The Four Elevations of Effective Fraud Prevention
Effective fraud prevention programs call for monitoring across every customer touchpoint from account creation to checkout, login to customer service interactions. Once established, this practice…
Month: June 2026
Hackers Leveraged Shopify Oder-Tracking App Shop to Push Fake Invoices
Hackers are no longer waiting in your inbox. A newly identified scam technique places fake invoices directly inside shopping app order histories, making them feel…
Amazon Q Developer Vulnerability Allows Code Execution via Malicious Repositories
A critical security flaw discovered in the Amazon Q Developer Extension for Visual Studio Code (VS Code) left developers vulnerable to arbitrary code execution and…
New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets
Swati KhandelwalJun 26, 2026Linux / Vulnerability DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family. JFrog Security Research published a working exploit walkthrough for…
Pegasystems CEO and founder Alan Trefler on AI agent ‘madness’
Mainstream software suppliers are pursuing a “philosophy of madness” by persuading enterprises to deploy thousands of artificial intelligence (AI) agents, says Alan Trefler, the CEO…
New Enterprise-Ready MCP Specification Brings New Security Challenges
MCP is evolving from a single-user server to an enterprise-ready server fit for expanded cloud-native AI usage. Companies have 12 months to get ready. The…
Wiz Integrates with Notion Custom Agents via MCP
Notion Custom Agents are shared AI teammates that automate work across your workspace using instructions, permissions, and connections to the tools your team already relies…
PirloTV sports piracy network disrupted as 44 domains seized
A major sports piracy ring linked to the illegal PirloTV streaming platform has been disrupted in an action that targeted 44 domains. PirloTV is a…
New GIFTEDCROOK Chain Abuses WinRAR ADS and Reflective Loading to Steal Browser Data
A newly documented attack chain tied to threat actor group UAC-0226 is putting Windows users at serious risk. The campaign uses booby-trapped WinRAR archives, hidden…
Cloud Bucket Hijacking Lets Attackers Silently Exfiltrate AWS, Google Cloud Data
A critical cloud storage attack technique that exploits a fundamental architectural vulnerability shared across all major cloud service providers. The technique, dubbed cloud bucket hijacking,…
CISA Adds Exploited PTC Windchill RCE Flaw to KEV as Web Shell Attacks Continue
Ravie LakshmananJun 26, 2026Vulnerability / Software Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical remote code execution vulnerability impacting…
Cost the major barrier in AI’s race to space
Space-based datacentres (SBDC) are achievable in five to 10 years, but financial feasibility is the biggest bottleneck to its adoption, according to a white paper…