INC Ransomware is Calling Victims
INC Ransomware is Calling Victims – Pressure Tactics Post SonicWall Zero-Day Exploit Pierluigi Paganini August 04, 2026 INC Ransomware exploits SonicWall SMA 1000 flaws, using…
Latest Cybersecurity News — Page 190
View all →
Intigriti named new provider for Adobe’s Bug Bounty Program
Adobe empowers everyone to create through industry-leading platforms and tools that unleash creativity, productivity, and personalized customer experiences. Starting September 1, 2026, Intigriti will be…
Case study: How Burp AT helped expose whistleblower reports via a critical vulnerability that was overlooked for years | Blog
Andrzej Matykiewicz | Tuesday, 4 August 2026 at 14:45 UTC “It feels like I get 10X the productivity on an engagement. The difference is night…
Tech industry alliance proposes AI agent safety reporting program
The information-sharing exchange is designed to widely share lessons learned from agentic AI security incidents. Source link
Prolific ransomware group behind SonicWall zero-day attacks
Researchers said INC ransomware, one of the most active ransomware groups globally, has been the main attacker exploiting a pair of SonicWall zero-days soon after…
US AI leaders turn to Chinese open-weight models, challenging closed-source safety claims
More American titans of artificial intelligence are describing Chinese open-weight models as better for AI safety and security than closed-source models, challenging the long-standing claim…
Critical Azure Cosmos DB flaw threatened cross-tenant database takeover
Rather than evaluating managed database services primarily on features such as encryption, private networking, or identity controls, enterprises should examine how providers isolate tenant-controlled execution…
Wiz at Black Hat 2026: Driving AI Threat Readiness
In an age where frontier models can autonomously discover zero-day vulnerabilities and chain exploits at machine speed, vulnerabilities will be discovered and disclosed faster than…
Almost Half of Malware Samples Communicate Direct to IP
Executive Summary Malware samples often bypass DNS entirely, communicating directly to IP addresses instead. Our analysis of 4 million dynamic analysis reports indicates that almost…
Massive ChainDrop npm supply-chain attack infects hundreds of packages
Self-propagating malware named ‘ChainDrop’ has compromised more than 1,300 packages with a combined 2 billion monthly downloads on the Node Package Manager (npm) registry. Infected packages include…
Six Flowise RCE Flaws Let Attackers Execute Code on AI Workflow Servers
Flowise servers used to build AI agents and automated workflows are facing six newly disclosed remote code execution flaws. The weaknesses could allow authenticated attackers…
Fake Bank of America Phishing Emails Found Delivering Disguised ScreenConnect RAT via UAC Bypass
Researchers at Huntress have identified an active phishing campaign impersonating Bank of America that culminates in the covert installation of a remote monitoring and management…