Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild
Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild Pierluigi Paganini July 06, 2026 Attackers are exploiting the critical Adobe ColdFusion flaw CVE-2026-48282, which allows…
Month: July 2026
Sysdig clocks first documented case of agentic ransomware
Artificial intelligence is claiming many firsts as it permeates every layer of technology, including the tools cybercriminals use to break into networks, steal sensitive data,…
Identity: The operational control plane for agentic AI
Existing security controls weren’t designed for AI agents. Static credentials and standing privileges aren’t sufficient for an emerging model where organizations need to rapidly authorize,…
Shai-Hulud 2.0 Aftermath: Trends, Victimology and Impact
Wiz Research and Wiz CIRT have been responding to the Shai-Hulud 2.0 incident (aka Sha1-Hulud) since news first broke on November 24, 2025. As of…
Phishing poses as big-brand job interview to steal Google accounts
A phishing campaign is impersonating more than 30 well-known brands, including Adobe, Netflix, Coca-Cola, and OpenAI, in fake job interviews to steal Google account credentials…
Gemini Live Voice Session Flaw Enables Tool Injection Through Misconfigured Ephemeral Tokens
A security flaw in how developers implement Google’s Gemini Live API allows attackers to hijack browser-based AI voice sessions, override system prompts, and trigger unauthorized…
Hackers Use Trusted Microsoft Domain and One-Time Codes to Hijack Corporate Accounts
A rising phishing technique is exploiting a legitimate Microsoft authentication flow to hijack corporate accounts without stealing passwords. Attackers are weaponizing the OAuth 2.0 Device…
ClickFix Scams Abuse Google, Cloudflare Checks to Deliver 7 Malware Families
A page asking you to prove you are human can be the first step in a malware infection. Malwarebytes says multiple campaigns active since at…
OpenSSH 10.4 arrives with security fixes and a post-quantum signature option
Operators who manage remote access to Unix and Linux systems keep a close watch on OpenSSH, the software that carries most SSH traffic across the…
How to tell if an image is AI-generated
A photo of an injured dog by the roadside. A dating profile with pictures that look almost too perfect. A donation appeal showing a family…
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
An Iranian hacking group affiliated with Iran’s Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern…
Asda’s supply chain woes bring lessons for IT project planning
Asda’s latest financial results have highlighted the business risks associated with large-scale IT implementations. Problems with the supermarket’s implementation of an SAP system, following its…