AI security agents are starting to influence real security decisions. They summarize findings, prioritize remediation, recommend next steps, and help […]
Category: Security
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials
Ravie LakshmananJul 14, 2026Cloud Security / Identity Security At least two distinct threat actors are weaponizing a novel evasion technique […]
Japan’s largest taxi operator Nihon Kotsu hit by cyberattack which forces systems to be shut down
(Image credit: Forcepint) Japan’s largest taxi operator confirms July 11 malware attack forcing shutdowns of its IT systems and disrupted […]
Grok Build Uploads Entire Git Repositories to xAI Storage, Not Just Files It Reads
xAI’s Grok Build coding CLI was uploading entire Git repositories, full commit history and all, to a Google Cloud Storage […]
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support
The U.S. Treasury Department’s Office of Foreign Assets Control (OFAC) has designated two individuals and a VPN service provider for […]
148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet
A campaign of 148 npm packages disguised as student web proxies turned visitors’ browsers into a distributed denial-of-service botnet for […]
Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity
Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting […]
The US government warns that Russia state hackers are coming after your router
The federal government is warning users of home and small office routers to secure their devices as Russia state hackers […]
Watch out Windows users, a Secure Boot update has been blocked on Windows 11 PCs due to failing on some devices — here’s how to check if you’re affected
(Image credit: Shutterstock) Microsoft has blocked Secure Boot updates on some devices There have been issues with some devices updating […]
CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks
Ravie LakshmananJul 13, 2026Endpoint Security / Cybercrime Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that’s capable […]