NVIDIA BlueField Vulnerability Enables Code Execution Attacks
NVIDIA has disclosed a serious vulnerability affecting its BlueField DPUs and ConnectX networking platforms that could allow attackers to execute code on affected systems if…
Month: July 2026
Data Loss Risks During Microsoft 365 Migration and Ways to Prevent Them
Preventing Data Loss in Microsoft 365 Migration Migrations do not fail loudly. The project closes, the team moves on, and three weeks later, someone in…
Managing cyber-physical risk in smart buildings
Smart buildings promise greater efficiency, improved sustainability and enhanced operational oversight. However, as building management systems, security platforms and energy infrastructure become increasingly interconnected, they…
Critical VMware vCenter Flaws Let Remote Attackers Bypass Authentication and Execute Code
Broadcom has released important security updates addressing critical vulnerabilities in VMware that could allow remote attackers to bypass vCenter authentication or execute arbitrary code. These…
CVSS 10.0 RufRoot Flaw Allowed Attackers to Hijack Ruflo Without Logging In
A vulnerable Ruflo deployment could be reached without authentication, and a single network request was enough to execute commands inside the MCP bridge container, according…
MIND AI DLP Agents automate DLP classification, investigations and remediation
MIND has announced MIND AI DLP Agents with capabilities focused on classification, investigation, policies, remediation and exception management. MIND also includes a Model Context Protocol…
Apple accused of letting fake crypto app steal $1.8 million
Apple’s tagline for its App Store says, “The apps you love. From a place you can trust.” You might love the apps, but can you…
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
Cybersecurity researchers have flagged a maximum-severity security flaw in Ruflo, an open-source agent meta-harness for Anthropic Claude Code and OpenAI Codex, that could result in…
Laundry Bear pivots to new exploit days after Zimbra alert
The emergent Russian advanced persistent threat (APT) actor dubbed Laundry Bear has initiated a new wave of exploitation activity abusing a Microsoft Outlook Web Access…
Fed gov boosts GovAI with models from Google, Nvidia and more
The Department of Finance has materially expanded the number of AI models that can be sourced through its whole-of-government service GovAI. The service has notably…
ThreatLocker Raises $190 Million in Series F Funding
Florida-based zero trust security company ThreatLocker announced on Wednesday that it has raised $190 million in a Series F funding round. The company previously raised…
Claude Mythos Shows AI Can Outpace Human Cryptography Research
Claude Mythos Shows AI Can Outpace Human Cryptography Research Pierluigi Paganini July 29, 2026 Claude Mythos found new flaws in HAWK and reduced AES, proving…