Why IaC Coverage Belongs on Your Security Dashboard
Every security domain has a number that tells you how much of it is under control. Identity has MFA adoption. Patching has mean time to…
Month: July 2026
CISA warns of actively exploited RCE flaws in Joomla extensions
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that attackers are exploiting vulnerabilities in the iCagenda and Balbooa Forms extensions for Joomla to…
Internet-Wide Scans Target MCP Servers, Claude Credentials, and Exposed AI Models
Internet-facing AI systems are becoming a new target for opportunistic attackers. Recent scanning activity shows that threat actors are actively searching for Model Context Protocol,…
Lessons Learned from CISA’s Recent GitHub Leak – Krebs on Security
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a recent data leak in which a contractor published dozens of internal CISA…
Russian FSB-Linked Turla Hackers Target French Ministries, Embassies, and Defense Entities
France has publicly attributed a long-running cyber-espionage campaign targeting government, diplomatic and defence-linked organisations to Turla, an intrusion set associated with the 16th Center of…
Torq and Criminal IP Partner to Deliver Decision-Ready Threat Intelligence for Autonomous SOC Operations
Torrance, California, USA, July 13th, 2026, CyberNewswire Criminal IP, the cyber threat intelligence search engine and attack surface management platform, today announced a new partnership…
Cyber Risk Oversight in the AI Era: How Resilient is Your Enterprise?
13 Jul Cyber Risk Oversight in the AI Era: How Resilient is Your Enterprise? Posted at 08:41h in Blogs by Taylor Fox This week in…
Cloudflare Precursor uses continuous behavioral analysis to stop advanced bots
Cloudflare has announced the general availability of Precursor, a next-generation, continuous behavioral validation engine for bot management. Precursor runs seamlessly inside web browsers to monitor…
Ghostcommit attack hides malicious AI instructions in images
Ghostcommit is a proof of concept that shows how AI assistants used to review software code can be tricked by hidden instructions embedded in images.…
Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft
A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial intelligence (AI)-assisted lure creation,…
European Commission accepts SAP’s on-premise ERP commitment
The European Commission (EC) has accepted commitments from SAP to address European Union competition concerns relating to its aftermarket support services for on-premise enterprise resource…
Chat Control 1.0 Returns After European Parliament Vote
The Chat Control 1.0 framework has been revived after the European Parliament voted to restore the legal basis that allows major technology companies to voluntarily…