Tesco offloads VMware and CA software as Broadcom case rolls on
Tesco’s latest filing in its legal dispute with Broadcom over contractual obligations for VMware software and support shows that the supermarket giant is actively moving…
Month: June 2026
15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown
Law enforcement agencies in four countries, working with Europol and private partners, have disrupted SocGholish infrastructure and cleaned up nearly 15,000 infected WordPress websites. Active…
FortiBleed Exposes Global Credential-Spraying Operation
FortiBleed Exposes Global Credential-Spraying Operation Pierluigi Paganini June 20, 2026 FortiBleed exposed a massive campaign that made billions of login attempts against Fortinet VPNs, compromising…
Microsoft says web-enabled AI agents can trigger host-level RCE
The first involved an origin allowlist designed to accept connections only from localhost. Under normal conditions, this protection would block a browser visiting a malicious…
Closing the Security Gap in the Age of Agentic Coding
From Writing Code to Orchestrating It The way software gets built has fundamentally changed. Developers are no longer writing every line of code, they’re orchestrating…
Every AI Agent Is an Identity. Most Organizations Don’t Treat Them That Way
For years, security teams built their programs around a simple premise of if you control the identities, you can control the risk. Employees authenticate through…
AutoJack – A Single Web Page Can Hijack Your AI Agent to Execute Malicious Code
A critical exploit chain dubbed AutoJack that allows a single malicious web page to hijack Microsoft’s AutoGen Studio browsing agent and execute arbitrary code on…
Critical WordPress Plugin Bug Could Allow File Deletion Attacks on 1 Million Sites
A serious security vulnerability has been uncovered in the widely used Avada (Fusion) Builder WordPress plugin. This flaw could enable unauthenticated attackers to delete arbitrary…
eFAQ Publishes Investigation Into Alleged Scam Activity and Coordinated Reputation Attacks
New York, USA, June 19th, 2026, CyberNewswire eFAQ has published a documented investigation into a coordinated reputation attack campaign aimed at influencing brand perception in…
Forget traffic lights, Google’s reCAPTCHA may ask for hand gestures
Google has introduced hand gesture verification for reCAPTCHA, a new method for verifying that a user is human. Google’s reCAPTCHA is part of Google Cloud…
AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution
Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent…
nLighten completes £15m refurbishment of Bristol ‘edge’ datacentre
nLighten has completed a £15m refurbishment of its Bristol datacentre, doubling its artificial intelligence (AI)-ready power capacity to 1.2MW to support regional enterprise workloads. The…