Hermes AI agent used to automate attack on Thai Finance Ministry
A threat actor used the open-source Hermes AI agent in unattended “YOLO” mode to automate post-exploitation activity during an alleged breach of Thailand’s Ministry of…
Month: July 2026
Bing Images Vulnerability Let Attackers Execute Remote Code on Microsoft Servers Using SVG File
Three critical remote code execution (RCE) vulnerabilities in Microsoft’s infrastructure, with two flaws in Bing Images allowing attackers to hijack backend image-processing servers using nothing…
New CISA/NSA Advisory Spotlights Russian Attacks on Zimbra Webmail
Overview of the Advisory On July 23, 2026, CISA, the NSA, the FBI, and their international partners issued a joint cybersecurity advisory alerting organizations to…
Cl0p Targets Internet-Exposed Windchill Servers in Global Engineering Data-Theft Campaign
Cl0p ransomware affiliates are actively exploiting internet-exposed PTC Windchill and FlexPLM deployments in a global data-theft campaign targeting high-value engineering environments. Observed post-exploitation activity includes…
Google gives developers an AI bug hunter that also writes patches
Google has launched a preview of CodeMender, an AI agent built to scan code for security flaws, confirm they are exploitable, and generate fixes for…
OpenAI’s agent escaped its sandbox during a security test
During an internal OpenAI security evaluation, a chain of AI models escaped its sandbox, reached the internet, and then accessed Hugging Face infrastructure to complete…
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Cybersecurity researchers have disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents that could have allowed a single phishing link to stealthily build, authorize, and…
Patrick Vallance returns as AI taskforce chair
Just days after he resigned as science minister, Patrick Vallance is back, chairing a new Andy Burnham government artificial intelligence (AI) Taskforce. The taskforce, headed…
Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models
SentinelOne has built what it calls the first long-horizon reverse-engineering benchmark for frontier AI models, using its own investigation into the recently documented Fast16 malware…
Google Fined €890M Under EU Digital Markets Act Over Search and Play Store Practices
Google Fined €890M Under EU Digital Markets Act Over Search and Play Store Practices Pierluigi Paganini July 24, 2026 EU fined Google €890M under the…
Industry’s message on CIRCIA: Please ask us fewer questions about cyberattacks
Industry groups who spoke at town halls hosted by the Cybersecurity and Infrastructure Security Agency about a pending cyber incident notification regulation had a few…
4 ways AI-driven defense is rewriting the cybersecurity playbook
The cybersecurity landscape has evolved beyond human scale. Today’s adversaries have replaced predictable, manual playbooks with machine-generated attack chains that can breach traditional controls in…