Trump nominee vows to sharpen US media challenge to China
US President Donald Trump’s nominee to lead the United States’ international broadcasting agency pledged on Thursday to sharpen its media challenge to China, including by…
Month: July 2026
Coordinated Minnesota water systems cyberattack leaves feds chasing two open questions
“Depending on configuration,” Caveza explains, “an attacker could gain monitoring capability, manipulate what operators see, or in some circumstances modify operational settings.” Fortunately, manual safety…
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
Russian state hackers are using a maximum-severity vulnerability in Microsoft’s Outlook’s Exchange Server to backdoor unpatched machines and steal credentials and other confidential information from…
Extend Amazon Inspector SBOM Generator with Plugins
Amazon Inspector is an automated vulnerability management service that continually scans Amazon Web Services (AWS) workloads for software vulnerabilities. The vulnerability management capabilities of Amazon…
You were onto something with “It’s the Climb,” Miley
Welcome to this week’s edition of the Threat Source newsletter. For my fianceé’s 30th birthday, I took her on a weekend trip to Shenandoah National…
Critical Ruflo flaw lets attackers hijack AI agents through exposed MCP bridge
The researchers said the bridge’s /mcp endpoint accepts tool invocations without authentication. In a proof-of-concept demonstration, they used Ruflo’s terminal_execute tool to obtain command execution…
Google says it fixed more Chrome bugs in June than over the past two years, thanks to AI
With help from its internal AI tools, Google says it has patched more security flaws in its Chrome browser in the last month than in…
Dogfooding at scale: migrating cdnjs to Cloudflare’s Developer Platform
As of June 23, 2026, cdnjs, one of the Internet’s busiest open-source CDNs, is running exclusively on Cloudflare’s Developer Platform. Along the way, cdnjs surfaced…
What’s new in Microsoft Security: July 2026
Every organization needs security that protects end to end with the speed and scale of AI. Microsoft’s vision is simple: security should be ambient and…
Canada’s Bill C-8 redefines critical infrastructure security
Canada’s new Critical Cyber Systems Protection Act (Bill C-8) introduces a strict 72-hour cyber incident reporting mandate. Find out how Tenable is helping critical national…
Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers
Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. The cloud computing giant linked…
CISA Warns of Cisco Secure Firewall Management 0-Day Vulnerability Exploited in Attacks
CISA has issued a warning regarding a serious vulnerability in the Cisco Secure Firewall Management Center (FMC), which is currently being exploited in attacks. The…