Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding
We have detected several campaigns using fake downloads of games, mods, cracks, and software to spread RenPy Loader. Once installed, the loader starts a complex,…
Month: July 2026
Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 files spanning lure templates, filename-spoofing tests, execution experiments,…
How Lithuania became a tech startup nation
Cyber City in Lithuania’s capital, Vilnius, was built on the site of a textile factory, which in its day turned out millions of socks a…
Fujitsu sells five Australian data centres
Fujitsu has finally sold its data centre business in Australia, substantially completing a strategic move that has been in train since 2024. The Tokyo-listed company…
OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability
A vulnerability in OpenSSL could allow attackers to cause a server’s memory to be exhausted before any security handshake, Okta’s red team discovered. Referred to…
CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers
CVE-2026-42533: Critical NGINX Bug Could Turn HTTP Requests Into Server Takeovers Pierluigi Paganini July 20, 2026 F5 fixes critical nginx flaw CVE-2026-42533 that can crash…
Why blocking AI models won’t stop the cyber threats they create
2026 has turned out to be the year when predictions about AI-powered cyberattacks, long hypothesized as a potential risk associated with AI improvement, seem to…
ServiceNow’s sandbox escape RCE hole now exploited in the wild
“A compromise that starts in the cloud tenant can end up inside the corporate network, turning a SaaS incident into an on-premises one,” he pointed…
2026 ISO and CSA STAR certificates are now available with two additional services
Amazon Web Services (AWS) successfully completed an onboarding audit with no findings for ISO 9001:2015, 27001:2022, 27017:2015, 27018:2019, 27701:2019, 20000-1:2018, and 22301:2019, and Cloud Security…
Threat Hunting: A Guide | Recorded Future
Enterprise security architectures have never been more heavily funded, yet the perimeter is functionally obsolete. Despite multi-million dollar investments in next-generation firewalls and complex defense…
Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes
Security researchers broke out of the sandboxes in four widely used AI coding agents, including Cursor, OpenAI’s Codex, Google’s Gemini CLI and Antigravity, without attacking…
Hackers Are Turning Microsoft 365 Calendar Invites Into Secret Malware Command Channels
A stealthy new malware strain called HOLLOWGRAPH that hijacks Microsoft 365 calendars to secretly communicate with hackers, disguising malicious commands as ordinary calendar invites. HOLLOWGRAPH…