News PricingLogin

§The archiveMon · Wed · FriM · W · F

News.

Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.

Follow on LinkedIn

Browse by topic

CVE & Vulnerabilities Ransomware Phishing & Social Engineering Data Breaches

sec-news.ai

About•Privacy Policy•Terms of Use•Submit or contribute•API Access•RSS

Built by Guillaume Bonnet · Questions or feedback? Reach out on LinkedIn

V U L N E R

Wednesday, July 15

Claude for Chrome Vulnerabilities Expose Sensitive Google Data to Extensions
Anthropic's Claude for Chrome extension has exploitable flaws enabling extensions to read Gmail, Docs, and Calendar data.
Jul 15·securityweek.com
cve & vulnerabilities cloud security securityweek.com
Zero-Day Vulnerability Forces Emergency Action on ShareFile Systems
Critical ShareFile Storage Zone Controller zero-day forced emergency shutdowns and prompted immediate vendor guidance and patches.
Jul 15·bleepingcomputer.com
cve & vulnerabilities bleepingcomputer.com
Microsoft's July 2026 Patch Tuesday Addresses Record 570 Vulnerabilities, Including Critical Zero-Days
Record Patch Tuesday: Microsoft released fixes for hundreds of vulnerabilities, including multiple zero-days; urgent prioritization required.
Jul 15·bleepingcomputer.com
cve & vulnerabilities bleepingcomputer.com

Monday, July 13

Global Exploitation Campaign Targets Vulnerable CMS Systems
Premium
ACSC warns of global exploitation campaign targeting vulnerable CMS platforms and plugins, urging patching and monitoring.
Jul 13·bleepingcomputer.com
cve & vulnerabilities bleepingcomputer.com

Previous1…171819…28Next

Dispatches 341–360 of 552 · Page 18 of 28

Get these articles delivered to your inbox.

Subscribe free

Ghostcommit Exploits Image Files to Evade AI Detection and Steal Data

Premium

Ghostcommit conceals prompt-injection payloads inside PNG images to bypass AI code reviewers and exfiltrate repo secrets.

Jul 13·bleepingcomputer.com

cve & vulnerabilities bleepingcomputer.com

Urgent Update Required: Critical XSS Vulnerability in Zimbra's Classic Web Client

Premium

Critical stored XSS in Zimbra Classic Web Client could execute crafted-email scripts and enable arbitrary code or session compromise.

Jul 13·thehackernews.com

cve & vulnerabilities thehackernews.com

CISA Reveals Lessons from AWS Credential Exposure Incident

Premium

CISA publishes after-action lessons following contractor exposure of AWS GovCloud credentials and IaC repos on public GitHub.

Jul 13·cybersecuritynews.com

cloud security cybersecuritynews.com

Injective Labs GitHub Breach Compromises Crypto Wallet Security

Premium

Compromise of Injective Labs' GitHub published @injectivelabs/[email protected] npm package that exfiltrates crypto wallet keys and seeds.

Jul 13·thehackernews.com

data breaches supply chain attacks thehackernews.com

Critical Security Flaw in Gitea Docker Image Under Active Exploitation

Premium

Critical auth-bypass in official Gitea Docker image is actively exploited to impersonate any user, including administrators.

Jul 13·bleepingcomputer.com

cve & vulnerabilities bleepingcomputer.com

RedHook Malware Leverages Wireless ADB for Enhanced Device Control

Premium

RedHook Android malware abuses Wireless ADB to obtain shell-level access and persistence on compromised devices.

Jul 13·bleepingcomputer.com

malware bleepingcomputer.com

Supreme Court Ruling Could Transform Use of License Plate Cameras in Policing

Premium

Supreme Court changes to location-tracking law could limit ALPR searches and reshape policing use of license-plate cameras.

Jul 13·therecord.media

therecord.media

Cyber Wargame Highlights AI's Role in Ransomware Threats to Critical Infrastructure

Premium

Wargame simulates water-sector attack; analysts warn that agentic AI speeds ransomware attack development and automation.

Jul 13·sans.org

ransomware sans.org

Fake QR Code Scams Surge, Threatening Financial Security

Premium

Rise in deceptive QR-code scams leading to credential theft, fraudulent payments and account takeover attempts.

Jul 13·news4hackers.com

news4hackers.com

Critical U-Boot Vulnerabilities Threaten Device Security with Potential Pre-Boot Code Execution

Premium

Six U-Boot vulnerabilities allow device crashes and potential pre-boot code execution, risking persistent firmware compromise.

Jul 13·thehackernews.com

cve & vulnerabilities thehackernews.com

GigaWiper: A New Threat in System-Level Sabotage

Premium

GigaWiper backdoor includes wiper, ransomware encryption and multi-pass wiping commands for destructive sabotage and espionage.

Jul 13·securityweek.com

ransomware malware securityweek.com

Cyberattacks on Healthcare Businesses Surge Amid Shift in Criminal Tactics

Premium

Attacks against healthcare service providers more than doubled in H1 2026 as criminals shift focus from hospitals to vendors.

Jul 13·darkreading.com

darkreading.com

Cryptocurrency Wallets Vulnerable to Ill Bloom Flaw as Over $5 Million Stolen

Premium

Ill Bloom wallet flaw in weak entropy for recovery phrases was exploited to drain over $5M from wallets.

Jul 13·thehackernews.com

cve & vulnerabilities thehackernews.com

Urgent Action Required: ShareFile Admins Advised to Shut Down Servers Amid Security Threat

Premium

Progress tells ShareFile Storage Zone Controller admins to immediately shut down servers to mitigate a credible external threat.

Jul 13·bleepingcomputer.com

bleepingcomputer.com

AI-Powered Forg365 Phishing Platform Targets Microsoft 365 Users

Premium

Forg365 provides AI-driven phishing, session theft and mailbox access to attack Microsoft 365 users via a subscription model.

Jul 13·cybersecuritynews.com

phishing & social engineering cybersecuritynews.com

Security Alert: Compromised Jscrambler npm Package Delivers Rust Infostealer

Premium

Malicious jscrambler npm v8.14.0 runs a preinstall hook that drops a cross-platform Rust infostealer during package install.

Jul 13·thehackernews.com

supply chain attacks malware thehackernews.com

News.

Claude for Chrome Vulnerabilities Expose Sensitive Google Data to Extensions

Zero-Day Vulnerability Forces Emergency Action on ShareFile Systems

Microsoft's July 2026 Patch Tuesday Addresses Record 570 Vulnerabilities, Including Critical Zero-Days

Global Exploitation Campaign Targets Vulnerable CMS Systems

Ghostcommit Exploits Image Files to Evade AI Detection and Steal Data

Urgent Update Required: Critical XSS Vulnerability in Zimbra's Classic Web Client

CISA Reveals Lessons from AWS Credential Exposure Incident

Injective Labs GitHub Breach Compromises Crypto Wallet Security

Critical Security Flaw in Gitea Docker Image Under Active Exploitation

RedHook Malware Leverages Wireless ADB for Enhanced Device Control

Supreme Court Ruling Could Transform Use of License Plate Cameras in Policing

Cyber Wargame Highlights AI's Role in Ransomware Threats to Critical Infrastructure

Fake QR Code Scams Surge, Threatening Financial Security

Critical U-Boot Vulnerabilities Threaten Device Security with Potential Pre-Boot Code Execution

GigaWiper: A New Threat in System-Level Sabotage

Cyberattacks on Healthcare Businesses Surge Amid Shift in Criminal Tactics

Cryptocurrency Wallets Vulnerable to Ill Bloom Flaw as Over $5 Million Stolen

Urgent Action Required: ShareFile Admins Advised to Shut Down Servers Amid Security Threat

AI-Powered Forg365 Phishing Platform Targets Microsoft 365 Users

Security Alert: Compromised Jscrambler npm Package Delivers Rust Infostealer