OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps
A malware framework called OkoBot has been running on Windows machines since April 2025, and one of its modules is built to con hardware wallet…
Month: July 2026
Prime minister-in-waiting Andy Burnham takes aim at outsourcing
On the eve of his anointment as prime minister, Andy Burnham told Labour MPs he will rein in government outsourcing. According to a Financial Times…
Pentagon pauses cyber audit rule blamed for supplier exits
The Pentagon is suspending the next phase of a cyber security certification program for defence contractors, backing off a compliance requirement that industry executives had…
CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday urged immediate hardening of Microsoft SharePoint servers in light of recently disclosed zero-day vulnerabilities. The…
US and allied Governments’ Recommendations: Securing Network Devices Against Russian APT Groups
US and allied Governments’ Recommendations: Securing Network Devices Against Russian APT Groups Pierluigi Paganini July 15, 2026 US and allies warn of Russian APT groups…
US launches vulnerability clearinghouse amid AI-fueled surge in flaws
The Trump administration hopes the program will accelerate the discovery and fixing of serious technical problems before hackers exploit them. Source link
How stalkers are exploiting Google Chrome sync to spy on victims
Cyberstalkers are increasingly exploiting a feature in Google Chrome meant for mobile phone user convenience, but can give intruders broad access to a device owner’s…
NPM ecosystem hit with two new supply chain compromises
Initially the attackers released new package versions with two malicious scripts that get executed at install time using a preinstall hook in the configuration script.…
Windows 0-day drops the same day Microsoft releases record number of patches
“If I can set up the system so that it runs my code when the admin user logs in,” the attacker has de facto administrator…
The Red Agent POV: The One Boolean That Broke a B2B Platform’s Credit System
This Red Agent POV focuses on business-logic flaws, and deep dives into a critical paywall bypass discovered in a leading B2B platform’s data API. As…
SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited
SonicWall patched two recently exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances which may have been chained for unauthenticated remote code…
Zoom warns of critical account takeover vulnerability
Zoom is warning of a critical vulnerability in its desktop client and software development kit for Windows that could be exploited by an unauthenticated party to…