WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw
HermeticReader is the name given to a recently disclosed vulnerability in the Adobe Acrobat PDF extension for Chrome, tracked as CVE-2026-48294. Researchers discovered the issue…
Month: July 2026
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown flaw in Zimbra’s webmail client. The payload goes after the last 90…
MI5 and PSNI ordered to pay damages to BBC journalist Vincent Kearney over unlawful surveillance
A court has ordered the Security Service and the Police Service of Northern Ireland (PSNI) to pay damages to a former BBC journalist for unlawfully…
OpenAI And Hugging Face Address AI Security Incident
OpenAI and Hugging Face are investigating an AI security incident involving an AI agent that compromised infrastructure while models were being evaluated for advanced cyber…
Scaling innovation safely: innovating through rapid prototyping with the mission in mind
Scaling AI from prototype to production is not simply a question of automation. Many prototypes prove what is technically possible. Fewer prove what is operationally…
OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider
Zenity Labs has found and disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents, which it names AgentForger; a tailored cross-site request forgery (CSRF). With…
Chaos ransomware deploys browser-based msaRAT to evade network detection
Chaos ransomware deploys browser-based msaRAT to evade network detection Pierluigi Paganini July 23, 2026 Cisco Talos uncovered msaRAT, a Chaos ransomware RAT that hides C2…
The Entire Game for AI Is Articulation of Ideal State
I’ve been saying this for something like eight months now, with varying approaches and volume levels, and no one is paying attention yet. This is…
Russia-backed threat actor targets Western organizations in phishing campaign
The threat actor exploited a zero-day flaw in Zimbra to exfiltrate months of emails and other sensitive information. Source link
Russian espionage group using novel Zimbra exploit to steal sensitive data from Western countries
A Russian state-sponsored threat group has been stealing sensitive data from governments and commercial organizations since July 2025 via a novel exploit in popular Linux-based…
[tl;dr sec] #338 – OpenAI and Hugging Face, Accelerating EDR Evasion, Google’s Mantis
When models decide to find 0-days instead of solving a benchmark, using LLMs to extract EDR logic, Google’s AI security review skills and pipeline I…
Russian Global Webmail Espionage
Executive Summary Unit 42 has observed a persistent cyberespionage campaign we track as CL-STA-1114. This activity cluster overlaps with activity from a Russian threat actor…