Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot
Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied as home routers, smart cameras,…
Month: July 2026
Tesco VMware migration shows backup incompatibilities
The ongoing legal dispute between supermarket chain Tesco and Broadcom/VMware illustrates the challenges IT departments are likely to face if they plan to migrate to…
Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers
Organizations across multiple sectors have been targeted in a vishing campaign aimed at harvesting Microsoft 365 credentials, Okta warns. The campaign started in April and…
Former Ransomware Negotiator Sentenced to 70 Months in Prison for Secretly Helping BlackCat Gang
Former Ransomware Negotiator Sentenced to 70 Months in Prison for Secretly Helping BlackCat Gang Pierluigi Paganini July 10, 2026 A former ransomware negotiator was sentenced…
CISA credential leak prompts tighter security measures
A major credential leak spurred the Cybersecurity and Infrastructure Security Agency to strengthen protections for its sensitive materials, improve how researchers can report agency vulnerabilities…
Microsoft uncovers GigaWiper, a backdoor designed for destruction on demand
These integrations show up in the form of separate commands that the backdoor supports. One command performs raw physical disk wiping by overwriting drives and…
Securing AI Agents with Wiz AI-SPM
Artificial Intelligence is transforming how organizations operate — and intelligent agents are leading the charge. From copilots and remediation bots to data-driven assistants, these agents…
No Manners Here: The Ruthless Rise of The Gentlemen Ransomware
Executive Summary The Gentlemen (aka Storm-2697) is a Ransomware-as-a-Service (RaaS) program active since at least July 2025. Public reporting indicates that the operators were likely…
How the RaaS Business Model Actually Works
When most people hear the word “disruption,” they think about business growth, new markets, or a competitor making a bold move. Ransomware crews have their…
New U-Boot flaws could enable stealthy firmware attacks
Six vulnerabilities in the widely used U-Boot bootloader have been discovered that could allow attackers to execute malicious code during device boot, potentially enabling stealthy…
One WhatsApp Message Turns OpenClaw Into a Remote Access Tool for Hackers
Three high-severity vulnerabilities in OpenClaw, the open-source AI coding assistant with 381,000 GitHub stars, that allow attackers to achieve remote code execution through a single…
Hackers Exploit CitrixBleed 2 to Hijack MFA-Protected Sessions and Deploy DragonForce Ransomware
Threat actors are exploiting the CitrixBleed 2 vulnerability, tracked as CVE-2025-5777, to hijack active NetScaler sessions protected by multi-factor authentication and gain a foothold in…