Do Son VMRay Labs details Operation STANDOFF, a Russian-speaking threat group running malware, a proxy-botnet and AI influence tools behind fake GitHub traffic.
ENKI WhiteHat traced a Kimsuky Gomir variant into South Korean groupware vendors, plus a new DriveTroy backdoor that hides its C2 in Google Drive.
cybernewswire
Philadelphia, Pennsylvania, 27th July 2026, CyberNewswire
CERT/CC warns of a Plane authorization bypass, CVE-2026-15342. It lets users reach other workspaces' files, and no patch exists yet.
Apache Fory vulnerabilities hit Java, C++, and Rust deserialization, including CVE-2026-64606. Upgrade to Fory 1.4.0 to fix all four flaws.
A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution.
TELESHIM malware hits Middle East governments and abuses Telegram C2 to hide traffic. Zscaler ThreatLabz found the new backdoor and its tooling.
Malwarebytes finds fake games spreading Amatera Stealer through RenPy Loader, MSBuild abuse, and EtherHiding C2. See the infection chain and defenses.
APT42 TAMECAT malware now blends AI-assisted phishing with cloud C2 to steal credentials from defense and nuclear-sector targets.
Prominent publishers re-evaluate Google partnerships as Google AI Overviews traffic decline severely impacts organic search referrals and audience growth.
Samsung One UI 9 permanently locks a phone after 13 wrong passcodes, forcing a factory reset. Accidental lockouts remain very unlikely by design.
Claude AI shared conversation links were indexed by Google due to a config error, exposing some chats with private data. Delete sensitive shares now.
Windows 11 Build 26300.8935 speeds up deleting large, heavily fragmented files in File Explorer, a rare performance win rolling out gradually.
Intel will revive hyper-threading in its 2028 Coral Rapids Xeon server CPUs, CEO Lip-Bu Tan said, as it fights to reclaim CPU market share.
The EU's preliminary findings accuse TikTok of breaching DSA minor-safety rules through public-by-default accounts and For You algorithmic exposure.
Qualcomm notifies clients of double-digit chip price hikes starting September 2026, impacting Android smartphones and wearable technology.
Read our latest weekly threat intelligence briefing. This active vulnerability update reveals critical Microsoft Exchange and Oracle flaws for July 2026.
CVE-2026-49176 is a Windows WalletService elevation of privilege flaw. Full details and a public PoC exploit are out, so patch Windows now.
Proofpoint details the Cruciferra crypter service that cloaks RATs and infostealers using BYOVD EDR tampering and 90+ custom encryption routines.
Discover the operational systems that protect private jet passengers, from pilot training and aircraft maintenance to safety management systems, flight planning, and risk assessment procedures.
Discover how Microsoft is strengthening KMS activation by introducing hardware-based trust and TPM verification to combat forged licensing servers.
Google engineers propose restricting local ADB loopback connections on Android to close a security gap, a change that could break Shizuku and aShell.