US government to consider AI Kill Switch law
US lawmakers are to consider enacting legislation that would force developers of powerful artificial intelligence (AI) systems – such as OpenAI or Anthropic – to…
Month: July 2026
Zimbra Phishing Campaign Exploits CVE-2025-66376
A Zimbra phishing campaign attributed to Russian state-supported cyber actors has targeted Western government and commercial organizations, exploiting CVE-2025-66376 to access sensitive email data and…
AegisAI Raises $36 Million for AI-Powered Email Security
Email security company AegisAI announced on Thursday that it has raised $36 million in a Series A funding round. The round was led by Battery…
UAC-0099 Is Now Hiding Malware Inside a Fake Notepad++ Plugin to Target Ukrainian Organizations
UAC-0099 Is Now Hiding Malware Inside a Fake Notepad++ Plugin to Target Ukrainian Organizations Pierluigi Paganini July 24, 2026 UAC-0099 delivers malware via a fake…
The most vulnerable AI products are also some of the most commonly exposed online
Dive Brief: North America accounts for the most internet-exposed industrial control systems (ICS) as of early 2026, with roughly 38% of all such devices located…
Microsoft, tech companies throw weight behind spread of open-source AI
Microsoft, along with more than two dozen tech companies, are pressing policymakers to support open-source AI systems and code across society, arguing that it will…
Email threats changed after the Tycoon2FA take-down
The adaptation came in the form of using Microsoft Teams as a social engineering channel. Attackers established conversations to build trust before attempting credential theft…
Operationalize Cloud Security in Zendesk: Wiz Now Available on the Zendesk Marketplace
As organizations move faster in the cloud, security teams need more than visibility—they need a way to ensure critical risks are prioritized and remediated across…
Microsoft blames massive Microsoft 365 outage on maintenance bug
Microsoft says a bug in its automated network maintenance request system caused Thursday’s massive outage by mistakenly removing IP routes from more devices than intended,…
Certighost Active Directory CS Flaw Allows Low-Privileged Users to Compromise Domain
A newly disclosed Active Directory Certificate Services (AD CS) vulnerability, dubbed Certighost, allowed a low-privilege domain user to impersonate a Domain Controller and take over…
KnowBe4’s Unveils Custom AI Video Builder
KnowBe4, the global leader in digital workforce security, securing both AI agents and humans, today announced the launch of Custom AI Video Builder, a new…
Foxit PDF Reader Flaw Lets Local Attackers Gain SYSTEM Privileges via DLL Sideloading
A recently disclosed vulnerability in Foxit PDF Reader may allow a local attacker with existing code execution to elevate their privileges to NT AUTHORITYSYSTEM. This…