Can the UK become a digital maker instead of a service taker?
Before the seeming ubiquity of the cloud platforms we’re accustomed to today, UK companies and our Government had a decades-long history of strong and healthy…
Month: July 2026
NAB is modernising data pipelines for its Ada platform
NAB is going back and standardising the way data pipelines for its Ada data platform are built, which will lower run costs and make new…
Armored Likho APT Targeting Government, Electric Power Entities
A recently discovered advanced persistent threat (APT) actor has been targeting government and electric power organizations in multiple countries, Kaspersky reports. Dubbed Armored Likho, the…
Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild
Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild Pierluigi Paganini July 06, 2026 Attackers are exploiting the critical Adobe ColdFusion flaw CVE-2026-48282, which allows…
Sysdig clocks first documented case of agentic ransomware
Artificial intelligence is claiming many firsts as it permeates every layer of technology, including the tools cybercriminals use to break into networks, steal sensitive data,…
Identity: The operational control plane for agentic AI
Existing security controls weren’t designed for AI agents. Static credentials and standing privileges aren’t sufficient for an emerging model where organizations need to rapidly authorize,…
Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact
Wiz Research and Wiz CIRT have been responding to the Shai-Hulud 2.0 incident (aka Sha1-Hulud) since news first broke on November 24, 2025. As of…
Phishing poses as big-brand job interview to steal Google accounts
A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, in fake job interviews to steal Google account credentials…
Gemini Live Voice Session Flaw Enables Tool Injection Through Misconfigured Ephemeral Tokens
A security flaw in how developers implement Google’s Gemini Live API allows attackers to hijack browser-based AI voice sessions, override system prompts, and trigger unauthorized…
Hackers Use Trusted Microsoft Domain and One-Time Codes to Hijack Corporate Accounts
A rising phishing technique is exploiting a legitimate Microsoft authentication flow to hijack corporate accounts without stealing passwords. Attackers are weaponizing the OAuth 2.0 Device…
ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families
A page asking you to prove you are human can be the first step in a malware infection. Malwarebytes says multiple campaigns active since at…
OpenSSH 10.4 arrives with security fixes and a post-quantum signature option
Operators who manage remote access to Unix and Linux systems keep a close watch on OpenSSH, the software that carries most SSH traffic across the…