How Grammarly Uses Wiz MCP to Automate Security at Scale
Since 2009, Grammarly has set the standard for AI assistance, supporting millions of users and thousands of organizations in brainstorming, composing, and enhancing communication that…
Month: July 2026
US charges two over laundering $43 million from investment fraud
U.S. prosecutors on Thursday charged a New York man and woman for their roles in a large-scale crime ring that laundered money stolen in cyber…
A New AI Agent That Automates Penetration Testing with 18 Specialized Tools
A new open-source tool is bringing autonomous AI agents into offensive security workflows. PentestCode, a hard fork of OpenCode rebuilt specifically for penetration testing, runs…
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
ACR Stealer, an infostealer in circulation since 2024, is walking out of enterprise networks with saved browser passwords, live session tokens, PDFs, Microsoft 365 documents,…
Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits
Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits Pierluigi Paganini July 19, 2026 Public exploits are now available for two critical WordPress…
Wiz Completes IRAP Assessment | Australia
Wiz has completed the Infosec Registered Assessors Program (IRAP) assessment at the Protected level — enabling Australian government agencies to adopt cloud securely, confidently, and…
The Future of Age Verification: Your Face Never Leaves Your Device
Age checks are becoming law worldwide. The question is no longer whether platforms verify age, but what happens to the faces they collect — and…
NadMesh Uses Shodan to Find and Hijack Exposed AI and MCP Infrastructure
A sharp structural shift has been identified in the botnet landscape. Security researchers at XLab have uncovered NadMesh, a Go-based botnet that has been spreading…
New infosec products of the week: July 17, 2026
Here’s a look at the most interesting products from the past week, featuring releases from Cloudflare, Lineation.ai, Nudge Security, and Polygraf AI. Polygraf AI Meeting…
Armenia Detains Russian Tourist on U.S. Warrant for REvil Hacker, Lawyers Say Wrong Man
Armenia has held a Russian tourist named Aleksandr Ermakov in a detention center since June 28, on a U.S. extradition request for a REvil ransomware…
Build to Runtime, Covered: A New Standard for Container Image Visibility
Containers are the foundation of modern applications. They’re fast, portable, and make deploying code at scale easier than ever. But the more containers you build…
WordPress Core “wp2shell” RCE flaws get public exploits, patch now
Public exploits have been released for the critical “wp2shell” remote code execution vulnerabilities affecting WordPress Core, making it imperative that administrators patch their sites immediately.…