness, guide us toward healthier living, and provide useful health metrics to take to our doctors. But few of these tools provide the sorts of privacy a...
Which Windows, SharePoint, and AD vulnerabilities are being exploited in July 2026, and how can organizations adapt to updates containing 500+ fixes?
US and allies warn of Russian APT groups targeting routers and network devices to compromise critical infrastructure worldwide. The US and allied governments warn that Russian state-sponsored APT groups are scanning and exploiting poorly secured network devices, especially routers, to access critica...
Researchers said the vulnerabilities, which attackers are chaining together, were first exploited three weeks before the vendor disclosed and patched the defects.
The post SonicWall customers under threat as attackers exploit 2 zero-days appeared first on CyberScoop.
The California legislature has stepped back from a plan that would have expanded its age-gating law, removing language that could have compounded serious threats to users’ speech, privacy and security just to browse the internet. A.B. 1856, authored by Assemblymember Buffy Wicks, will now move forwa...
The vulnerability in the decades-old game could have allowed hackers to take over victims’ computers with a malicious game invite.
Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) botnet framework dubbed TuxBot v3 Evolution that shows signs of being developed with assistance from a large language model (LLM), albeit with not so successful results.
"While the AI complied with...
A Russian-speaking threat actor known as "bandcampro" used Google's open-source Gemini CLI AI tool as a hacking agent and to operate a small-scale botnet. [...]
Clayton maintained he was not an “election denier” but wouldn’t directly answer a number of questions about the 2020 race, his predecessor’s appearance at a January election office raid and more.
The post Dems press DNI nominee Jay Clayton on election security questions, but leave dismayed appeared...
Learn how to conduct a password audit with a step-by-step framework to identify weak passwords, risky access, and poor credential hygiene.
Senators pressed director of national intelligence nominee Jay Clayton about his stance on the 2020 election and previous statements about voter fraud. Other issues took a back seat.
A coalition of 42 state attorneys general reached an $18 million settlement with 23andMe for cybersecurity failings that led to a data breach.
Artur Stetsko discovered that the .NET did not properly validate
authentication data. An attacker could possibly use this issue to elevate
privileges. (CVE-2026-47300)
Levi Broderick discovered that .NET did not properly handle XML encryption
during parsing. An attacker could possibly use this issu...
The effort to age gate the internet is back in Washington—and now it has a new name. Recently passed by the House of Representatives, the KIDS Act is a sprawling package of proposals to control what we can see and say online. Supporters claim the KIDS Act is needed to protect minors online. But if l...
The hacker used an employee's credentials to access source code, which revealed how Suno scraped decades of audio.
Sympa could allow unintended access to network services.
LegacyHive PoC exposes a Windows Privilege Escalation flaw affecting fully patched Windows desktop and server systems. Just hours after Microsoft’s July 2026 Patch Tuesday, security researcher Nightmare Eclipse, also known as Chaotic Eclipse, published a new Windows zero-day proof-of-concept called...
Several security issues were fixed in Tomcat.
La Chambre des représentants a désigné le nouveau directeur de la Chambre Contentieuse de l'Autorité de protection des données (APD), complétant ainsi le comité de direction de l'autorité.Le nouveau directeur, un magistrat, a prêté serment le 15 juillet 2026, succédant à son prédécesseur qui a quitt...