UK regulator crackdown on finfluencers gathers pace
The UK financial services regulator took enforcement action against 74 “finfluencers” last year, as it continues to target unregulated individuals who use social media to…
Month: July 2026
Estée Lauder Data Breach Linked To Oracle EBS Flaw
The Estée Lauder data breach has prompted the global cosmetics company to notify affected individuals after hackers exploited a vulnerability in Oracle E-Business Suite, a platform used…
Clover Health Investments Discloses Data Breach
Healthcare technology company Clover Health Investments has disclosed a data breach impacting customers’ personal and health information. Discovered on July 4, the incident was the…
Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875
Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875 Pierluigi Paganini July 21, 2026 Attackers are exploiting critical ServiceNow flaw CVE-2026-6875, allowing unauthenticated remote code execution on…
White hat hacker Park Chan-am zeros in on the AI era’s key security challenges
The ever-widening blast radius of AI testing Local AI testing environments are becoming a dangerous security blind spot that information security leaders often overlook. Rapid…
Exploitation in the Wild of wp2shell
What are CVE-2026-63030 & CVE-2026-60137? These vulnerabilities comprise a critical pre-authentication remote code execution (RCE) chain in WordPress Core, dubbed “wp2shell”, discovered by Searchlight Cyber…
SonicWall SMA1000 flaws exploited as zero-days to push custom malware
Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances. Last…
The Privilege Paths Attackers See, That You Don’t
Why identity fragmentation is the blind spot behind most breaches—and what a platform approach changes The Identity Problem Hiding in Plain Sight Identity is at…
Researchers Uncover HOLLOWGRAPH: Malware That Hides Inside Microsoft 365 Calendar Invites
A previously undocumented strain of Windows malware is using Microsoft 365 calendar invites as a covert communications channel, allowing attackers to issue commands and exfiltrate…
European Password Manager Passwork Shares Codebase and Updates With FSTEC-Certified Russian Firm
Passwork Europe, a Spain-based password manager used by European public sector bodies, universities, and private organizations, is facing scrutiny after an investigation led by OCCRP…
FBI Arrests Florida Man in $220,000 Steam Crypto Theft Case
A 21-year-old Florida man has been arrested for allegedly helping distribute malware through video games that infected about 8,000 devices and stole at least $220,000…
Nobody was checking the drives that encrypt your laptop
A drive ships with a label promising hardware encryption. You plug it in, set a password, and trust the chip inside to handle the rest.…