Wiz & Lovable: Secure AI-Driven Development
Tools like Lovable have made it possible for anyone, beyond developers, to go from idea to deployed product in a matter of hours. Describe what…
Month: June 2026
Microsoft Defender email security benchmarking: Key insights from one year of data
Microsoft publishes quarterly email security benchmarking data comparing Microsoft Defender against secure email gateway (SEG) and integrated cloud email security (ICES) vendors using real-world threat…
DOJ seizes CFAKE, SOCFAKE deepfake nude sites under TAKE IT DOWN Act
The U.S. Department of Justice announced Friday that it has seized the CFAKE.com and SOCFAKE.com websites, which allegedly hosted nonconsensual AI-generated nude images and videos…
DPAPISnoop Tool Extracts CREDHIST Hashes for Offline Windows Credential Recovery
The open-source DPAPISnoop tool has been enhanced to extract CREDHIST entries, enabling offline cracking of historical Windows credentials and deeper insight into password patterns. Lefteris…
Jenkins RCE Flaw Exploited by Attackers in the Wild
A remote code execution (RCE) vulnerability in Jenkins, tracked as CVE-2026-53435, is now actively exploited in the wild. The flaw, stemming from insecure deserialization during…
Handala Hacking Group Claims Breach of California Water Service
The Iran-linked hacking group Handala has struck again, this time targeting the California Water Service (Cal Water). The group, which security researchers have been tracking…
Chinese hackers breached North American research institutions via REDCap servers
A China-linked cyber espionage operation targeted North American medical research institutions through compromised REDCap servers, using custom malware to gain persistent access and collect sensitive…
Deepfake porn sites are going offline (re-air) (Lock and Code S07E12)
This week on the Lock and Code podcast… If you weren’t taking deepfakes seriously before, it’s too late now to ignore them. According to new…
North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels
Cybersecurity researchers have flagged two malicious cyber campaigns that exhibit similarities with a persistent North Korean threat cluster known as Contagious Interview (aka Famous Chollima,…
The truth about Claude Mythos is less dramatic than it seems
The cyber security industry is no stranger to big claims. Every major technology shift arrives with two familiar promises: that it will change everything, and…
US saw risk of Anthropic models being diverted to foreign military intelligence
US Commerce Secretary Howard Lutnick took action against Anthropic’s latest Mythos and Fable AI models after warning of the unacceptable risk they could be deployed…
Chinese Hackers Target Medical, Military, and AI Research in North America
The Google Threat Intelligence Group (GTIG) has published an analysis of the attacks carried out by a cyberespionage group linked to the Chinese government. Tracked…