Sharp rise in AI adoption for cyber defense exposes major governance gap
A report by the SANS Institute indicates a split between senior security leaders and frontline practitioners. Source link
Month: July 2026
US sanctions First VPN and administrator for supporting ransomware
The Treasury Department is slapping sanctions on First VPN and its administrator for allegedly selling services to ransomware operators, as well as another person aiding…
AI incidents need a new playbook. Here’s how to build one
Then there is the hybrid case, which carries the most legal exposure right now. Hallucinations are model-originated but they land in court like human errors.…
Wiz for Government Earns FedRAMP High Security Approval
We are excited to share that Wiz for Government has achieved FedRAMP® High authorization. This milestone reinforces Wiz’s commitment to helping U.S. public sector organizations…
CVE-2026-55040: Microsoft SharePoint JWT Token Authentication Bypass (FIXED)
Overview Rapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated…
LastPass, Bitwarden users targeted with fake security alerts
LastPass is warning users about an ongoing phishing campaign that is using fake security notices to direct them to fraudulent websites. The phishing emails are…
FortiSandbox Vulnerability Exposes VNC Server to Unauthenticated Attackers
Fortinet has disclosed a high-severity vulnerability in FortiSandbox that could let unauthenticated attackers gain access to the VNC server of virtual machines used for malware…
Miasma Worm Returns as RAT-First npm Attack With Automatic Propagation Disabled
Four AsyncAPI packages previously affected by the Shai-Hulud: The Second Coming campaign have been compromised again, with new malicious releases delivering a RAT-focused build of…
Telegram’s t.me Links Go Offline After Registry Places Domain on serverHold
Telegram’s widely used t.me short-link domain stopped resolving worldwide after the .me registry placed the domain under serverHold, cutting off browser access to links for…
Human Risk Intelligence Is Part Of The Modern Cybersecurity Stack
14 Jul Human Risk Intelligence Is Part Of The Modern Cybersecurity Stack Posted at 08:51h in Blogs by Taylor Fox This week in cybersecurity from…
New macOS malware steals passwords by posing as Apple’s crash-reporting tool
Jamf Threat Labs has uncovered a new macOS infostealer named CrashStealer that disguises itself as Apple’s crash-reporting tool to steal passwords, Keychain data, and cryptocurrency…
Warning: Scammers are using FaceTime to empty bank accounts
Apple is urging users to treat any suspicious FaceTime call or message as untrusted, especially if it involves payments, refunds, password resets, or requests for…