Wiz in the Verizon DBIR: AI Risk & Cloud Security Trends
Every year, the Verizon Data Breach Investigations Report (DBIR) provides a snapshot of how attackers are compromising organizations. This year’s report highlights a clear trend:…
Month: July 2026
RiskX interview video featuring Colin Mahony and Mastercard’s Aditi Sawhney
Every fraud investigator knows the pattern: the fraudulent charge is the first thing anyone notices and the last thing the attacker actually does. Before it…
AI-Coded Malware | Analyzing Vibe-Coded AD Enumeration
AI-augmented tradecraft is changing the threat landscape that defenders have operated in. For years, defenders have relied on identifying the signatures and behaviors of off-the-shelf…
New Helix vishing group emerges in SharePoint data theft attacks
A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal…
Six U-Boot FIT Signature Verification Flaws Enable Code Execution and DoS Attacks
A new security analysis by Binarly Research has uncovered six critical vulnerabilities in the widely used U-Boot bootloader, exposing embedded systems and server management platforms…
GigaWiper Uses OneDrive Update Scheduled Task for Persistent Destructive Access
A sophisticated Golang-based backdoor family now tracked as GigaWiper that fuses extensive C2 controls with multiple destructive payloads. What makes GigaWiper noteworthy is not merely…
Turning software supply chain security into a daily habit
In this Help Net Security video, Anastasia Tikhonova, Global Threat Research Lead at Group-IB, explains how to operationalize software supply chain risk. Instead of filing…
npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk
Ravie LakshmananJul 09, 2026Supply Chain Security / DevSecOps GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along…
Treat AI like electricity, not a killer app
It’s rare AI news that doesn’t land one of two ways: either we’re all screwed, or we’re on the verge of thoughtfully managed intelligence that’ll…
CBA to cut 176 technology and engineering roles
CBA is set to cut 176 technology and engineering roles but has refuted a union suggestion that the jobs are being moved to India. The…
12 Million Impacted by Data Breach at Japanese Telco KDDI
Japanese telecommunications giant KDDI this week confirmed that over 12 million people were affected by a June data breach. The incident occurred on June 17…
Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656)
Microsoft fixed Defender flaw RoguePlanet (CVE-2026-50656) Pierluigi Paganini July 09, 2026 Microsoft fixed RoguePlanet (CVE-2026-50656), a Defender flaw allowing local attackers to gain higher privileges…