US unseals charges, offers reward for info on alleged Russian hackers
US authorities have unsealed charges and offered a US$10 million ($14.3 million) reward for information on three Russians accused of providing computer infrastructure related to…
Month: July 2026
Windows Bind Link Attacks Can Hide Malware From EDR Tools
Security researchers at Bitdefender have demonstrated three attack techniques in which Windows’ bind links can be used to evade endpoint detection and response (EDR) products.…
AsyncAPI npm Supply Chain Attack: Malware Injected Into Packages With 2 Million Weekly Downloads
AsyncAPI npm Supply Chain Attack: Malware Injected Into Packages With 2 Million Weekly Downloads Pierluigi Paganini July 15, 2026 AsyncAPI npm packages with 2M weekly…
When 80,000 fans log on at once: The 2026 World Cup’s unique cybersecurity issues
Secondly, in such a high-stakes, highly integrated environment, real-time monitoring and centralized visibility is crucial. With centralized visibility across the network, IT personnel can effectively…
Security Hub adds AI workload protection and multicloud support for Microsoft Azure
Security Hub is our foundation for full-stack enterprise security across clouds. It centralizes your security operations and turns raw signals into prioritized insights, so your…
CISA warns admins to patch actively exploited SharePoint flaws
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned Tuesday that attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances. These…
Critical SonicWall Firewall 0-Day Vulnerabilities Actively Exploited in Attacks
SonicWall has issued an urgent security advisory regarding two vulnerabilities affecting its SMA1000 Series appliances. The company is warning that attackers are actively exploiting these…
11 Malicious NuGet Game Cheat Packages Deploy Pepesoft Windows Surveillance Malware
11 malicious NuGet packages masquerading as game cheats, automation bots, and management “panels” that deploy a Windows payload called pepesoft.exe. The packages were published as…
AWS retools Security Hub for AI and multicloud threats
AWS added AI workload protection and Microsoft Azure security monitoring to Security Hub, its centralized security platform for collecting and prioritizing security findings across cloud…
This fake Apple app can unlock your Mac’s password vault
CrashStealer is a new macOS infostealer that masquerades as Apple’s CrashReporter component, uses an Apple‑notarized installer to slip past Gatekeeper, tricks users into handing over…
Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands
Ravie LakshmananJul 15, 2026Vulnerability / Enterprise Security SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Access (SMA) 1000 series appliances,…
ICO ‘less effective as a regulator’ due to toxic culture
A toxic workplace culture stemming from the UK’s Information Commissioner’s Office (ICO) senior leadership team meant staff felt unable to raise concerns or push back…